cephx key for CephFS access only

[Travis Rhoden <trhoden@xxxxxxxxx>]

Hi Folks,

What would be the right set of capabilities to set for a new client key that has access to CephFS only?  I've seen a few different examples:

[1] mds 'allow *' mon 'allow r' osd 'allow rwx pool=data'
[2] mon 'allow r' osd 'allow rwx pool=data'

[3] mds 'allow rwx' mon 'allow r' osd 'allow rwx pool=data'

I'm inclined to go with [3]. [1] seems weird for using *, I like seeing rwx. Are these synonymous? [2] seems wrong because it doesn't include anything for MDS.

- Travis

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com