diff --git a/ansible/roles/ceph/defaults/main.yml b/ansible/roles/ceph/defaults/main.yml
index 49c70f156c..32fc9216b6 100644
--- a/ansible/roles/ceph/defaults/main.yml
+++ b/ansible/roles/ceph/defaults/main.yml
@@ -58,7 +58,7 @@ ceph_debug: "{{ openstack_logging_debug }}"
 ceph_tcmalloc_tc_bytes: "134217728"
 
 ceph_client_admin_keyring_caps:
-  mds: "allow"
+  mds: "allow *"
   mon: "allow *"
   osd: "allow *"
   mgr: "allow *"
@@ -69,7 +69,7 @@ ceph_client_mgr_keyring_caps:
   mds: 'allow *'
 
 ceph_client_mds_keyring_caps:
-  mds: 'allow '
+  mds: 'allow *'
   osd: 'allow *'
   mon: 'allow rwx'