Merge pull request rook#13072 from travisn/crash-keyring

core: Crash collector keyring requires rw access for the mgr profile
rkachach · Oct 23, 2023 · ffaf4a1 · ffaf4a1
2 parents 9d214b9 + a421143
commit ffaf4a1
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/pkg/operator/ceph/cluster/nodedaemon/keyring.go b/pkg/operator/ceph/cluster/nodedaemon/keyring.go
@@ -34,7 +34,7 @@ const (
 [client.crash]
 	key = %s
 	caps mon = "allow profile crash"
-	caps mgr = "allow profile crash"
+	caps mgr = "allow rw"
 `
 )
 
@@ -59,7 +59,7 @@ func CreateCrashCollectorSecret(context *clusterd.Context, clusterInfo *client.C
 func cephCrashCollectorKeyringCaps() []string {
 	return []string{
 		"mon", "allow profile crash",
-		"mgr", "allow profile crash",
+		"mgr", "allow rw",
 	}
 }
 

diff --git a/pkg/operator/ceph/cluster/nodedaemon/keyring_test.go b/pkg/operator/ceph/cluster/nodedaemon/keyring_test.go
@@ -24,5 +24,5 @@ import (
 
 func TestCephCrashCollectorKeyringCaps(t *testing.T) {
 	caps := cephCrashCollectorKeyringCaps()
-	assert.Equal(t, caps, []string{"mon", "allow profile crash", "mgr", "allow profile crash"})
+	assert.Equal(t, caps, []string{"mon", "allow profile crash", "mgr", "allow rw"})
 }