Hello,
"ceph-rest-api" works greatly with client.admin.
But with client.test-admin which I created just after building the Ceph cluster
, it does not work.
~$ ceph auth get-or-create client.test-admin mon 'allow *' mds 'allow *' osd
'allow *'
~$ sudo ceph auth list
installed auth entries:
Hi all,
Same question with CEPH 10.2.3 and 11.2.0.
Is this command only for client.admin ?
client.symphony
key: AQD0tdRYjhABEhAAaG49VhVXBTw0MxltAiuvgg==
caps: [mon] allow *
caps: [osd] allow *
Traceback (most recent call last):
File "/usr/bin/ceph-rest-api", line
On Fri, Mar 24, 2017 at 4:06 PM, Mika c wrote:
> Hi all,
> Same question with CEPH 10.2.3 and 11.2.0.
> Is this command only for client.admin ?
>
> client.symphony
>key: AQD0tdRYjhABEhAAaG49VhVXBTw0MxltAiuvgg==
>caps: [mon] allow *
>caps: [osd] allow *
>
> Traceb
Hi Brad,
Thanks for your reply. The environment already created keyring file
and put it in /etc/ceph but not working.
I have to write config into ceph.conf like below.
---ceph.conf start---
[client.symphony]
log_file = /
var/log/ceph/rest-api.log
keyring = /etc/ceph/ceph.client.symp
On Fri, Mar 24, 2017 at 8:20 PM, Mika c wrote:
> Hi Brad,
> Thanks for your reply. The environment already created keyring file and
> put it in /etc/ceph but not working.
What was it called?
> I have to write config into ceph.conf like below.
>
> ---ceph.conf start---
> [client.symp
Hi Brad,
Thanks for your help. I found that's my problem. Forget attach file name
with words ''keyring".
And sorry to bother you again. Is it possible to create a minimum privilege
client for the api to run？
Best wishes,
Mika
2017-03-24 19:32 GMT+08:00 Brad Hubbard :
> On Fri, Mar 24, 201
I've copied Dan who may have some thoughts on this and has been
involved with this code.
On Tue, Mar 28, 2017 at 3:58 PM, Mika c wrote:
> Hi Brad,
>Thanks for your help. I found that's my problem. Forget attach file name
> with words ''keyring".
>
> And sorry to bother you again. Is it possib
It looks like, while the mon allows 'get_command_descriptions' with no
privilege (other than basic auth), the same is not true of osd or mds.
I don't know if that's the only thing that would prevent a 'readonly'
ceph-rest-api (or ceph CLI or other programs that use the
mon_command/osd_command inter
Does anyone have any idea about that?
Rgds,
Shinobu
- Original Message -
From: "Shinobu Kinjo"
To: "ceph-users"
Sent: Friday, January 22, 2016 7:15:36 AM
Subject: ceph-rest-api's behavior
Hello,
"ceph-rest-api" works greatly with client.admin.
But with client.test-admin which I create
Is the client.test-admin key in the keyring read by ceph-rest-api?
On 01/22/2016 04:05 PM, Shinobu Kinjo wrote:
> Does anyone have any idea about that?
>
> Rgds,
> Shinobu
>
> - Original Message -
> From: "Shinobu Kinjo"
> To: "ceph-users"
> Sent: Friday, January 22, 2016 7:15:36 AM
>
Yes.
On Wed, Jan 27, 2016 at 1:10 PM, Dan Mick wrote:
> Is the client.test-admin key in the keyring read by ceph-rest-api?
>
> On 01/22/2016 04:05 PM, Shinobu Kinjo wrote:
>> Does anyone have any idea about that?
>>
>> Rgds,
>> Shinobu
>>
>> - Original Message -
>> From: "Shinobu Kinjo"
11 matches
Mail list logo
