You could try something similar to what was described here [1]:
mon 'profile rbd' osd 'allow class-read object_prefix rbd_children,
allow r class-read object_prefix rbd_directory, allow r class-read
object_prefix rbd_id.', allow rwx object_prefix rbd_header., allow rwx
object_prefix rbd_data.,
Currently I am using 'profile rbd' on mon and osd. Is it possible with
the caps to allow a user to
- List rbd images
- get state of images
- write/read to images
Etc
But do not allow to have it create new images?
___
ceph-users mailing list
