On Fri, May 24, 2019 at 6:09 PM Marc Roos <M.Roos@xxxxxxxxxxxxxxxxx> wrote: > > > I have still some account listing either "allow" or not. What should > this be? Should this not be kept uniform? What if the profile in the future adds denials? What does "allow profile XYX" (or "deny profile rbd") mean when it has other embedded logic? That was at least the thought about how to address a grouped ACL (i.e. the "allow" prefix doesn't make much sense). > > > [client.xxx.xx] > key = xxxxxxxxxxx > caps mon = "allow profile rbd" > caps osd = "profile rbd pool=rbd,profile rbd pool=rbd.ssd" > > > > [client.xxx] > key = xxxxxxxxxxxxxxxx > caps mon = "profile rbd" > > > > > > _______________________________________________ > ceph-users mailing list > ceph-users@xxxxxxxxxxxxxx > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com -- Jason _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |