root@0004-compute:~# ceph-authtool -l /etc/ceph/client.nova.keyring
[client.nova]
	key = AQDmc45SOKL3BRAAhdSYJ3+4B7K2d20Dcx/43g==
	caps mon = "allow r"
	caps osd = "allow class-read object_prefix rbd_children, allow rwx pool=instances, allow rwx pool=volumes-regular, allow rwx pool=volumes-performance, allow rx pool=images"
root@0004-compute:~# cat /etc/ceph/
ceph.conf            client.nova.keyring  keyring              rbdmap
root@0004-compute:~# cat /etc/ceph/ceph.conf
[global]
  auth cluster required = cephx
  auth service required = cephx
  auth client required = cephx
  keyring = /etc/ceph/keyring
  cluster network = 10.14.0.0/16
  public network = 10.13.0.0/16
  osd pool default pg num = 64
  osd pool default pgp num = 64
  osd pool default size = 3
  osd crush chooseleaf type = 1
  mon osd full ratio = .90
  mon osd nearfull ratio = .85

  fsid = 65d4a973-accb-4751-8e25-10d3edcdc614

  # Logging & debugging
  log file = none
  log max new = 1000
  log max recent = 1000000
  log to stderr = true
  err to stderr = true
  log to syslog = true
  err to syslog = true
  log flush on exit = true
  clog to monitors = true
  clog to syslog = true
  mon cluster log to syslog = true
  mon cluster log file = none
  osd preserve trimmed log = false
  osd min pg log entries = 1000
  osd op log threshold = 5
  debug ms = 0/5

[mon]
  mon data = /var/lib/ceph/mon/mon.$id

  # Logging & debugging
  debug mon = 1/5
  debug paxos = 0/5
  debug auth = 1/5

[osd]
  osd journal size = 4096
  journal dio = true
  filestore flusher = false
  osd data = /var/lib/ceph/osd/osd.$id
  osd journal = /var/lib/ceph/osd/osd.$id/journal
  osd mkfs type = xfs
  osd mkfs options xfs = -L osd-f -i size=2048 -n size=64k
  osd mount options xfs = rw,noatime,inode64,nobootwait,logbsize=256k,delaylog
  keyring = /var/lib/ceph/osd/osd.$id/keyring

  # Logging & debugging
  debug osd = 0/5
  debug filestore = 1/5
  debug journal = 1/5
  debug monc = 0/5

[mon.0001]
  host = 0001-controller
  mon addr = 10.13.10.8:6789

[client.nova]
  keyring = /etc/ceph/client.nova.keyring