Hi Folks,

What would be the right set of capabilities to set for a new client key
that has access to CephFS only?  I've seen a few different examples:

[1] mds 'allow *' mon 'allow r' osd 'allow rwx pool=data'
[2] mon 'allow r' osd 'allow rwx pool=data'
[3] mds 'allow rwx' mon 'allow r' osd 'allow rwx pool=data'

I'm inclined to go with [3]. [1] seems weird for using *, I like seeing
rwx. Are these synonymous? [2] seems wrong because it doesn't include
anything for MDS.

- Travis
_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

Reply via email to