Description of problem: =============== In version 8.0, the creation of NFS-Ganesha exports directly on the CephFS filesystem through the dashboard should be restricted (https://jsw.ibm.com/browse/ISCE-760). Users should not be permitted to create NFS exports directly on the CephFS filesystem. Export created from Dashboard ============= [ceph: root@ceph-auto-cluster-qwoqln-node1-installer /]# ceph nfs cluster ls [ "nfsganesha" ] [ceph: root@ceph-auto-cluster-qwoqln-node1-installer /]# ceph nfs export ls nfsganesha [ "/ganesha" ] [ceph: root@ceph-auto-cluster-qwoqln-node1-installer /]# ceph nfs export info nfsganesha /ganesha { "access_type": "RW", "clients": [], "cluster_id": "nfsganesha", "export_id": 1, "fsal": { "fs_name": "cephfs", "name": "CEPH", "user_id": "nfs.nfsganesha.1" }, "path": "/", "protocols": [ 3, 4 ], "pseudo": "/ganesha", "security_label": false, "squash": "no_root_squash", "transports": [ "TCP", "UDP" ] } ****Dashboard screenshot attached Version-Release number of selected component (if applicable): ============================================================= # ceph --version ceph version 19.1.0-17.el9cp (c4a94422523bb32232df641cbb7125f05a5b49f2) squid (rc) How reproducible: ============== Always Steps to Reproduce: ================== 1. Create NFS service via Dashboard 2. From Dashboard, Create export directly on cephFS filesystem Actual results: ============= Export directly out of cephFS filesystem is created Expected results: ============ Export creation should only be allowed over subvolume not on filesystem directly Additional info:
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat Ceph Storage 8.0 security, bug fix, and enhancement updates), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2024:10216