Merge pull request #12995 from rook/mergify/bp/release-1.12/pr-12633

object: create cosi user for each object store (backport #12633)
This commit is contained in:
Travis Nielsen authored and GitHub committed 2023-10-04 13:48:57 -06:00
commit 320795292d
8 files changed
+193 -103

No files matched your search

@@ -43,33 +43,9 @@ The driver is created in the same namespace as Rook operator.
## Admin Operations
### Create a Ceph Object Store User
Create a CephObjectStoreUser to be used by the COSI driver for provisioning buckets.
```yaml
apiVersion: ceph.rook.io/v1
kind: CephObjectStoreUser
metadata:
name: cosi
namespace: rook-ceph
spec:
displayName: "cosi user"
store: my-store
capabilities:
bucket: "*"
user: "*"
```
```console
kubectl create -f cosi-user.yaml
```
Above step will be automated in future by the Rook operator.
### Create a BucketClass and BucketAccessClass
The BucketClass and BucketAccessClass are CRDs defined by COSI. The BucketClass defines the storage class for the bucket. The BucketAccessClass defines the access class for the bucket. The BucketClass and BucketAccessClass are defined as below:
The BucketClass and BucketAccessClass are CRDs defined by COSI. The BucketClass defines the storage class for the bucket. The BucketAccessClass defines the access class for the bucket. Rook will automatically create a secret named with `rook-ceph-object-user-<store-name>-cosi` which contains credentials used by the COSI driver. This secret is referred by the BucketClass and BucketAccessClass as defined below:
```yaml
kind: BucketClass
@@ -97,8 +73,6 @@ parameters:
kubectl create -f bucketclass.yaml -f bucketaccessclass.yaml
```
The `objectStoreUserSecretName` and `objectStoreUserSecretNamespace` are the name and namespace of the CephObjectStoreUser created in the previous step.
## User Operations
### Create a Bucket