Skip to main content

Confirming that a CephX client has access to multiple RBD pools

Problem​

A single CephX client needs permissions to access multiple RBD pools.

Solution​

In this example, you will use the ceph auth get-or-create command to create an authorization profile called profile rbd that grants client.proxmox access to the RBD pools proxmox-hot-tier, proxmox-warm-tier, and proxmox-cold-tier.

  1. Run the following command to create a profile called profile rbd that grants access to the three pools:

    root@ceph/# ceph auth get-or-create client.proxmox mon
    'profile rbd' osd 'profile rbd pool=proxmox-hot-tier,profile rbd
    pool=proxmox-warm-tier,profile rbd pool=proxmox-cold-tier'
    [client.proxmox]
        key = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==

  2. Use the ceph auth get command to confirm that the permissions were correctly granted:

    root@st-diz-ceph-mon4:/# ceph auth get client.proxmox
    [client.proxmox]
        key = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==
        caps mon = "profile rbd"
        caps osd = "profile rbd pool=proxmox-hot-tier,profile rbd
    pool=proxmox-warm-tier,profile rbd pool=proxmox-cold-tier"