You could try something similar to what was described here [1]: mon 'profile rbd' osd 'allow class-read object_prefix rbd_children, allow r class-read object_prefix rbd_directory, allow r class-read object_prefix rbd_id.', allow rwx object_prefix rbd_header., allow rwx object_prefix rbd_data., allow rwx object_prefix rbd_object_map.' [1] http://lists.ceph.com/pipermail/ceph-users-ceph.com/2016-March/008320.html On Sat, Feb 16, 2019 at 5:43 AM Marc Roos <M.Roos@xxxxxxxxxxxxxxxxx> wrote: > > > Currently I am using 'profile rbd' on mon and osd. Is it possible with > the caps to allow a user to > > - List rbd images > - get state of images > - write/read to images > Etc > > But do not allow to have it create new images? > > > > > > > > > _______________________________________________ > ceph-users mailing list > ceph-users@xxxxxxxxxxxxxx > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com -- Jason _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |