Feature #66095: Ceph mgmt security enhacements - Orchestrator - Ceph

Actions

Copy link

Feature #66095

closed

Ceph mgmt security enhacements

Added by Redouane Kachach Elhicou almost 2 years ago. Updated over 1 year ago.

Status:

Resolved

Priority:

Normal

Assignee:

Redouane Kachach Elhicou

Category:

cephadm/monitoring

Target version:

% Done:

Source:

Backport:

Reviewed:

Affected Versions:

Pull request ID:

Tags (freeform):

Merge Commit:

Fixed In:

Released In:

Upkeep Timestamp:

Description

The current version of Ceph (as of the creation of this ticket) enables SSO exclusively through SAML for the dashboard (no OIDC support). Other components such as Grafana, Prometheus and Alertmanager rely on simple basic user/password authentication. This fragmentation in the authentication methods across components hinders the user experience, as SSO functionality is limited to the dashboard. The goal is to establish a unified user experience within Ceph, enabling users to log in once and seamlessly access both the dashboard and all monitoring stack services.