[ceph-users] Multi tenanted radosgw and existing Keystone users/tenants

[Mark Kirkwood]

Hi,

I've set up a Luminous RGW with Keystone integration, and subsequently set

rgw keystone implicit tenants = true

So now all newly created users/tenants (or old ones that never accessed
RGW) get their own namespaces. However there are some pre-existing users
that have created buckets and objects - and these are in the global
namespace. Is there any way to move the existing buckets and objects to
private namespaces and change these users to use said private namespaces?

Cheers

Mark

[Florian Haas]

Hi Mark,

Post by Mark Kirkwood
Hi,
I've set up a Luminous RGW with Keystone integration, and subsequently set
rgw keystone implicit tenants = true
So now all newly created users/tenants (or old ones that never accessed
RGW) get their own namespaces. However there are some pre-existing users
that have created buckets and objects - and these are in the global
namespace. Is there any way to move the existing buckets and objects to
private namespaces and change these users to use said private namespaces?

It looks like you're running into the issue described in this PR:
https://github.com/ceph/ceph/pull/23994

Sooo... bit complicated, fix still pending.

Cheers,
Florian

[Matt Benjamin]

This capability is stable and should merge to master shortly.

Matt

Post by Florian Haas
Hi Mark,

Post by Mark Kirkwood
Hi,
I've set up a Luminous RGW with Keystone integration, and subsequently set
rgw keystone implicit tenants = true
So now all newly created users/tenants (or old ones that never accessed
RGW) get their own namespaces. However there are some pre-existing users
that have created buckets and objects - and these are in the global
namespace. Is there any way to move the existing buckets and objects to
private namespaces and change these users to use said private namespaces?

https://github.com/ceph/ceph/pull/23994
Sooo... bit complicated, fix still pending.
Cheers,
Florian
_______________________________________________
ceph-users mailing list
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

--
Matt Benjamin
Red Hat, Inc.
315 West Huron Street, Suite 140A
Ann Arbor, Michigan 48103

http://www.redhat.com/en/technologies/storage

tel. [phone]
fax. [phone]
cel. 734-216-5309

[Mark Kirkwood]

Post by Florian Haas
Hi Mark,

Post by Mark Kirkwood
Hi,
I've set up a Luminous RGW with Keystone integration, and subsequently set
rgw keystone implicit tenants = true
So now all newly created users/tenants (or old ones that never accessed
RGW) get their own namespaces. However there are some pre-existing users
that have created buckets and objects - and these are in the global
namespace. Is there any way to move the existing buckets and objects to
private namespaces and change these users to use said private namespaces?

https://github.com/ceph/ceph/pull/23994
Sooo... bit complicated, fix still pending.

Thanks!

FWIW for a very small number of existing buckets and objects, unloading
the buckets and objects, deleting the buckets and the RGW user (i.e
*not* the Keystone tenant + user) and reloading again works. Clearly
this rapidly becomes unwieldy...


Cheers

Mark