It looks like, while the mon allows 'get_command_descriptions' with no privilege (other than basic auth), the same is not true of osd or mds. I don't know if that's the only thing that would prevent a 'readonly' ceph-rest-api (or ceph CLI or other programs that use the mon_command/osd_command interfaces), but it's certainly a stopper. On 03/27/2017 11:07 PM, Brad Hubbard wrote: > I've copied Dan who may have some thoughts on this and has been > involved with this code. > > On Tue, Mar 28, 2017 at 3:58 PM, Mika c <mika.leaf666@xxxxxxxxx> wrote: >> Hi Brad, >> Thanks for your help. I found that's my problem. Forget attach file name >> with words ''keyring". >> >> And sorry to bother you again. Is it possible to create a minimum privilege >> client for the api to run？ >> >> >> >> Best wishes, >> Mika _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |