16 lines
768 B
Markdown
16 lines
768 B
Markdown
# Dynamic Ceph Users
|
|
Create a vault plugin to dynamically manage ceph users.
|
|
|
|
## Scope
|
|
- Can be configured in vault with a root user account that will perform all of the actions
|
|
- Configure roles/profiles for normal ceph users in the plugin
|
|
- Contain the capabilities a user account should have
|
|
- Can be used to create a user in ceph on the fly, obtaining the secret key and caps as a response
|
|
- Configure roles/profiles for rgw ceph users in the plugin
|
|
- Contain the permissions an account should have
|
|
- Either creates new accounts or just extra keys (unsure for now)
|
|
|
|
## Ressources
|
|
- [Ceph Restful API](https://docs.ceph.com/en/reef/mgr/ceph_api/)
|
|
- [Vault Custom Secret Engine](https://developer.hashicorp.com/vault/tutorials/custom-secrets-engine)
|