From d197634b4b219279bbe7e819a59f5618e17df0c0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fabian=20Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com>
Date: Tue, 27 Jun 2017 16:42:16 +0200
Subject: [PATCH] ceph: keys: add mgr allow * to client.admin

needed for data that now gets queried via the mgr instead of
via the mon.
---
 PVE/API2/Ceph.pm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/PVE/API2/Ceph.pm b/PVE/API2/Ceph.pm
index 7656d5f1..9378095c 100644
--- a/PVE/API2/Ceph.pm
+++ b/PVE/API2/Ceph.pm
@@ -930,6 +930,7 @@ __PACKAGE__->register_method ({
 		run_command("ceph-authtool $pve_mon_key_path.tmp -n client.admin --set-uid=0 " .
 			    "--cap mds 'allow' " .
 			    "--cap osd 'allow *' " .
+			    "--cap mgr 'allow *' " .
 			    "--cap mon 'allow *'");
 		run_command("cp $pve_mon_key_path.tmp /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;
 		run_command("chown ceph:ceph /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;