[pve-devel] applied: [PATCH manager] ceph: keys: add mgr allow * to client.admin

[Fabian Grünbichler]

needed for data that now gets queried via the mgr instead of
via the mon.

Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
---
 PVE/API2/Ceph.pm | 1 +
 1 file changed, 1 insertion(+)

diff --git a/PVE/API2/Ceph.pm b/PVE/API2/Ceph.pm
index 7656d5f1..9378095c 100644
--- a/PVE/API2/Ceph.pm
+++ b/PVE/API2/Ceph.pm
@@ -930,6 +930,7 @@ __PACKAGE__->register_method ({
 		run_command("ceph-authtool $pve_mon_key_path.tmp -n client.admin --set-uid=0 " .
 			    "--cap mds 'allow' " .
 			    "--cap osd 'allow *' " .
+			    "--cap mgr 'allow *' " .
 			    "--cap mon 'allow *'");
 		run_command("cp $pve_mon_key_path.tmp /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;
 		run_command("chown ceph:ceph /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;
-- 
2.11.0