Comment 2 for bug 1696073

Waiting for the following to land:

https://review.openstack.org/#/c/527690/
https://github.com/juju/charm-helpers/pull/76

Once they have landed ceph-osd and ceph-mon will need a charms.ceph sync.
cinder, cinder-ceph, nova-compute & glance will need a charmhelper sync and will need their add_op_request_access_to_group call updated to set rbd_children object perm. For glance this will be mean changing:

rq.add_op_request_access_to_group(
    name="images",
    permission='rwx')

to

rq.add_op_request_access_to_group(
    name="images",
    object_prefix_permissions={'class-read': ['rbd_children']},
    permission='rwx')