Hi Ozone devs,

  I am starting this discussion thread for proposing to merge the Ozone S3
Multi-Tenancy feature branch (HDDS-4944) to the master branch.

  S3 multi-tenancy allows multiple S3-accessible volumes to be created.
Each volume can be managed separately by their own tenant admins via CLI
for tenant creation and user operations. Before S3 Multi-Tenancy, all S3
access to Ozone (via S3 Gateway) are
confined to a single designated S3 volume (s3v volume by default).

  The feature has been in development for about 14 months now. Currently,
functions like tenant creation/deletion (along with volume and bucket
Ranger policy creation), user assign/revoke, tenant admin assign/revoke are
implemented and tested working. Documentations have also been added.

  The S3 multi-tenancy feature umbrella JIRA is HDDS-4944
<https://issues.apache.org/jira/browse/HDDS-4944>

  There are only 3 merge blocking JIRAs left (all under review) at the
moment, which should hopefully be resolved in a week or two:

   1. HDDS-6612 <https://issues.apache.org/jira/browse/HDDS-6612>. Add a
   config key to enable or disable S3 Multi-Tenancy feature globally
   2. HDDS-6371 <https://issues.apache.org/jira/browse/HDDS-6371>.
   Implement Ranger policy and role background sync service in OM
   3. HDDS-6701 <https://issues.apache.org/jira/browse/HDDS-6701>. (a
   follow-up to the 2nd) Add proper locking between Ranger Background Sync
   Service and tenant requests


  For more information (feature overview, Docker dev and production setup
guide, CLI guide and access control guide), please check out the S3
multi-tenancy feature wiki page here:
https://cwiki.apache.org/confluence/display/OZONE/S3+Multi-Tenancy+%28HDDS-4944%29+Merge+Checklist


Thanks,
Siyao

Reply via email to