I've been playing with installing rook-ceph in a Rancher managed k8s cluster for the past week or so and while it does work, some things aren't working as expected. In particular I'm trying to use the CLI to add users and buckets during cluster creation, to integrate with my IaC/IaaS scripts, and am running into a confusing issue.

I can use the Ceph dashboard to create users and buckets, and then use the aws s3api commands to manipulate the buckets and all works well; however the documentation says that I can add bucket users with radosgw-admin, but when I do this, the users I create do not show up anywhere I can find in the Ceph dashboard, and they cannot manipulate buckets via the aws s3api commands.

I'm sitting on a fresh install of rook-orchestrator and ceph-rook-cluster now via helm and the dashboard shows a single user in the Buckets->Users area named 'dashboard-admin' while 'radosgw-admin user list' returns an empty array.

radosgw-admin zone list and zonegroups list show two zones and two zonegroups; one named 'ceph-objectstore' and one named 'default'. I'm not specifically trying to use zones or zonegroups but I thought I would mention this since it is relevant. Both show in the Object-Multi site page in the dash as well, though there's an extra "something" above the ceph-objectstore tree that has a balance scale icon; i don't know what these represent as there is no legend on the page.

I haven't tried to add a user in this current config since I'd like to wait for some ideas from the group, but the commands I've been trying are:

TOOLS_POD=$(kubectl -n rook-ceph get pod -l "app=rook-ceph-tools" -o jsonpath='{.items[*].metadata.name}') kubectl -n rook-ceph exec -it $TOOLS_POD -- radosgw-admin user create --uid=testuser --display-name="Test User" --access=full

The documentation indicates that this is how you add bucket users to the cluster.

TIA for any assistance.
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to