Unable to Create/Get Policies via IAM API in Ceph Squid – Need Assistance
Dear Ceph Community, I hope this email finds you well. We are currently using Ceph for object storage in our project, where we are storing objects in a distributed storage environment. Recently, we upgraded from the Reef version to the Squid version in order to leverage the new IAM (Identity and Access Management) features, which provide IAM users, roles, groups, and policies for Ceph accounts. While we are successfully using the AWS IAM-compatible API to create IAM users, roles, groups, and policies for a Ceph account, we are encountering issues with the iam.createPolicy() and iam.getPolicy() methods. Specifically, we are receiving a "MethodNotAllowed" error when attempting to use these methods. However, other IAM methods are functioning as expected. As IAM policies are a crucial feature for managing access in our project, we have been facing difficulties for several days. If anyone in the community has encountered a similar issue or could provide guidance on how to resolve this, it would be greatly appreciated. Thank you in advance for your time and assistance. I look forward to hearing from you. Thanks & Regards, Ashokkumar M |Associate Software Engineer Ph No: (+91) 6383788583 email: mailto:chinnarasu.a@zybisys.com Zybisys Consulting LLP | NSA Tower, No. 1B Akila Nagar, Ganapathy Nagar Main Road, Thiruvanaikoil, Tamilnadu, Trichy, India-620005 http://zybisys.com/ Disclaimer : The content of this email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify the sender and remove the messages from your system. If you are not the named addressee, it is strictly forbidden for you to share, circulate, distribute or copy any part of this e-mail to any third party without the written consent of the sender. E-mail transmission cannot be guaranteed to be secured or error free as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or may contain viruses. Therefore, we do not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. The recipient should check this e-mail and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email."
On Mon, Nov 25, 2024 at 8:54 AM Ashok Kumar M <ashok.m@zybisys.com> wrote:
Dear Ceph Community,
I hope this email finds you well.
We are currently using Ceph for object storage in our project, where we are storing objects in a distributed storage environment. Recently, we upgraded from the Reef version to the Squid version in order to leverage the new IAM (Identity and Access Management) features, which provide IAM users, roles, groups, and policies for Ceph accounts.
While we are successfully using the AWS IAM-compatible API to create IAM users, roles, groups, and policies for a Ceph account, we are encountering issues with the *iam.createPolicy()* and *iam.getPolicy()* methods. Specifically, we are receiving a "*MethodNotAllowed*" error when attempting to use these methods. However, other IAM methods are functioning as expected.
the CreatePolicy and GetPolicy actions are for customer-managed policy, which is not supported. the only managed policies that are supported are listed in https://docs.ceph.com/en/latest/radosgw/iam/#managed-policies i've opened a feature request for customer-managed policy in https://tracker.ceph.com/issues/69040
As IAM policies are a crucial feature for managing access in our project, we have been facing difficulties for several days. If anyone in the community has encountered a similar issue or could provide guidance on how to resolve this, it would be greatly appreciated.
Thank you in advance for your time and assistance. I look forward to hearing from you. *Thanks & Regards,*
Ashokkumar M *|Associate Software Engineer* *Ph No:* (+91) 6383788583 *email: ashok.m@zybisys.com <chinnarasu.a@zybisys.com>* *Zybisys Consulting LLP | *NSA Tower, No. 1B Akila Nagar, Ganapathy Nagar Main Road, Thiruvanaikoil, Tamilnadu, Trichy, India-620005 zybisys.com
------------------------------ *Disclaimer :** The content of this email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to which they are addressed. If you have received this email in error, please notify the sender and remove the messages from your system. If you are not the named addressee, it is strictly forbidden for you to share, circulate, distribute or copy any part of this e-mail to any third party without the written consent of the sender.*
*E-mail transmission cannot be guaranteed to be secured or error free as information could be intercepted, corrupted, lost, destroyed, arrive late, incomplete, or may contain viruses. Therefore, we do not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. The recipient should check this e-mail and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email."*
_______________________________________________ Dev mailing list -- dev@ceph.io To unsubscribe send an email to dev-leave@ceph.io
participants (2)
-
Ashok Kumar M
-
Casey Bodley