diff --git a/projects/software/dynamic-ceph-users.md b/projects/software/dynamic-ceph-users.md index d4a983d..5f8a865 100644 --- a/projects/software/dynamic-ceph-users.md +++ b/projects/software/dynamic-ceph-users.md @@ -1 +1,15 @@ # Dynamic Ceph Users +Create a vault plugin to dynamically manage ceph users. + +## Scope +- Can be configured in vault with a root user account that will perform all of the actions +- Configure roles/profiles for normal ceph users in the plugin + - Contain the capabilities a user account should have + - Can be used to create a user in ceph on the fly, obtaining the secret key and caps as a response +- Configure roles/profiles for rgw ceph users in the plugin + - Contain the permissions an account should have + - Either creates new accounts or just extra keys (unsure for now) + +## Ressources +- [Ceph Restful API](https://docs.ceph.com/en/reef/mgr/ceph_api/) +- [Vault Custom Secret Engine](https://developer.hashicorp.com/vault/tutorials/custom-secrets-engine)