commit d68e33ad3c1d84ecdf3b11d209e9cf07a06fe42d
author Jiri Broulik <jbroulik@mirantis.com> Tue Oct 24 10:54:43 2017 +0200
committer Jiri Broulik <jbroulik@mirantis.com> Tue Oct 24 11:27:17 2017 +0200
tree 761a1857067bfbde806c3e986be091eda7579643
parent 6ef19d0238d4aec05a4a4185bc6ed7c7973dd05a

adding manage non admin / mon key keyring capability

Change-Id: I50afa566590f88f3ade7632be2ded3579e35da1d

README.rst

diff --git a/README.rst b/README.rst
index 1d41a52..944ae77 100644
--- a/README.rst
+++ b/README.rst
@@ -447,6 +447,26 @@
             crush_rule: ssd
             application: rbd
 
+
+Ceph manage keyring keys
+------------------------
+
+Keyrings are dynamically generated unless specified by the following pillar.
+
+.. code-block:: yaml
+
+    ceph:
+      common:
+        manage_keyring: true
+        keyring:
+          glance:
+            name: images
+            key: AACf3ulZFFPNDxAAd2DWds3aEkHh4IklZVgIaQ==
+            caps:
+              mon: "allow r"
+              osd: "allow class-read object_prefix rdb_children, allow rwx pool=images"
+
+
 Generate CRUSH map - Recommended way
 -----------------------------------