Hey all, the issue of non-consistently documented caps was discussed at last weeks Cinder weekly, [1]. My proposal still stands. Let's ....
* determine the correct caps (least privileges, caps via profiles where possible, ...)
* fix the documentation and code devstack as "upstreams" first * write an upgrade bullet point to release notes for Caracal for operators to check and align their caps from what they might have become over the various releases * distribute this as a reference to the deployment tools and also the Ceph docs
@Brian @Rajat if you could kindly read through my bullet points (a through g in last post) again and help me to determine the correct caps for the cinder and glance users? Should we maybe raise a launchpad bug to track this issue? Regarding points a and b: Yes, there was a note in the RL, but for glance_store [2]! I'd like to add a note to glance itself to make operators aware that they might want to check / update the caps. Regards Christian