classes:
- service.ceph.setup.single
parameters:
  ceph:
    common:
      keyring:
        admin:
          caps:
            mds: "allow *"
            mgr: "allow *"
            mon: "allow *"
            osd: "allow *"
    mon:
      enabled: true
      keyring:
        mon:
          caps:
            mon: "allow *"