[feature] allow for option for custom user accounts to bind to custom service names

Bug #1843443 reported by Jeff Hillman
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Ceph-Proxy Charm
Triaged
Wishlist
Unassigned

Bug Description

Currently, the ceph-proxy charm acts very similar (if not identical) to the ceph-mon charm.

In that, when ceph-mon is deployed, and a service related to it, a user is client to match that service.

Example: if glance is bound to ceph-mon, a glance user is configured in ceph and on the glance client, /etc/ceph/client.ceph.glance.keyring is configured to talk to the cluster.

For ceph-proxy, we're attaching to an external ceph cluster, with external ceph administrators. If we want to connect to something, say, kubernetes-master, the current standardization of ceph-proxy requires that a ceph user be created called kubernetes-master, and then a different user for kubernetes-worker.

This is "forcing the hand" of the ceph administrators to follow our way of doing this. Ceph-proxy is not ceph-mon, and should be treated at least, somewhat, differently.

The proposal is to add a config option to ceph-proxy, so that for each ceph-user specified, we can specify the service to map that user to. Similar to how bridges map to interfaces with multiples on the same line for Neutron.

Example: "service-mappings: kubernetes-master:cdk-provisioner kubernetes-worker:cdk-consumer"

Tags: cpe-onsite
Changed in charm-ceph-proxy:
status: New → Triaged
importance: Undecided → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.