Hi, I'm playing around with Proxmox and Ceph and I'm currently quite stuck with user management and STS activation.
I've managed to install the rados gateway properly and it is working, but I would like to manage users permissions a little more, like disallow bucket creation for example.
My first thought was to use roles and policies, but I don't quite understand how they apply on users. Beside that, the role needed to have an assume role policy, so I tried to enable STS authentication in
Here are the version informations:
- Proxmox 8.2
- Ceph Reef
I've consulted the following documentations but can't figure it out even with it:
- https://docs.ceph.com/en/reef/radosgw/admin/#user-management
- https://docs.ceph.com/en/reef/radosgw/STS/
Thanks in advance
UPDATE:
Found what I was looking for: You can create user policies using an S3 clients with a user that has the right admin privileges.
I've managed to install the rados gateway properly and it is working, but I would like to manage users permissions a little more, like disallow bucket creation for example.
My first thought was to use roles and policies, but I don't quite understand how they apply on users. Beside that, the role needed to have an assume role policy, so I tried to enable STS authentication in
ceph.conf
for the rgw clients but now I get the following error:Unable to parse response (not well-formed (invalid token): line 1, column 0), invalid XML received. Further retries may succeed:
b'{"Code":"MethodNotAllowed","Message":"","RequestId":"tx00000c3dc54545cdab5ab-00662f67f8-36fba-default","HostId":"36fba-default-default"}'
Here are the version informations:
- Proxmox 8.2
- Ceph Reef
I've consulted the following documentations but can't figure it out even with it:
- https://docs.ceph.com/en/reef/radosgw/admin/#user-management
- https://docs.ceph.com/en/reef/radosgw/STS/
Thanks in advance
UPDATE:
Found what I was looking for: You can create user policies using an S3 clients with a user that has the right admin privileges.
Last edited: