When to use the auth profiles simple-rados-client and profile simple-rados-client-with-blocklist?
Hey ceph-users, 1) When configuring Gnocchi to use Ceph storage (see https://gnocchi.osci.io/install.html#ceph-requirements) I was wondering if one could use any of the auth profiles like * simple-rados-client * simple-rados-client-with-blocklist ? Or are those for different use cases? 2) I was also wondering why the documentation mentions "(Monitor only)" but then it says "Gives a user read-only permissions for monitor, OSD, and PG data."? 3) And are those profiles really for "read-only" users? Why don't they have "read-only" in their name like the rbd and the corresponding "rbd-read-only" profile? Regards Christian
Hello Christian, On Tue, Aug 22, 2023 at 7:51 AM Christian Rohmann <christian.rohmann@inovex.de> wrote:
Hey ceph-users,
1) When configuring Gnocchi to use Ceph storage (see https://gnocchi.osci.io/install.html#ceph-requirements) I was wondering if one could use any of the auth profiles like * simple-rados-client * simple-rados-client-with-blocklist ?
Or are those for different use cases?
2) I was also wondering why the documentation mentions "(Monitor only)" but then it says "Gives a user read-only permissions for monitor, OSD, and PG data."?
3) And are those profiles really for "read-only" users? Why don't they have "read-only" in their name like the rbd and the corresponding "rbd-read-only" profile?
I don't know anything about Gnocchi (except the food) but to answer the question in $SUBJECT: https://docs.ceph.com/en/reef/rados/api/libcephsqlite/#user You would want to use the simple-rados-client-with-blocklist profile for a libcephsqlite application. -- Patrick Donnelly, Ph.D. He / Him / His Red Hat Partner Engineer IBM, Inc. GPG: 19F28A586F808C2402351B93C3301A3E258DD79D
participants (2)
-
Christian Rohmann
-
Patrick Donnelly