root@Aloe-III-Cephmona:~# ceph auth caps client.cinder mon 'allow rw' osd 'allow class-read object_prefix rbd_children, allow rwx pool=glance,allow rwx pool=cinder,allow rwx pool=cinderbackup'
cinder 用户需要具备对mon的rw权限,才能自动对volume进行rbd snap rm/unprotected/lock remove 等动作,否则对卷的操作就失败, 是因为没有权限的原因,如:
root@Aloe-III-SP-Blocknode2:~/cinder-init-and-config-ceph.sh# rbd --id cinder lock remove cinder/volume-95b5d94d-8e2b-47b5-bd0d-b339a9e29c44 "auto 140348660000368" client.1470151
rbd: releasing lock failed:(13)Permission denied
2018-10-31 11:56:51.204406 7f2a09e700c0 -1 librbd: unable to blacklist client:(13)Permission denied
ceph及openstack文档在这个地方给出的配置样例一直有问题,害苦了大家。
网友评论