Rook allows creation and customization of object store users through the custom resource definitions (CRDs). The following settings are available for Ceph object store users.
Object Store User Settings¶
name: The name of the object store user to create, which will be reflected in the secret and other resource names.
namespace: The namespace of the Rook cluster where the object store user is created.
store: The object store in which the user will be created. This matches the name of the objectstore CRD.
displayName: The display name which will be passed to the
radosgw-admin user createcommand.
quotas: This represents quota limitation can be set on the user. Please refer here for details.
maxBuckets: The maximum bucket limit for the user.
maxSize: Maximum size limit of all objects across all the user's buckets.
maxObjects: Maximum number of objects across all the user's buckets.
capabilities: Ceph allows users to be given additional permissions. Due to missing APIs in go-ceph for updating the user capabilities, this setting can currently only be used during the creation of the object store user. If a user's capabilities need modified, the user must be deleted and re-created. See the Ceph docs for more info. Rook supports adding
read, write, or
*permissions for the following resources: