From f30323d5a15f8a483f991021e0ada2894887ac96 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=A9bastien=20Han?= Date: Tue, 4 Feb 2014 16:58:25 +0100 Subject: [PATCH] Fix CephX cinder user permissions The CephX cinder user must be able to write on his own pool. Previous permissions were "rx". Valid permissions are "rwx". Close #157 --- manifests/storage/rbd/pools.pp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/manifests/storage/rbd/pools.pp b/manifests/storage/rbd/pools.pp index 369f3d8a..9bea2bdf 100644 --- a/manifests/storage/rbd/pools.pp +++ b/manifests/storage/rbd/pools.pp @@ -49,7 +49,7 @@ class cloud::storage::rbd::pools( exec { 'create_cinder_volumes_user_and_key': # TODO: point PG num with a cluster variable - command => "ceph auth get-or-create client.${cinder_user} mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool=${glance_pool}, allow rx pool=${cinder_pool}'", + command => "ceph auth get-or-create client.${cinder_user} mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rx pool=${glance_pool}, allow rwx pool=${cinder_pool}'", unless => "ceph auth list 2> /dev/null | egrep -sq '^client.${cinder_user}$'", require => Exec['create_cinder_volumes_pool']; }