@elinpf/dsh-ops-access-ceph 0.1.6 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/lib/index.js +1 -0
  2. package/package.json +3 -3
package/lib/index.js CHANGED
@@ -31,6 +31,7 @@ export const provider = {
31
31
  schema: entrySchema,
32
32
  fieldsDoc: 'conf: ceph.conf content; keyring: keyring content; name: optional cephx user (e.g. client.dsh-test) — defaults to client.admin when omitted',
33
33
  fileFields: ['conf', 'keyring'],
34
+ knownLimits: "the ro credential (mon/osd/mds/mgr 'allow r') cannot run tell/fs-subvolume/rbd-management commands — they fail with EACCES at the mon, which is the caps boundary, not a tool bug; use metadata reads instead: health detail, osd tree, pg dump, fs status, rados omap",
34
35
  derivationDoc: "from the rw keyring: ceph auth add client.<id>-ro mon 'allow r' osd 'allow r' mds 'allow r' mgr 'allow r' (naming convention: client.<id>-ro), export it with ceph auth get client.<id>-ro, then register via register_access with the keyring content, a copy of conf, and name set to client.<id>-ro — verify with ceph status",
35
36
  process(entry) {
36
37
  const { conf, keyring, name } = entry;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@elinpf/dsh-ops-access-ceph",
3
- "version": "0.1.6",
3
+ "version": "0.2.0",
4
4
  "description": "Ops access provider for Ceph — validates ceph registry entries and expands conf/keyring paths.",
5
5
  "type": "module",
6
6
  "main": "lib/index.js",
@@ -39,14 +39,14 @@
39
39
  "peerDependencies": {
40
40
  "@deepseek-ai/cordis": "^4.0.1",
41
41
  "@deepseek-ai/dsh-invariants": "^0.1.0-rc.8",
42
- "@elinpf/dsh-ops-access": "^0.1.6"
42
+ "@elinpf/dsh-ops-access": "^0.2.0"
43
43
  },
44
44
  "devDependencies": {
45
45
  "@deepseek-ai/cordis": "4.0.1",
46
46
  "typescript": "^5.4.0",
47
47
  "vitest": "^4.1.11",
48
48
  "@types/node": "^22.0.0",
49
- "@elinpf/dsh-ops-access": "0.1.6"
49
+ "@elinpf/dsh-ops-access": "0.2.0"
50
50
  },
51
51
  "license": "MIT",
52
52
  "publishConfig": {