← Back to index Esc
Kind
CephObjectStoreUser
Group
ceph.rook.io
Version
v1
apiVersion: ceph.rook.io/v1 kind: CephObjectStoreUser metadata: name: example
Tip: use .spec.accountRef for path-only search
View raw schema
apiVersion string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata object required
spec object required
ObjectStoreUserSpec represents the spec of a CephObjectStoreUser
accountRef object
AccountRef is a reference to a CephObjectStoreAccount to associate this user with. The referenced account must be in the same namespace as the user. When set, the user is created as an account user with no default permissions, and resources created by this user are owned by the account.
name string required
Name of the CephObjectStoreAccount CR
pattern: ^[a-zA-Z0-9 ._-]+$
minLength: 1
maxLength: 2048
capabilities object
Additional admin-level capabilities for the Ceph object store user
accounts string
Add capabilities for user to manage accounts. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities Note: Only supported from Ceph Squid (v19.2.3) onwards
enum: *, read, write, read, write
amz-cache string
Add capabilities for user to send request to RGW Cache API header. Documented in https://docs.ceph.com/en/latest/radosgw/rgw-cache/#cache-api
enum: *, read, write, read, write
bilog string
Add capabilities for user to change bucket index logging. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
bucket string
Admin capabilities to read/write Ceph object store buckets. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
buckets string
Admin capabilities to read/write Ceph object store buckets. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
datalog string
Add capabilities for user to change data logging. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
info string
Admin capabilities to read/write information about the user. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
mdlog string
Add capabilities for user to change metadata logging. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
metadata string
Admin capabilities to read/write Ceph object store metadata. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
oidc-provider string
Add capabilities for user to change oidc provider. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
ratelimit string
Add capabilities for user to set rate limiter for user and bucket. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
roles string
Admin capabilities to read/write roles for user. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
usage string
Admin capabilities to read/write Ceph object store usage. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
user string
Admin capabilities to read/write Ceph object store users. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
user-policy string
Add capabilities for user to change user policies. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
userInfoWithoutKeys string
Add capabilities for user to fetch user info without keys. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities Note: Only supported from Ceph Squid (v19.2.0) onwards
enum: *, read, write, read, write
users string
Admin capabilities to read/write Ceph object store users. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
zone string
Admin capabilities to read/write Ceph object store zones. Documented in https://docs.ceph.com/en/latest/radosgw/admin/?#add-remove-admin-capabilities
enum: *, read, write, read, write
clusterNamespace string
The namespace where the parent CephCluster and CephObjectStore are found
defaultPlacement string
DefaultPlacement sets the default pool placement target for buckets created by this user. It must name a placement target known to the zonegroup serving the referenced object store; RGW rejects unknown targets. If this field is absent the controller does not manage the user's placement: an existing value (set previously through this field, or outside of Rook) is left in place.
pattern: ^[a-zA-Z0-9._-]+$
minLength: 1
maxLength: 2048
defaultStorageClass string
DefaultStorageClass sets the default storage class for objects created by this user, within the placement set by DefaultPlacement (which must also be set). The storage class must exist on that placement target; RGW rejects unknown storage classes. If this field is absent the controller does not manage the user's storage class: an existing value is preserved, except when DefaultPlacement changes, which resets the storage class to the new target's default (STANDARD).
pattern: ^[a-zA-Z0-9._-]+$
minLength: 1
maxLength: 2048
displayName string
The display name for the ceph user.
keys []object
Allows specifying credentials for the user. If not provided, the operator will generate them.
accessKeyRef object
Secret key selector for the access_key (commonly referred to as AWS_ACCESS_KEY_ID).
key string required
The key of the secret to select from. Must be a valid secret key.
name string
Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
optional boolean
Specify whether the Secret or its key must be defined
secretKeyRef object
Secret key selector for the secret_key (commonly referred to as AWS_SECRET_ACCESS_KEY).
key string required
The key of the secret to select from. Must be a valid secret key.
name string
Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
optional boolean
Specify whether the Secret or its key must be defined
opMask []string
The op-mask of the user.
minItems: 0
maxItems: 3
quotas object
ObjectUserQuotaSpec can be used to set quotas for the object store user to limit their usage. See the [Ceph docs](https://docs.ceph.com/en/latest/radosgw/admin/?#quota-management) for more
maxBuckets integer
Maximum bucket limit for the ceph user
maxObjects integer
Maximum number of objects across all the user's buckets
format: int64
maxSize string | integer
Maximum size limit of all objects across all the user's buckets See https://pkg.go.dev/k8s.io/apimachinery/pkg/api/resource#Quantity for more info.
string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
store string
The store the user will be created in
status object
ObjectStoreUserStatus represents the status Ceph Object Store Gateway User
info object
keys []object
name string
name is unique within a namespace to reference a secret resource.
namespace string
namespace defines the space within which the secret name must be unique.
resourceVersion string
uid string
UID is a type that holds unique ID values, including UUIDs. Because we don't ONLY use UUIDs, this is an alias to string. Being a type captures intent and helps make sure that UIDs and names do not get conflated.
observedGeneration integer
ObservedGeneration is the latest generation observed by the controller.
format: int64
phase string

No matches. Try .spec.accountRef for an exact path

Copied!