Add some more information to the dynamic ceph users
This commit is contained in:
@@ -1 +1,15 @@
|
|||||||
# Dynamic Ceph Users
|
# Dynamic Ceph Users
|
||||||
|
Create a vault plugin to dynamically manage ceph users.
|
||||||
|
|
||||||
|
## Scope
|
||||||
|
- Can be configured in vault with a root user account that will perform all of the actions
|
||||||
|
- Configure roles/profiles for normal ceph users in the plugin
|
||||||
|
- Contain the capabilities a user account should have
|
||||||
|
- Can be used to create a user in ceph on the fly, obtaining the secret key and caps as a response
|
||||||
|
- Configure roles/profiles for rgw ceph users in the plugin
|
||||||
|
- Contain the permissions an account should have
|
||||||
|
- Either creates new accounts or just extra keys (unsure for now)
|
||||||
|
|
||||||
|
## Ressources
|
||||||
|
- [Ceph Restful API](https://docs.ceph.com/en/reef/mgr/ceph_api/)
|
||||||
|
- [Vault Custom Secret Engine](https://developer.hashicorp.com/vault/tutorials/custom-secrets-engine)
|
||||||
|
|||||||
Reference in New Issue
Block a user