GitHub-Proxy/ceph-csi
1
0
Fork 0
mirror of https://git.mirrors.martin98.com/https://github.com/ceph/ceph-csi.git synced 2025-08-15 01:55:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

doc: Update cephfs caps

Browse Source 
When cephfs is used with encryption an exclusive lock is acquired. This
needs the execute permission on the metadata pool.

Fixes: #4728
Signed-off-by: Felix Prasse <1330854+flx5@users.noreply.github.com>
This commit is contained in:
Felix Prasse 2025-04-28 21:05:41 +02:00 committed by mergify[bot]
parent c19f47226e
commit 031e900c7d
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/capabilities.md
View File

@ -28,7 +28,7 @@ capabilities:
``` ```
mgr "allow rw" mgr "allow rw"
osd "allow rw tag cephfs metadata=cephfs, allow rw tag cephfs data=cephfs" osd "allow rwx tag cephfs metadata=cephfs, allow rw tag cephfs data=cephfs"
mds "allow r fsname=cephfs path=/volumes, allow rws fsname=cephfs path=/volumes/csi" mds "allow r fsname=cephfs path=/volumes, allow rws fsname=cephfs path=/volumes/csi"
mon "allow r fsname=cephfs" mon "allow r fsname=cephfs"
``` ```
@ -63,7 +63,7 @@ FS_NAME=cephfs
SUB_VOL=csi SUB_VOL=csi
ceph auth get-or-create client.$USER \ ceph auth get-or-create client.$USER \
mgr "allow rw" \ mgr "allow rw" \
osd "allow rw tag cephfs metadata=$FS_NAME, allow rw tag cephfs data=$FS_NAME" \ osd "allow rwx tag cephfs metadata=$FS_NAME, allow rw tag cephfs data=$FS_NAME" \
mds "allow r fsname=$FS_NAME path=/volumes, allow rws fsname=$FS_NAME path=/volumes/$SUB_VOL" \ mds "allow r fsname=$FS_NAME path=/volumes, allow rws fsname=$FS_NAME path=/volumes/$SUB_VOL" \
mon "allow r fsname=$FS_NAME" mon "allow r fsname=$FS_NAME"
``` ```