Yes, you may resort to RBAC-based provisioning from OpenStack or kubernetes (ceph-csi). Kind Regards, Ernesto On Tue, Mar 22, 2022 at 9:24 PM Budai Laszlo <laszlo.budai@xxxxxxxxx> wrote: > Hi Ernesto > > I was disconnected from the chat, and I have missed the messages. I don't > know if there is any way to see past messages, so I turned to the mailing > list ... :) > > Thank you for your response. > > So the Dashboard doesn't supports my use case. Then what could be a > solution for for self servicing storage tenants? Should I try to use a mix > openstack cinder+manila+horizon+keystone for provisioning the resources, > and some custom scripts that would retrieve the resource info and use it in > the client's environment? > > Thank you! > Laszlo > > On 3/22/22 20:29, Ernesto Puerta wrote: > > Hi Laszlo, > > Following on the conversation from #ceph-dashboard IRC: > > My question was about how can I assign a certain cephx identity to a >> dashboard user ? (if that is possible at all ...) Or what is the Ceph >> Dasboard solution for multitenancy? I would like to let the users to be >> able to create their own RBD images and shares without affecting other >> users' resources. What would be the correct way to do this? > > > Currently, the Ceph Dashboard doesn't support this use case, and I don't > think that's easy to change: > > - The Dashboard users operate with ceph-mgr privileges, and afaik > there's no way in the mgr API to downgrade privileges. > - Additionally, the Dashboard authentication is password-based, while > cephx is key-based. > > Kind Regards, > Ernesto > > > On Tue, Mar 22, 2022 at 3:41 PM Budai Laszlo <laszlo.budai@xxxxxxxxx> > wrote: > >> Dear all, >> >> is it possible to use standalone ceph for provisioning storage resources >> for multiple tenants in a "Self service" way? (users log in to the >> dashboard, and they can manage their own resources). >> >> Any documentation link or other reference is highly appreciated. >> >> Thank you, >> Laszlo >> _______________________________________________ >> ceph-users mailing list -- ceph-users@xxxxxxx >> To unsubscribe send an email to ceph-users-leave@xxxxxxx >> >> > _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx
 |