Ceph monitor (mon caps) permissions

[drdag]

I hope this message finds you well.

I would like to gain a clearer understanding of the Monitor permissions (mon caps) in Ceph. Specifically, could you explain what actions these permissions allow, and what exactly can be executed or written with them?

Thank you in advance

 

[shbaek]

You can check the permissions related to caps by running

ceph auth ls

ls on a PVE node.
For more details, please refer to the following site:
https://docs.ceph.com/en/reef/rados/operations/user-management/#managing-users.

 

[drdag]

You can check the permissions related to caps by running

ceph auth ls

ls on a PVE node.
For more details, please refer to the following site:
https://docs.ceph.com/en/reef/rados/operations/user-management/#managing-users.

Thank you for your reply. I am primarily curious about what the [Mon] permissions entail and whether they pose any potential security risks.