diff --git a/doc/source/configuration/cephadm.rst b/doc/source/configuration/cephadm.rst index 6f44eb765..7dfaaad40 100644 --- a/doc/source/configuration/cephadm.rst +++ b/doc/source/configuration/cephadm.rst @@ -243,7 +243,7 @@ for Cinder, Cinder backup, Glance, and Nova in Kolla Ansible. - name: client.cinder caps: mon: "profile rbd" - osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd-read-only pool=images" + osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd pool=images" mgr: "profile rbd pool=volumes, profile rbd pool=vms" - name: client.cinder-backup caps: diff --git a/etc/kayobe/environments/aufn-ceph/cephadm.yml b/etc/kayobe/environments/aufn-ceph/cephadm.yml index 2b8457dca..52ebe77b9 100644 --- a/etc/kayobe/environments/aufn-ceph/cephadm.yml +++ b/etc/kayobe/environments/aufn-ceph/cephadm.yml @@ -46,7 +46,7 @@ cephadm_keys: - name: client.cinder caps: mon: "profile rbd" - osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd-read-only pool=images" + osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd pool=images" mgr: "profile rbd pool=volumes, profile rbd pool=vms" state: present - name: client.cinder-backup diff --git a/etc/kayobe/environments/ci-multinode/cephadm.yml b/etc/kayobe/environments/ci-multinode/cephadm.yml index 7885a5735..7095ea70c 100644 --- a/etc/kayobe/environments/ci-multinode/cephadm.yml +++ b/etc/kayobe/environments/ci-multinode/cephadm.yml @@ -47,7 +47,7 @@ cephadm_keys: - name: client.cinder caps: mon: "profile rbd" - osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd-read-only pool=images" + osd: "profile rbd pool=volumes, profile rbd pool=vms, profile rbd pool=images" mgr: "profile rbd pool=volumes, profile rbd pool=vms" state: present - name: client.cinder-backup diff --git a/releasenotes/notes/adjust-ceph-permissions-on-images-for-cinder-user-3154b995916ee27e.yaml b/releasenotes/notes/adjust-ceph-permissions-on-images-for-cinder-user-3154b995916ee27e.yaml new file mode 100644 index 000000000..be142c63c --- /dev/null +++ b/releasenotes/notes/adjust-ceph-permissions-on-images-for-cinder-user-3154b995916ee27e.yaml @@ -0,0 +1,10 @@ +--- +fixes: + - | + Adjusts the documented permissions for the images pool for the Cinder user. + This is to support copy on write snapshots of VMs using Ceph backed + ephemeral storage. Existing deployments will need to manually adjust these + values using the CLI (the collection is currently not smart enough to do this): + ``ceph auth caps client.cinder mon 'profile rbd' osd 'profile rbd + pool=volumes, profile rbd pool=vms, profile rbd pool=images' mgr 'profile + rbd pool=volumes, profile rbd pool=vms'``.