Skip to content

Commit

Permalink
fixup! docs: added documentation on swift and keystone
Browse files Browse the repository at this point in the history
  • Loading branch information
jklippel committed Apr 18, 2024
1 parent da37e92 commit 176a755
Showing 1 changed file with 23 additions and 15 deletions.
38 changes: 23 additions & 15 deletions Documentation/CRDs/Object-Storage/ceph-object-store-crd.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,21 +32,6 @@ spec:
dataChunks: 2
codingChunks: 1
preservePoolsOnDelete: true
#auth:
# keystone:
# acceptedRoles:
# - admin
# - member
# - service
# implicitTenants: "swift"
# revocationInterval: 1200
# serviceUserSecretName: usersecret
# tokenCacheSize: 1000
# url: https://keystone.example-namespace.svc/
#protocols:
# swift:
# accountInUrl: true
# urlPrefix: /swift
gateway:
# sslCertificateRef:
# caBundleRef:
Expand Down Expand Up @@ -116,6 +101,29 @@ Currently only OpenStack Keystone is supported.

### Keystone Settings

You can configure the use of keystone for authentication in the `spec.auth.keystone` section of the CRD:

```yaml
spec:
[...]
auth:
keystone:
acceptedRoles:
- admin
- member
- service
implicitTenants: "swift"
revocationInterval: 1200
serviceUserSecretName: usersecret
tokenCacheSize: 1000
url: https://keystone.example-namespace.svc/
protocols:
swift:
accountInUrl: true
urlPrefix: /swift
[...]
```

The `keystone`-section allows to configure the Keystone instance to use.

* `acceptedRoles`: The OpenStack Keystone [roles](https://docs.openstack.org/keystone/latest/admin/cli-manage-projects-users-and-roles.html#roles-and-role-assignments) accepted by RGW when authenticating against Keystone.
Expand Down

0 comments on commit 176a755

Please sign in to comment.