default_caps are not up to date with ceph-mon: mon capabilities include write permissions

Bug #1794071 reported by Dmitrii Shcherbakov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Ceph-Proxy Charm
Fix Released
Medium
Dmitrii Shcherbakov

Bug Description

Currently default_caps in charm-ceph-proxy include this for newly created users:

_default_caps = {
    'mon': ['allow rw'],
    'osd': ['allow rwx']
}

While ceph-mon caps are as follows:
https://github.com/openstack/charm-ceph-mon/blob/stable/18.08/lib/ceph/utils.py#L1097-L1101
_default_caps = collections.OrderedDict([
    ('mon', ['allow r',
             'allow command "osd blacklist"']),
    ('osd', ['allow rwx']),
])

Tags: cpe-onsite
Changed in charm-ceph-proxy:
importance: Undecided → Medium
assignee: nobody → Dmitrii Shcherbakov (dmitriis)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to charm-ceph-proxy (master)

Fix proposed to branch: master
Review: https://review.openstack.org/604745

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to charm-ceph-proxy (master)

Reviewed: https://review.openstack.org/604745
Committed: https://git.openstack.org/cgit/openstack/charm-ceph-proxy/commit/?id=331e8451c6130fa6ce5d356a52c94f2ac78f4190
Submitter: Zuul
Branch: master

commit 331e8451c6130fa6ce5d356a52c94f2ac78f4190
Author: Dmitrii Shcherbakov <email address hidden>
Date: Thu Sep 20 04:35:29 2018 +0300

    modify default_caps to match current ceph-mon caps

    The current default caps in ceph-proxy are not up to date with
    charm-ceph-mon caps.

    Change-Id: Iaeb8d4dea9c36f522aeaddf54b19e4947c81a559
    Closes-Bug: #1794071

Changed in charm-ceph-proxy:
status: In Progress → Fix Committed
Changed in charm-ceph-proxy:
milestone: none → 18.11
David Ames (thedac)
Changed in charm-ceph-proxy:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.