v0.72.3 Emperor (pending release)

Upgrading

  • Monitor ‘auth’ read-only commands now expect the user to have ‘rx’ caps.This is the same behavior that was present in dumpling, but in emperorand more recent development releases the ‘r’ cap was sufficient. Note thatthis backported security fix will break mon keys that are using the followingcommands but do not have the ‘x’ bit in the mon capability:
  1. ceph auth export
  2. ceph auth get
  3. ceph auth get-key
  4. ceph auth print-key
  5. ceph auth list