Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Important: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2025:9775
Description of problem: When the osd caps are restricted to implicit namespace we are not able to create snapshots for RBD volume in ODF Version-Release number of selected component (if applicable): rhceph-container-8-208 How reproducible: Always Steps to Reproduce: Perform RBD snapshot with below caps, basically [namespace ''] in [caps osd] key = AQA4iZNnoMgpFBAATwl0wSN9ehCYoZeDl3zi1A== caps mgr = "allow rw" caps mon = "profile rbd, allow command 'osd blocklist'" caps osd = "profile rbd namespace ''" Actual results: I0124 13:12:14.514092 1 rbd_util.go:1485] ID: 40 Req-ID: pvc-b684964c-0d4f-4a1b-8e3d-5836c80b56dd rbd: snap create ocs-storagecluster-cephblockpool/csi-vol-818ad38a-30e8-4c15-8ce0-ddb82cf420c3@csi-vol-fed47bc1-9c1b-40a4-ad68-f2c0b0103aa6-temp using mon E0124 13:12:14.557562 1 snapshot.go:40] ID: 40 Req-ID: pvc-b684964c-0d4f-4a1b-8e3d-5836c80b56dd failed to create snapshot ocs-storagecluster-cephblockpool/csi-vol-818ad38a-30e8-4c15-8ce0-ddb82cf420c3@csi-vol-fed47bc1-9c1b-40a4-ad68-f2c0b0103aa6-temp: rbd: ret=-1, Operation not permitted I0124 13:12:14.564763 1 omap.go:126] ID: 40 Req-ID: pvc-b684964c-0d4f-4a1b-8e3d-5836c80b56dd removed omap keys (pool="ocs-storagecluster-cephblockpool", namespace="", name="csi.volumes.default"): [csi.volume.pvc-b684964c-0d4f-4a1b-8e3d-5836c80b56dd] E0124 13:12:14.564816 1 utils.go:271] ID: 40 Req-ID: pvc-b684964c-0d4f-4a1b-8e3d-5836c80b56dd GRPC error: rbd: ret=-1, Operation not permitted Expected results: Snapshot should be successful Additional info: I found the issue during snapshot of rbd and Ilya root caused it to RADOS component. what works is key = AQB3gJNngMEAExAAvaHITiiD/CInm7ptHx20OA== caps mgr = "allow rw" caps mon = "profile rbd, allow command 'osd blocklist'" caps osd = "profile rbd"