parth-gr
4a3088c580
security: make cephfs_filesystem_name flag optional
...
cephfs_filesystem_name flag isn't mandatory if restricted_auth_permission
is on.
Signed-off-by: parth-gr <paarora@redhat.com >
2022-01-07 20:27:05 +05:30
parth-gr
6ed7423bac
security: update auth permissions for external cluster
...
Added a clusterName, poolName , filesystemName, radosNamespace
as a suffix on ceph auth principals for external cluster so
every csi authentication would be unique if
restricted_auth_permission flag is specified.
Closes: https://github.com/rook/rook/issues/9192
Signed-off-by: parth-gr <paarora@redhat.com >
2022-01-05 13:51:41 +05:30
subhamkrai
c891ddb57d
security: add dry run mode for external cluster script
...
Adding dry run mode for external cluster script.
This will add cli argument `--dry-run`. By default
`dry-run` option will be `False`
which means it will only print something like below.
```
Execute: 'ceph fs ls'
Execute: 'ceph fsid'
Execute: 'ceph quorum_status'
Execute: 'ceph auth get-or-create client.healthchecker mon allow r, allow command quorum_status,
allow command version mgr allow command config osd allow rwx pool=default.rgw.meta, allow r pool=
.rgw.root, allow rw pool=default.rgw.control, allow rx pool=default.rgw.log, allow x
pool=default.rgw.buckets.index'
Execute: 'ceph mgr services'
Execute: 'ceph auth get-or-create client.csi-rbd-node mon profile rbd osd profile rbd'
Execute: 'ceph auth get-or-create client.csi-rbd-provisioner mon profile rbd mgr allow rw osd
profile rbd'
Execute: 'ceph status'
```
Signed-off-by: subhamkrai <srai@redhat.com >
2021-12-16 13:05:39 +05:30
Blaine Gardner
24a77d4fa1
Merge pull request #9296 from degorenko/cephfs-datapools
...
file: allow to create CephFS dataPools with predefined names
2021-12-14 11:04:49 -07:00
Denis Egorenko
3ff681e81d
file: allow to create CephFS data pools with predefined names
...
Add an ability to create data pools for CephFS with predefined
names.
Related-Issue: rook#9295
Signed-off-by: Denis Egorenko <degorenko@mirantis.com >
2021-12-14 12:52:19 +04:00
subhamkrai
22865815cf
pool: add rbd ec pool support in external cluster
...
Adding cli agrument `--rbd-metadata-ec-pool-name` to read
rbd ec pool name to support ec pool in external cluster
and also updating the json blob.
Signed-off-by: subhamkrai <srai@redhat.com >
2021-12-14 12:13:22 +05:30
Lennart Hagemann
7507790375
security: use correct osd tags for restricted caps
...
The create-external-cluster-resources.py with
--create-external-cluster-resources set to true
sets a wrong osd application tag. It should use
the fs name and not the fs pools.
Closes: https://github.com/rook/rook/issues/9227
Signed-off-by: Lennart Hagemann <lennart.hagemann@continum.net >
2021-12-13 15:03:02 +01:00
Sébastien Han
c890710b63
core: change directory layout
...
As per discussion, proposing a new layout for the charts/yaml/olm files.
./deploy
├── charts
│ ├── rook-ceph
│ │ └── templates
│ └── rook-ceph-cluster
│ └── templates
├── examples
│ ├── csi
│ │ ├── cephfs
│ │ └── rbd
│ ├── flex
│ ├── monitoring
│ ├── pre-k8s-1.16
└── olm
└── assemble
Signed-off-by: Sébastien Han <seb@redhat.com >
2021-11-30 09:12:53 +01:00