rgw用户中的caps指的是什么

这期内容当中小编将会给大家带来有关rgw用户中的caps指的是什么，文章内容丰富且以专业的角度为大家分析和叙述，阅读完这篇文章希望大家可以有所收获。

成都创新互联公司专注为客户提供全方位的互联网综合服务，包含不限于成都做网站、成都网站设计、成都外贸网站建设、蒙山网络推广、微信小程序定制开发、蒙山网络营销、蒙山企业策划、蒙山品牌公关、搜索引擎seo、人物专访、企业宣传片、企业代运营等，从售前售中售后，我们都将竭诚为您服务，您的肯定，是我们最大的嘉奖；成都创新互联公司为所有大学生创业者提供蒙山建站搭建服务，24小时服务热线：13518219792，官方网址：www.cdcxhl.com

可以用以下命令为用户添加所有的caps，拥有对应的cap的用户可以操作不仅限与属于用户自己的桶和对象和其他用户，可以看作拥有管理员的某种权限

radosgw-admin caps add --uid=admin --caps="users=*;buckets=*;metadata=*;usage=*;zone=*"

*代表read和write

可以按照以下方式为不同的用户添加不同的caps，但是不建议给普通用户开启任何caps

testcaps1用户
radosgw-admin caps add --uid=testcaps1 --caps="users=*" 

testcaps2用户
radosgw-admin caps add --uid=testcaps2 --caps="buckets=*"

testcaps3用户
radosgw-admin caps add --uid=testcaps3 --caps="metadata=*" 

testcaps4用户
radosgw-admin caps add --uid=testcaps4 --caps="usage=*"

testcaps5用户
radosgw-admin caps add --uid=testcaps5 --caps="zone=*"

对照http://docs.ceph.com/docs/jewel/radosgw/adminops/的介绍

cap为usage=read

用户拥有 usage=read 的可以查看调用admin rest api 的 usage 接口

于是只有testcaps4是可以

GET /admin/usage?format=json&start=2016-07-26%2013:00:00&show-entries=True&show-summary=True HTTP/1.1
Host: yuliyangdebugweb68.tunnel.qydev.com
User-Agent: python-requests/2.10.0
Accept: */*
Accept-Encoding: gzip, deflate
Authorization: AWS testcaps4:Hk5gPweXZKBNraDK8/1XvHv8Umw=
Connection: keep-alive
Date: Tue, 26 Jul 2016 05:51:21 GMT

HTTP/1.1 200 OK
Content-Length: 27
Connection: Keep-Alive
Date: Tue, 26 Jul 2016 05:48:50 GMT
X-Amz-Request-Id: tx000000000000000000145-005796f9c2-a8f9f-default

{"entries":[],"summary":[]}

其他用户则无权限获取usage的统计信息

GET /admin/usage?format=json&start=2016-07-26%2013:00:00&show-entries=True&show-summary=True HTTP/1.1
Host: yuliyangdebugweb68.tunnel.qydev.com
User-Agent: python-requests/2.10.0
Accept: */*
Accept-Encoding: gzip, deflate
Authorization: AWS testcaps5:fJZkl8WezcmVz9/aekKsjbq0DrE=
Connection: keep-alive
Date: Tue, 26 Jul 2016 05:51:15 GMT


HTTP/1.1 403 Forbidden
Content-Length: 119
Accept-Ranges: bytes
Connection: Keep-Alive
Content-Type: application/json
Date: Tue, 26 Jul 2016 05:48:44 GMT
X-Amz-Request-Id: tx000000000000000000144-005796f9bc-a8f9f-default

{"Code":"AccessDenied","RequestId":"tx000000000000000000144-005796f9bc-a8f9f-default","HostId":"a8f9f-default-default"}

cap为usage=write

拥有该cap的用户可以删除usage的统计信息

DELETE /{admin}/usage?format=json HTTP/1.1

#cap为users=read 该cap的用户可以获取用户信息 display_name user_id suspended max_buckets subusers keys swift_keys caps，获取配额信息

GET /{admin}/user?format=json HTTP/1.1

cap为users=write

该cap的用户可以创建或修改或删除其他用户或子用户,添加用户的cap，删除用户cap,创建key，删除key，修改key，修改配额

PUT /{admin}/user?format=json HTTP/1.1
Host: {fqdn}

PUT /{admin}/user?caps&format=json HTTP/1.1
Host {fqdn}

cap为buckets=read

该cap的用户可获取bucket信息,对象或Bucket的acl

GET /{admin}/bucket?format=json HTTP/1.1
Host {fqdn}

GET /{admin}/bucket?policy&format=json HTTP/1.1
Host {fqdn}

cap为buckets=write

该cap的用户可以check bucket index，删除bucket，unlink bucket，link bucket,删除对象(不论桶还是对象是不是属于该用户)

GET /{admin}/bucket?index&format=json HTTP/1.1
Host {fqdn}

DELETE /{admin}/bucket?format=json HTTP/1.1
Host {fqdn}

POST /{admin}/bucket?format=json HTTP/1.1
Host {fqdn}

PUT /{admin}/bucket?format=json HTTP/1.1
Host {fqdn}

DELETE /{admin}/bucket?object&format=json HTTP/1.1
Host {fqdn}

cap为metadata=read

该cap的用户可以读取user 和 bucket的metadata

radosgw-admin metadata get user:admin

{
    "key": "user:admin",
    "ver": {
        "tag": "_cz1Iiuv69GdQbVsCAoagBik",
        "ver": 15
    },
    "mtime": "2016-07-25 04:28:35.014334Z",
    "data": {
        "user_id": "admin",
        "display_name": "admin",
        "email": "admin@cmss.com",
        "suspended": 0,
        "max_buckets": 1000,
        "auid": 0,
        "subusers": [
            {
                "id": "admin:swift",
                "permissions": "full-control"
            }
        ],
        "keys": [
            {
                "user": "admin",
                "access_key": "F3ZKGR2Q6M8QJA5AVBAB",
                "secret_key": "sQzliizcmlSJg1BL6nOpL41hYRvg7dLXTxFtOZb2"
            },
            {
                "user": "admin",
                "access_key": "H3085SM4LQUT5IVNC39D",
                "secret_key": "2z3Bw09EDyhtO11rH7DyZBioyaHozZDM4mZCOi9r"
            },
            {
                "user": "admin:yuliyangtests3002",
                "access_key": "VCFIBX41YJQ9U4NB9F6A",
                "secret_key": "GoUcvNUe52KoZJux24V2mMFkkaN1Bh2TGdTOkxUD"
            },
            {
                "user": "admin",
                "access_key": "admin",
                "secret_key": "admin"
            },
            {
                "user": "admin:admin-subuser3",
                "access_key": "admin-subuser3",
                "secret_key": "admin-subuser3"
            },
            {
                "user": "admin:admin-subuser4",
                "access_key": "admin-subuser4",
                "secret_key": "admin-subuser4"
            }
        ],
        "swift_keys": [
            {
                "user": "admin:swift",
                "secret_key": "FlC7XZuiLjdTjSC1wZ9S2KnIlccrQkSGm0P0vHvl"
            },
            {
                "user": "admin:yuliyangswift1",
                "secret_key": "作s为俄"
            }
        ],
        "caps": [
            {
                "type": "buckets",
                "perm": "*"
            },
            {
                "type": "metadata",
                "perm": "*"
            },
            {
                "type": "usage",
                "perm": "*"
            },
            {
                "type": "users",
                "perm": "*"
            },
            {
                "type": "zone",
                "perm": "*"
            }
        ],
        "op_mask": "read, write, delete",
        "default_placement": "",
        "placement_tags": [],
        "bucket_quota": {
            "enabled": false,
            "max_size_kb": -1,
            "max_objects": -1
        },
        "user_quota": {
            "enabled": false,
            "max_size_kb": -1,
            "max_objects": -1
        },
        "temp_url_keys": [],
        "attrs": [
            {
                "key": "user.rgw.idtag",
                "val": ""
            },
            {
                "key": "user.rgw.manifest",
                "val": ""
            }
        ]
    }
}



radosgw-admin metadata get bucket:bababa
{
    "key": "bucket:bababa",
    "ver": {
        "tag": "_8KAo6w6VPo5fhGtzTvxwRaE",
        "ver": 1
    },
    "mtime": "2016-07-24 23:43:19.214419Z",
    "data": {
        "bucket": {
            "name": "bababa",
            "pool": "default.rgw.buckets.data",
            "data_extra_pool": "default.rgw.buckets.non-ec",
            "index_pool": "default.rgw.buckets.index",
            "marker": "b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2",
            "bucket_id": "b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2"
        },
        "owner": "date2",
        "creation_time": "0.000000",
        "linked": "true",
        "has_bucket_info": "false"
    }
}

user的metadata

GET /admin/metadata/user?format=json&key=admin HTTP/1.1
Host: yuliyangdebugweb68.tunnel.qydev.com
User-Agent: python-requests/2.10.0
Accept: */*
Accept-Encoding: gzip, deflate
Authorization: AWS testcaps3:qSnsnWOB9hljBBZz+wumQKm/qfM=
Connection: keep-alive
Date: Wed, 27 Jul 2016 02:17:35 GMT



HTTP/1.1 200 OK
Content-Length: 1497
Connection: Keep-Alive
Content-Type: application/json
Date: Wed, 27 Jul 2016 02:15:02 GMT
X-Amz-Request-Id: tx00000000000000000033e-0057981926-a8f9f-default

{"key":"user:admin","ver":{"tag":"_cz1Iiuv69GdQbVsCAoagBik","ver":15},"mtime":"2016-07-25 04:28:35.014334Z","data":{"user_id":"admin","display_name":"admin","email":"admin@cmss.com","suspended":0,"max_buckets":1000,"auid":0,"subusers":[{"id":"admin:swift","permissions":"full-control"}],"keys":[{"user":"admin","access_key":"F3ZKGR2Q6M8QJA5AVBAB","secret_key":"sQzliizcmlSJg1BL6nOpL41hYRvg7dLXTxFtOZb2"},{"user":"admin","access_key":"H3085SM4LQUT5IVNC39D","secret_key":"2z3Bw09EDyhtO11rH7DyZBioyaHozZDM4mZCOi9r"},{"user":"admin:yuliyangtests3002","access_key":"VCFIBX41YJQ9U4NB9F6A","secret_key":"GoUcvNUe52KoZJux24V2mMFkkaN1Bh2TGdTOkxUD"},{"user":"admin","access_key":"admin","secret_key":"admin"},{"user":"admin:admin-subuser3","access_key":"admin-subuser3","secret_key":"admin-subuser3"},{"user":"admin:admin-subuser4","access_key":"admin-subuser4","secret_key":"admin-subuser4"}],"swift_keys":[{"user":"admin:swift","secret_key":"FlC7XZuiLjdTjSC1wZ9S2KnIlccrQkSGm0P0vHvl"},{"user":"admin:yuliyangswift1","secret_key":"作s为俄"}],"caps":[{"type":"buckets","perm":"*"},{"type":"metadata","perm":"*"},{"type":"usage","perm":"*"},{"type":"users","perm":"*"},{"type":"zone","perm":"*"}],"op_mask":"read, write, delete","default_placement":"","placement_tags":[],"bucket_quota":{"enabled":false,"max_size_kb":-1,"max_objects":-1},"user_quota":{"enabled":false,"max_size_kb":-1,"max_objects":-1},"temp_url_keys":[],"attrs":[{"key":"user.rgw.idtag","val":""},{"key":"user.rgw.manifest","val":""}]}}

bucket的metadata

GET /admin/metadata/bucket?format=json&key=bababa HTTP/1.1
Host: yuliyangdebugweb68.tunnel.qydev.com
User-Agent: python-requests/2.10.0
Accept: */*
Accept-Encoding: gzip, deflate
Authorization: AWS testcaps3:YrRXMsS6SRDJ2QeGSGyT+UBNkNU=
Connection: keep-alive
Date: Wed, 27 Jul 2016 02:38:33 GMT


HTTP/1.1 200 OK
Content-Length: 470
Connection: Keep-Alive
Content-Type: application/json
Date: Wed, 27 Jul 2016 02:35:59 GMT
X-Amz-Request-Id: tx000000000000000000343-0057981e0f-a8f9f-default

{"key":"bucket:bababa","ver":{"tag":"_8KAo6w6VPo5fhGtzTvxwRaE","ver":1},"mtime":"2016-07-24 23:43:19.214419Z","data":{"bucket":{"name":"bababa","pool":"default.rgw.buckets.data","data_extra_pool":"default.rgw.buckets.non-ec","index_pool":"default.rgw.buckets.index","marker":"b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2","bucket_id":"b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2"},"owner":"date2","creation_time":"0.000000","linked":"true","has_bucket_info":"false"}}

cap为metadata=write

该cap的用户可以设置user 和 bucket的metadata

$ radosgw-admin metadata put bucket.instance:widodh:default.20111.1 < bucket.json

PUT /admin/metadata/bucket?key=bababa HTTP/1.1
Host: yuliyangdebugweb68.tunnel.qydev.com
User-Agent: python-requests/2.10.0
Content-Length: 454
Accept: */*
Accept-Encoding: gzip, deflate
Authorization: AWS testcaps3:6EjaVjvYDQlOpFA4qK1wnazXy4A=
Connection: keep-alive
Content-Type: application/json
Date: Wed, 27 Jul 2016 02:45:39 GMT

{"key":"bucket:bababa","ver":{"tag":"_8KAo6w6VPo5fhGtzTvxwRaE","ver":1},"mtime":"2016-07-24 23:43:19.214419Z","data":{"bucket":{"name":"bababa","pool":"yuliyang","data_extra_pool":"default.rgw.buckets.non-ec","index_pool":"default.rgw.buckets.index","marker":"b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2","bucket_id":"b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2"},"owner":"date2","creation_time":"0.000000","linked":"true","has_bucket_info":"false"}}

[root@ceph03 ~]# radosgw-admin metadata get bucket:bababa
{
    "key": "bucket:bababa",
    "ver": {
        "tag": "_8KAo6w6VPo5fhGtzTvxwRaE",
        "ver": 1
    },
    "mtime": "2016-07-24 23:43:19.214419Z",
    "data": {
        "bucket": {
            "name": "bababa",
            "pool": "yuliyang",
            "data_extra_pool": "default.rgw.buckets.non-ec",
            "index_pool": "default.rgw.buckets.index",
            "marker": "b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2",
            "bucket_id": "b74b128b-eac1-4f3a-a5ca-60536d190664.694099.2"
        },
        "owner": "date2",
        "creation_time": "0.000000",
        "linked": "true",
        "has_bucket_info": "false"
    }
}

cap为zone=read

有该cap的用户何以通ADMIN REST API 过获取zone信息

获取zone
[root@ceph03 ~]# radosgw-admin zone get  --rgw-zone=default 
{
    "id": "b74b128b-eac1-4f3a-a5ca-60536d190664",
    "name": "default",
    "domain_root": "default.rgw.data.root",
    "control_pool": "default.rgw.control",
    "gc_pool": "default.rgw.gc",
    "log_pool": "default.rgw.log",
    "intent_log_pool": "default.rgw.intent-log",
    "usage_log_pool": "default.rgw.usage",
    "user_keys_pool": "default.rgw.users.keys",
    "user_email_pool": "default.rgw.users.email",
    "user_swift_pool": "default.rgw.users.swift",
    "user_uid_pool": "default.rgw.users.uid",
    "system_key": {
        "access_key": "",
        "secret_key": ""
    },
    "placement_pools": [
        {
            "key": "default-placement",
            "val": {
                "index_pool": "default.rgw.buckets.index",
                "data_pool": "default.rgw.buckets.data",
                "data_extra_pool": "default.rgw.buckets.non-ec",
                "index_type": 0
            }
        }
    ],
    "metadata_heap": "default.rgw.meta",
    "realm_id": ""
}

获取zonegroup
[root@node1 ~]# radosgw-admin zonegroup-map get   --rgw-zonegroup=de              
{
    "zonegroups": [
        {
            "key": "b47af7c7-e2d8-4b62-8966-b5b6de0bddc3",
            "val": {
                "id": "b47af7c7-e2d8-4b62-8966-b5b6de0bddc3",
                "name": "de",
                "api_name": "de",
                "is_master": "true",
                "endpoints": [
                    "http:\/\/192.168.10.10:7480"
                ],
                "hostnames": [],
                "hostnames_s3website": [],
                "master_zone": "426f76bd-bb22-4098-b064-ae28b8357bb0",
                "zones": [
                    {
                        "id": "426f76bd-bb22-4098-b064-ae28b8357bb0",
                        "name": "nue",
                        "endpoints": [],
                        "log_meta": "true",
                        "log_data": "false",
                        "bucket_index_max_shards": 0,
                        "read_only": "false"
                    }
                ],
                "placement_targets": [
                    {
                        "name": "default-placement",
                        "tags": []
                    }
                ],
                "default_placement": "default-placement",
                "realm_id": "f1574551-03e7-4739-a136-9670c62b46c1"
            }
        }
    ],
    "master_zonegroup": "b47af7c7-e2d8-4b62-8966-b5b6de0bddc3",
    "bucket_quota": {
        "enabled": false,
        "max_size_kb": -1,
        "max_objects": -1
    },
    "user_quota": {
        "enabled": false,
        "max_size_kb": -1,
        "max_objects": -1
    }
}

+++++++++++++++++++++++++++++++请求URL++++++++++++++++++++++++++++++++
获取zonegroup的url
< GET /admin/config HTTP/1.1
< Host: 192.168.10.10:7480
< Connection: keep-alive
< Accept-Encoding: gzip, deflate
< Accept: */*
< User-Agent: python-requests/2.10.0
< date: Wed, 27 Jul 2016 07:30:10 GMT
< Authorization: AWS admin:i1P7+FvmhMBlQ/gaUDtwe4QZ424=
< 

> HTTP/1.1 200 OK
> x-amz-request-id: tx000000000000000000005-00579862e5-d7d96-nue
> Content-Length: 803
> Date: Wed, 27 Jul 2016 07:29:41 GMT
> Connection: Keep-Alive
> 
{"regions":[{"key":"b47af7c7-e2d8-4b62-8966-b5b6de0bddc3","val":{"id":"b47af7c7-e2d8-4b62-8966-b5b6de0bddc3","name":"de","api_name":"de","is_master":"true","endpoints":["http:\/\/192.168.10.10:7480"],"hostnames":[],"hostnames_s3website":[],"master_zone":"426f76bd-bb22-4098-b064-ae28b8357bb0","zones":[{"id":"426f76bd-bb22-4098-b064-ae28b8357bb0","name":"nue","endpoints":[],"log_meta":"true","log_data":"false","bucket_index_max_shards":0,"read_only":"false"}],"placement_targets":[{"name":"default-placement","tags":[]}],"default_placement":"default-placement","realm_id":"f1574551-03e7-4739-a136-9670c62b46c1"}}],"master_region":"b47af7c7-e2d8-4b62-8966-b5b6de0bddc3","bucket_quota":{"enabled":false,"max_size_kb":-1,"max_objects":-1},"user_quota":{"enabled":false,"max_size_kb":-1,"max_objects":-1}}

cap为zone=write

有该cap权限的用户可以修改zone相关的信息

PUT  /admin/config HTTP/1.1
body体内容为json格式

注意： 可以通过ADMIN REST API 修改zone等信息，实现bucket与pool的绑定，而不用命令行来进行bucket与pool的绑定操作

上述就是小编为大家分享的rgw用户中的caps指的是什么了，如果刚好有类似的疑惑，不妨参照上述分析进行理解。如果想知道更多相关知识，欢迎关注创新互联行业资讯频道。