[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-06 Thread Ondřej Kukla
If you want to do it using CLI in one command then try this “radosgw-admin user create --uid=test --display-name=“Test User" --max-buckets=-1” Ondrej > On 6. 10. 2023, at 9:07, Matthias Ferdinand wrote: > > On Fri, Oct 06, 2023 at 08:55:42AM +0200, Ondřej Kukla wrote: >> Hello Matthias, >> >>

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-06 Thread Matthias Ferdinand
On Fri, Oct 06, 2023 at 08:55:42AM +0200, Ondřej Kukla wrote: > Hello Matthias, > > In our setup we have a set of users that are only use to read from certain > buckets (they have s3:GetObject set in the bucket policy). > > When we create those read users using the Admin Ops API we add the > ma

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-05 Thread Ondřej Kukla
Hello Matthias, In our setup we have a set of users that are only use to read from certain buckets (they have s3:GetObject set in the bucket policy). When we create those read users using the Admin Ops API we add the max-buckets=-1 parameter which disables bucket creation. https://docs.ceph.co

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-05 Thread Matthias Ferdinand
On Thu, Oct 05, 2023 at 09:22:29AM +0200, Robert Hish wrote: > Unless I'm misunderstanding your situation, you could also tag your > placement targets. You then tag users with the corresponding tag enabling > them to create new buckets at that placement target. If a user is not tagged > with the co

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-05 Thread Robert Hish
Unless I'm misunderstanding your situation, you could also tag your placement targets. You then tag users with the corresponding tag enabling them to create new buckets at that placement target. If a user is not tagged with the corresponding tag they cannot create new buckets at that placement

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-04 Thread Matthias Ferdinand
On Tue, Oct 03, 2023 at 06:10:17PM +0200, Matthias Ferdinand wrote: > On Sun, Oct 01, 2023 at 12:00:58PM +0200, Peter Goron wrote: > > Hi Matthias, > > > > One possible way to achieve your need is to set a quota on number of > > buckets at user level (see > > https://docs.ceph.com/en/reef/radosgw

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-04 Thread Matthias Ferdinand
> Tried a negative number ("--max-buckets=-1"), but that had no effect at > all (not even an error message). must have mistyped the command; trying again with "-max-buckets=-1", it shows the wanted effect: user cannot create any bucket. So, an effective and elegant method indeed :-) Matthias PS

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-04 Thread Matthias Ferdinand
On Tue, Oct 03, 2023 at 06:10:17PM +0200, Matthias Ferdinand wrote: > On Sun, Oct 01, 2023 at 12:00:58PM +0200, Peter Goron wrote: > > Hi Matthias, > > > > One possible way to achieve your need is to set a quota on number of > > buckets at user level (see > > https://docs.ceph.com/en/reef/radosgw

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-03 Thread Matthias Ferdinand
On Sun, Oct 01, 2023 at 12:00:58PM +0200, Peter Goron wrote: > Hi Matthias, > > One possible way to achieve your need is to set a quota on number of > buckets at user level (see > https://docs.ceph.com/en/reef/radosgw/admin/#quota-management). Quotas are > under admin control. thanks a lot, rath

[ceph-users] Re: rgw: disallowing bucket creation for specific users?

2023-10-01 Thread Peter Goron
Hi Matthias, One possible way to achieve your need is to set a quota on number of buckets at user level (see https://docs.ceph.com/en/reef/radosgw/admin/#quota-management). Quotas are under admin control. Rgds, Peter Le dim. 1 oct. 2023, 10:51, Matthias Ferdinand a écrit : > Hi, > > I am sti