Introducing Ceph Mgmt-gateway: Unified Access, OIDC-based SSO, and HA for Manageme...
summary
Ceph adds an nginx-based mgmt-gateway in the Tentacle release that front-ends dashboard, Prometheus, Grafana and Alertmanager, terminates TLS, and enforces mTLS internally; authentication is offloaded to an OIDC SSO via oauth2-proxy supporting corporate and open-source IDPs (IBM, Red Hat, Azure, etc.). High availability uses multiple gateway instances with keepalived VRRP failover ~5s and per-service redundancy; demo shows transparent failover, certificate generation via seadm, and current limits: Prometheus metric gaps, no machine-to-machine proxy auth or full auditing.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:47Legacy architecture issues
- 6:30Management gateway solution
- 10:24High availability setup
- 13:18Security configurations comparison
- 15:26Demo setup overview
- 16:52Live demo walkthrough
- 25:52Q&A session
related talks
38mCeph NVMe-of Road Map
34mOver a Billion Requests Served per Day: Ensuring Everyone Is Happy with Our Ceph Clusters’...
39mCeph in Scientific Computing and Large Clusters BoF
44mNVMe-Over-Fabrics Support for Ceph
37mGoodbye Ingress - Hello Gateway API
18mGateways are All You Need
46mUnified Cluster Federation: A Hyperscaled Architecture of...
09mLightning Talk: High Availability for Cilium Egress Gateway