ceph auth get-or-create client.k8s mon 'allow r' osd 'allow rwx pool=k8s,allow rwx pool=rbd' -o ceph.client.k8s.keyring