forked from rook/rook
Sébastien Han
7c994441c3
Currently, we need to configure the Ceph external Admin keyi in the Rook deployment to be able to connect to an external Ceph cluster. If we wanted to run in a multi-tenant fashion were several K8s/Rook clusters wanted to connect to the same external ceph cluster, each K8s deployment would have the access to the External Ceph Admin key and could potentially access or delete the Data from pools that belong to other k8s/Rook Clusters. Now the admin key is optional but the helper script create-external-cluster-resources.sh will help create the necessary keys/users to connect to that cluster. Closes: https://github.com/rook/rook/issues/4917 and https://github.com/rook/rook/pull/5227 Signed-off-by: Sébastien Han <seb@redhat.com>
58 lines
1.7 KiB
Go
58 lines
1.7 KiB
Go
/*
|
|
Copyright 2016 The Rook Authors. All rights reserved.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package object
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/rook/rook/pkg/clusterd"
|
|
"github.com/rook/rook/pkg/daemon/ceph/client"
|
|
)
|
|
|
|
// Context holds the context for the object store.
|
|
type Context struct {
|
|
Context *clusterd.Context
|
|
Name string
|
|
ClusterName string
|
|
}
|
|
|
|
// NewContext creates a new object store context.
|
|
func NewContext(context *clusterd.Context, name, clusterName string) *Context {
|
|
return &Context{Context: context, Name: name, ClusterName: clusterName}
|
|
}
|
|
|
|
func runAdminCommandNoRealm(c *Context, args ...string) (string, error) {
|
|
command, args := client.FinalizeCephCommandArgs("radosgw-admin", args, c.Context.ConfigDir, c.ClusterName, client.AdminUsername)
|
|
|
|
// start the rgw admin command
|
|
output, err := c.Context.Executor.ExecuteCommandWithOutput(command, args...)
|
|
if err != nil {
|
|
return "", errors.Wrapf(err, "failed to run radosgw-admin")
|
|
}
|
|
|
|
return output, nil
|
|
}
|
|
|
|
func runAdminCommand(c *Context, args ...string) (string, error) {
|
|
options := []string{
|
|
fmt.Sprintf("--rgw-realm=%s", c.Name),
|
|
fmt.Sprintf("--rgw-zonegroup=%s", c.Name),
|
|
}
|
|
return runAdminCommandNoRealm(c, append(args, options...)...)
|
|
}
|