Skip to content

docs/rgw: deprecate tenant-based IAM in favor of accounts#60848

Merged
cbodley merged 1 commit intoceph:mainfrom
cbodley:wip-rgw-deprecate-iam-tenant
Jan 8, 2025
Merged

docs/rgw: deprecate tenant-based IAM in favor of accounts#60848
cbodley merged 1 commit intoceph:mainfrom
cbodley:wip-rgw-deprecate-iam-tenant

Conversation

@cbodley
Copy link
Copy Markdown
Contributor

@cbodley cbodley commented Nov 26, 2024

the user account feature was intended to cover all of the use cases of the previous tenant-based IAM/STS integration. announce deprecation of tenant-based IAM for the T release and removal for T+2

Show available Jenkins commands
  • jenkins retest this please
  • jenkins test classic perf
  • jenkins test crimson perf
  • jenkins test signed
  • jenkins test make check
  • jenkins test make check arm64
  • jenkins test submodules
  • jenkins test dashboard
  • jenkins test dashboard cephadm
  • jenkins test api
  • jenkins test docs
  • jenkins render docs
  • jenkins test ceph-volume all
  • jenkins test ceph-volume tox
  • jenkins test windows
  • jenkins test rook e2e

the user account feature was intended to cover all of the use cases of
the previous tenant-based IAM/STS integration. announce deprecation of
tenant-based IAM for the T release and removal for T+2

Signed-off-by: Casey Bodley <cbodley@redhat.com>
@cbodley
Copy link
Copy Markdown
Contributor Author

cbodley commented Nov 26, 2024

@pritha-srivastava it might be worth adding a deprecation notice where relavant to docs like
https://docs.ceph.com/en/latest/radosgw/STS/
https://docs.ceph.com/en/latest/radosgw/STSLite/

but it wasn't clear to me which parts are specific to tenant-based IAM though. maybe we should just go through and make sure they refer to accounts instead?

@cbodley cbodley added the rgw label Nov 26, 2024
@cbodley cbodley requested a review from a team November 26, 2024 17:59
Copy link
Copy Markdown
Contributor

@zdover23 zdover23 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@zdover23
Copy link
Copy Markdown
Contributor

jenkins retest this please

@cbodley
Copy link
Copy Markdown
Contributor Author

cbodley commented Dec 6, 2024

jenkins test make check

@cbodley
Copy link
Copy Markdown
Contributor Author

cbodley commented Dec 6, 2024

jenkins test make check arm64

@cbodley
Copy link
Copy Markdown
Contributor Author

cbodley commented Dec 6, 2024

jenkins test api

Comment thread PendingReleaseNotes
>=20.0.0

* RGW: The User Account feature introduced in Squid provides first-class support for
IAM APIs and policy. Our preliminary STS support was instead based on tenants, and
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggest expanding STS for those (like me) who don't know what it means here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants