Re: [ceph-users] Ceph auth caps 'create rbd image' permission

2019-02-18 Thread Jason Dillaman
You could try something similar to what was described here [1]:

mon 'profile rbd' osd 'allow class-read object_prefix rbd_children,
allow r class-read object_prefix rbd_directory, allow r class-read
object_prefix rbd_id.', allow rwx object_prefix rbd_header., allow rwx
object_prefix rbd_data., allow rwx object_prefix rbd_object_map.'

[1] http://lists.ceph.com/pipermail/ceph-users-ceph.com/2016-March/008320.html

On Sat, Feb 16, 2019 at 5:43 AM Marc Roos  wrote:
>
>
> Currently I am using 'profile rbd' on mon and osd. Is it possible with
> the caps to allow a user to
>
> - List rbd images
> - get state of images
> - write/read to images
> Etc
>
> But do not allow to have it create new images?
>
>
>
>
>
>
>
>
> ___
> ceph-users mailing list
> ceph-users@lists.ceph.com
> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com



-- 
Jason
___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com


[ceph-users] Ceph auth caps 'create rbd image' permission

2019-02-16 Thread Marc Roos


Currently I am using 'profile rbd' on mon and osd. Is it possible with 
the caps to allow a user to

- List rbd images
- get state of images
- write/read to images
Etc

But do not allow to have it create new images?








___
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com