[Bug 1424771] Fix merged to charm-ceph (master)

OpenStack Infra 1424771 at bugs.launchpad.net
Tue Feb 14 21:04:00 UTC 2017


Reviewed:  https://review.openstack.org/433863
Committed: https://git.openstack.org/cgit/openstack/charm-ceph/commit/?id=024fe9215fe1ada7a5c4f2e44fb315a3486120be
Submitter: Jenkins
Branch:    master

commit 024fe9215fe1ada7a5c4f2e44fb315a3486120be
Author: Chris MacNaughton <chris.macnaughton at canonical.com>
Date:   Tue Feb 14 13:09:05 2017 -0600

    remove upgrade_keys
    
    This function is no longer necessary as we do
    not need to ensure that the remote units can
    create their own pools
    
    Change-Id: I7e46b97ad2bb18a6e11a393a34f40e9bf51445c7
    Partial-Bug: 1424771

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to cinder in Juju Charms Collection.
Matching subscriptions: charm-bugs
https://bugs.launchpad.net/bugs/1424771

Title:
  Excessive caps for CephX users glance, cinder, nova-compute

Status in charms.openstack:
  In Progress
Status in ceph package in Juju Charms Collection:
  In Progress
Status in ceph-mon package in Juju Charms Collection:
  In Progress
Status in cinder package in Juju Charms Collection:
  In Progress
Status in cinder-ceph package in Juju Charms Collection:
  In Progress
Status in glance package in Juju Charms Collection:
  In Progress
Status in nova-compute package in Juju Charms Collection:
  In Progress

Bug description:
  The cephx identities, which the charms generate for glance, cinder and
  nova-compute, have excessive capabilities. They allow write access to
  mons, and unrestricted access to OSDs.

  The following caps should be sufficient:

  For client.glance:
  mon = "allow r"
  osd = "allow rw pool=glance"

  For client.cinder:
  mon = "allow r"
  osd = "allow rw pool=cinder"

  For client.nova-compute:
  mon = "allow r"
  osd = "allow rwx pool=cinder"

To manage notifications about this bug go to:
https://bugs.launchpad.net/charms.openstack/+bug/1424771/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list