meta:
- desc: configure the permissions for client.mirror
overrides:
  ceph:
    conf:
      client:
        debug cephfs_mirror: 20
        log to stderr: false
      # make these predictable
      client.mirror:
        admin socket: /var/run/ceph/cephfs-mirror.asok
        pid file: /var/run/ceph/cephfs-mirror.pid
tasks:
- exec:
    client.mirror:
      - "sudo ceph auth caps client.mirror mon 'profile cephfs-mirror' mds 'allow r' osd 'allow rw tag cephfs metadata=*, allow r tag cephfs data=*' mgr 'allow r'"
    client.mirror_remote:
      - "sudo ceph auth caps client.mirror_remote mon 'allow r' mds 'allow rwps' osd 'allow rw tag cephfs *=*' mgr 'allow r'"