2015-02-23 18:58:16 |
Florian Haas |
bug |
|
|
added bug |
2015-02-23 18:58:32 |
Florian Haas |
description |
The cephx identities, which the charms generate for the glance, cinder and nova-compute, have excessive capabilities. They allow write access to mons, and unrestricted access to OSDs.
The following caps should be sufficient:
For client.glance:
mon = "allow r"
osd = "allow rw pool=glance"
For client.cinder:
mon = "allow r"
osd = "allow rw pool=cinder"
For client.nova-compute:
mon = "allow r"
osd = "allow rwx pool=cinder" |
The cephx identities, which the charms generate for glance, cinder and nova-compute, have excessive capabilities. They allow write access to mons, and unrestricted access to OSDs.
The following caps should be sufficient:
For client.glance:
mon = "allow r"
osd = "allow rw pool=glance"
For client.cinder:
mon = "allow r"
osd = "allow rw pool=cinder"
For client.nova-compute:
mon = "allow r"
osd = "allow rwx pool=cinder" |
|
2015-03-16 11:51:11 |
James Page |
ceph (Juju Charms Collection): importance |
Undecided |
Medium |
|
2015-03-16 11:51:13 |
James Page |
ceph (Juju Charms Collection): status |
New |
Triaged |
|
2015-03-16 11:52:00 |
James Page |
ceph (Juju Charms Collection): milestone |
|
15.04 |
|
2015-04-23 10:46:36 |
James Page |
tags |
|
openstack |
|
2015-04-23 10:46:42 |
James Page |
ceph (Juju Charms Collection): milestone |
15.04 |
15.07 |
|
2015-08-10 16:48:52 |
James Page |
ceph (Juju Charms Collection): milestone |
15.07 |
15.10 |
|
2015-10-22 14:01:24 |
James Page |
ceph (Juju Charms Collection): milestone |
15.10 |
16.01 |
|
2016-01-28 14:09:29 |
James Page |
ceph (Juju Charms Collection): milestone |
16.01 |
16.04 |
|
2016-04-07 19:09:49 |
Chris Holcombe |
ceph (Juju Charms Collection): assignee |
|
Chris Holcombe (xfactor973) |
|
2016-04-22 08:25:25 |
James Page |
ceph (Juju Charms Collection): milestone |
16.04 |
16.07 |
|
2016-04-28 15:35:32 |
Edward Hope-Morley |
bug task added |
|
ceph-mon (Juju Charms Collection) |
|
2016-04-28 15:35:36 |
Edward Hope-Morley |
ceph-mon (Juju Charms Collection): status |
New |
Triaged |
|
2016-04-28 15:35:38 |
Edward Hope-Morley |
ceph-mon (Juju Charms Collection): importance |
Undecided |
Critical |
|
2016-04-28 15:35:39 |
Edward Hope-Morley |
ceph-mon (Juju Charms Collection): importance |
Critical |
Medium |
|
2016-04-28 15:35:46 |
Edward Hope-Morley |
ceph-mon (Juju Charms Collection): milestone |
|
16.07 |
|
2016-07-29 07:21:41 |
Liam Young |
ceph (Juju Charms Collection): milestone |
16.07 |
16.10 |
|
2016-07-29 07:22:16 |
Liam Young |
ceph-mon (Juju Charms Collection): milestone |
16.07 |
16.10 |
|
2016-10-14 09:04:48 |
James Page |
ceph (Juju Charms Collection): milestone |
16.10 |
17.01 |
|
2016-10-14 09:05:31 |
James Page |
ceph-mon (Juju Charms Collection): milestone |
16.10 |
17.01 |
|
2016-10-17 07:41:46 |
James Page |
bug task added |
|
cinder (Juju Charms Collection) |
|
2016-10-17 07:41:59 |
James Page |
bug task added |
|
glance (Juju Charms Collection) |
|
2016-10-17 07:42:40 |
James Page |
bug task added |
|
nova-compute (Juju Charms Collection) |
|
2016-10-17 07:42:48 |
James Page |
cinder (Juju Charms Collection): importance |
Undecided |
Medium |
|
2016-10-17 07:42:49 |
James Page |
glance (Juju Charms Collection): importance |
Undecided |
Medium |
|
2016-10-17 07:42:52 |
James Page |
nova-compute (Juju Charms Collection): importance |
Undecided |
Medium |
|
2016-10-17 07:42:55 |
James Page |
cinder (Juju Charms Collection): milestone |
|
17.01 |
|
2016-10-17 07:42:58 |
James Page |
glance (Juju Charms Collection): milestone |
|
17.01 |
|
2016-10-17 07:42:59 |
James Page |
nova-compute (Juju Charms Collection): milestone |
|
17.01 |
|
2016-10-17 07:43:01 |
James Page |
cinder (Juju Charms Collection): status |
New |
Triaged |
|
2016-10-17 07:43:04 |
James Page |
glance (Juju Charms Collection): status |
New |
Triaged |
|
2016-10-17 07:43:06 |
James Page |
nova-compute (Juju Charms Collection): status |
New |
Triaged |
|
2016-10-17 07:53:59 |
James Page |
bug task added |
|
charms.openstack |
|
2016-10-17 07:54:05 |
James Page |
charms.openstack: status |
New |
Triaged |
|
2016-10-17 07:54:07 |
James Page |
charms.openstack: importance |
Undecided |
Medium |
|
2016-10-19 14:10:23 |
Edward Hope-Morley |
tags |
openstack |
openstack sts |
|
2016-10-31 16:28:13 |
Dominique Poulain |
bug |
|
|
added subscriber Dominique Poulain |
2016-12-13 11:04:23 |
James Page |
ceph (Juju Charms Collection): status |
Triaged |
In Progress |
|
2016-12-15 13:09:31 |
Ante Karamatić |
tags |
openstack sts |
4010 openstack sts |
|
2017-02-14 21:03:58 |
James Page |
bug task added |
|
cinder-ceph (Juju Charms Collection) |
|
2017-02-14 21:04:06 |
James Page |
cinder-ceph (Juju Charms Collection): status |
New |
Triaged |
|
2017-02-14 21:04:15 |
James Page |
ceph (Juju Charms Collection): assignee |
Chris Holcombe (xfactor973) |
Chris MacNaughton (chris.macnaughton) |
|
2017-02-14 21:04:19 |
James Page |
ceph-mon (Juju Charms Collection): status |
Triaged |
In Progress |
|
2017-02-14 21:04:21 |
James Page |
cinder (Juju Charms Collection): status |
Triaged |
In Progress |
|
2017-02-14 21:04:23 |
James Page |
cinder-ceph (Juju Charms Collection): status |
Triaged |
In Progress |
|
2017-02-14 21:04:27 |
James Page |
charms.openstack: status |
Triaged |
In Progress |
|
2017-02-14 21:04:29 |
James Page |
glance (Juju Charms Collection): status |
Triaged |
In Progress |
|
2017-02-14 21:04:31 |
James Page |
nova-compute (Juju Charms Collection): status |
Triaged |
In Progress |
|
2017-02-14 21:04:52 |
James Page |
ceph-mon (Juju Charms Collection): assignee |
|
Chris MacNaughton (chris.macnaughton) |
|
2017-02-14 21:04:55 |
James Page |
cinder-ceph (Juju Charms Collection): milestone |
|
17.01 |
|
2017-02-14 21:22:26 |
James Page |
bug task added |
|
ceph-radosgw (Juju Charms Collection) |
|
2017-02-14 21:22:33 |
James Page |
ceph-radosgw (Juju Charms Collection): status |
New |
In Progress |
|
2017-02-14 21:22:36 |
James Page |
ceph-radosgw (Juju Charms Collection): importance |
Undecided |
Medium |
|
2017-02-14 21:22:38 |
James Page |
cinder-ceph (Juju Charms Collection): importance |
Undecided |
Medium |
|
2017-02-14 21:22:43 |
James Page |
ceph-radosgw (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 21:22:45 |
James Page |
cinder (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 21:22:48 |
James Page |
cinder-ceph (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 21:22:50 |
James Page |
glance (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 21:22:52 |
James Page |
nova-compute (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 21:22:57 |
James Page |
ceph-radosgw (Juju Charms Collection): milestone |
|
17.01 |
|
2017-02-14 21:47:31 |
James Page |
charms.openstack: status |
In Progress |
Fix Released |
|
2017-02-14 22:53:31 |
Chris MacNaughton |
ceph (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-14 22:53:33 |
Chris MacNaughton |
ceph-mon (Juju Charms Collection): status |
In Progress |
Fix Committed |
|
2017-02-23 18:30:22 |
James Page |
charm-nova-compute: importance |
Undecided |
Medium |
|
2017-02-23 18:30:22 |
James Page |
charm-nova-compute: status |
New |
Fix Committed |
|
2017-02-23 18:30:26 |
James Page |
nova-compute (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:37:50 |
James Page |
charm-ceph: importance |
Undecided |
Medium |
|
2017-02-23 18:37:50 |
James Page |
charm-ceph: status |
New |
Fix Committed |
|
2017-02-23 18:37:50 |
James Page |
charm-ceph: assignee |
|
Chris MacNaughton (chris.macnaughton) |
|
2017-02-23 18:37:52 |
James Page |
ceph (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:39:45 |
James Page |
charm-ceph-mon: importance |
Undecided |
Medium |
|
2017-02-23 18:39:45 |
James Page |
charm-ceph-mon: status |
New |
Fix Committed |
|
2017-02-23 18:39:45 |
James Page |
charm-ceph-mon: assignee |
|
Chris MacNaughton (chris.macnaughton) |
|
2017-02-23 18:39:47 |
James Page |
ceph-mon (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:43:41 |
James Page |
charm-ceph-radosgw: importance |
Undecided |
Medium |
|
2017-02-23 18:43:41 |
James Page |
charm-ceph-radosgw: status |
New |
Fix Committed |
|
2017-02-23 18:43:42 |
James Page |
ceph-radosgw (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:45:06 |
James Page |
charm-cinder: importance |
Undecided |
Medium |
|
2017-02-23 18:45:06 |
James Page |
charm-cinder: status |
New |
Fix Committed |
|
2017-02-23 18:45:08 |
James Page |
cinder (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:46:48 |
James Page |
charm-cinder-ceph: importance |
Undecided |
Medium |
|
2017-02-23 18:46:48 |
James Page |
charm-cinder-ceph: status |
New |
Fix Committed |
|
2017-02-23 18:46:50 |
James Page |
cinder-ceph (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 18:47:31 |
James Page |
charm-glance: importance |
Undecided |
Medium |
|
2017-02-23 18:47:31 |
James Page |
charm-glance: status |
New |
Fix Committed |
|
2017-02-23 18:47:33 |
James Page |
glance (Juju Charms Collection): status |
Fix Committed |
Invalid |
|
2017-02-23 19:38:45 |
James Page |
charm-nova-compute: milestone |
|
17.02 |
|
2017-02-23 19:39:10 |
James Page |
charm-ceph: milestone |
|
17.02 |
|
2017-02-23 19:39:15 |
James Page |
charm-ceph-mon: milestone |
|
17.02 |
|
2017-02-23 19:39:21 |
James Page |
charm-ceph-radosgw: milestone |
|
17.02 |
|
2017-02-23 19:39:30 |
James Page |
charm-cinder: milestone |
|
17.02 |
|
2017-02-23 19:39:34 |
James Page |
charm-cinder-ceph: milestone |
|
17.02 |
|
2017-02-23 19:39:37 |
James Page |
charm-glance: milestone |
|
17.02 |
|
2017-02-23 20:38:08 |
James Page |
charm-nova-compute: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:16 |
James Page |
charm-ceph: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:20 |
James Page |
charm-ceph-mon: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:25 |
James Page |
charm-ceph-radosgw: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:31 |
James Page |
charm-cinder: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:34 |
James Page |
charm-cinder-ceph: status |
Fix Committed |
Fix Released |
|
2017-02-23 20:39:36 |
James Page |
charm-glance: status |
Fix Committed |
Fix Released |
|