mirror of
https://github.com/ceph/ceph
synced 2025-01-23 19:46:56 +00:00
doc: When bootstrapping mon set the correct caps for client.admin
Otherwise client.admin will be privilege-less and the admin can't access the cluster.
This commit is contained in:
parent
08a97ae45f
commit
991139bc0d
@ -42,7 +42,7 @@ with a command like::
|
||||
When creating a new monitor cluster, the keyring should also contain a ``client.admin`` key that can be used
|
||||
to administer the system::
|
||||
|
||||
ceph-authtool /path/to/keyring --gen-key -n client.admin
|
||||
ceph-authtool /path/to/keyring --gen-key -n client.admin --set-uid=0 --cap mon 'allow *' --cap osd 'allow *' --cap mds 'allow'
|
||||
|
||||
The resulting keyring is fed to ``ceph-mon --mkfs`` with the ``--keyring <keyring>`` command-line argument.
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user