[SOLVED] Ceph RadosGW user management and STS

Tashinka

New Member
Apr 29, 2024
1
0
1
Hi, I'm playing around with Proxmox and Ceph and I'm currently quite stuck with user management and STS activation.

I've managed to install the rados gateway properly and it is working, but I would like to manage users permissions a little more, like disallow bucket creation for example.

My first thought was to use roles and policies, but I don't quite understand how they apply on users. Beside that, the role needed to have an assume role policy, so I tried to enable STS authentication in ceph.conf for the rgw clients but now I get the following error:
Unable to parse response (not well-formed (invalid token): line 1, column 0), invalid XML received. Further retries may succeed:
b'{"Code":"MethodNotAllowed","Message":"","RequestId":"tx00000c3dc54545cdab5ab-00662f67f8-36fba-default","HostId":"36fba-default-default"}'

Here are the version informations:
- Proxmox 8.2
- Ceph Reef

I've consulted the following documentations but can't figure it out even with it:
- https://docs.ceph.com/en/reef/radosgw/admin/#user-management
- https://docs.ceph.com/en/reef/radosgw/STS/

Thanks in advance

UPDATE:

Found what I was looking for: You can create user policies using an S3 clients with a user that has the right admin privileges.
 
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!