From a3acfac6e6e777357d2bf4d35a719390eb9a076d Mon Sep 17 00:00:00 2001 From: leon Date: Sun, 4 Oct 2026 18:29:48 +0200 Subject: [PATCH] Add some more information to the dynamic ceph users --- projects/software/dynamic-ceph-users.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/projects/software/dynamic-ceph-users.md b/projects/software/dynamic-ceph-users.md index d4a983d..5f8a865 100644 --- a/projects/software/dynamic-ceph-users.md +++ b/projects/software/dynamic-ceph-users.md @@ -1 +1,15 @@ # Dynamic Ceph Users +Create a vault plugin to dynamically manage ceph users. + +## Scope +- Can be configured in vault with a root user account that will perform all of the actions +- Configure roles/profiles for normal ceph users in the plugin + - Contain the capabilities a user account should have + - Can be used to create a user in ceph on the fly, obtaining the secret key and caps as a response +- Configure roles/profiles for rgw ceph users in the plugin + - Contain the permissions an account should have + - Either creates new accounts or just extra keys (unsure for now) + +## Ressources +- [Ceph Restful API](https://docs.ceph.com/en/reef/mgr/ceph_api/) +- [Vault Custom Secret Engine](https://developer.hashicorp.com/vault/tutorials/custom-secrets-engine)