ceph: keys: add mgr allow * to client.admin

needed for data that now gets queried via the mgr instead of
via the mon.

diff --git a/PVE/API2/Ceph.pm b/PVE/API2/Ceph.pm
index 7656d5f1a8587989e7e1315a60712e6888907b30..9378095cfc6fff6e59aed854914724f6b5d292d4 100644 (file)
--- a/PVE/API2/Ceph.pm
+++ b/PVE/API2/Ceph.pm
@@ -930,6 +930,7 @@ __PACKAGE__->register_method ({
                run_command("ceph-authtool $pve_mon_key_path.tmp -n client.admin --set-uid=0 " .
                            "--cap mds 'allow' " .
                            "--cap osd 'allow *' " .
+                           "--cap mgr 'allow *' " .
                            "--cap mon 'allow *'");
                run_command("cp $pve_mon_key_path.tmp /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;
                run_command("chown ceph:ceph /etc/ceph/ceph.client.admin.keyring") if $systemd_managed;