Ceph CreateUser
CertifiedCreate an RGW user
Ceph CreateUser
Create an RGW user
Calls POST /api/rgw/user and returns the resulting user, including the generated S3 access keys. The secret key is returned only at creation time and is encrypted in the outputs.
type: io.kestra.plugin.ceph.rgw.CreateUserExamples
Create an RGW user
id: create_rgw_user
namespace: company.team
tasks:
- id: create_user
type: io.kestra.plugin.ceph.rgw.CreateUser
host: "ceph-mgr.internal"
username: "admin"
password: "{{ secret('CEPH_DASHBOARD_PASSWORD') }}"
uid: "svc-backups"
displayName: "Backup service account"
email: "backups@company.team"
Properties
displayName *string
Display name
Human-readable name for the user.
host *string
Ceph Dashboard host
Hostname or IP address of the Ceph Manager Dashboard. Must be reachable from the Kestra worker.
uid *string
User ID
Unique identifier for the new RGW user.
assets
Assets this task consumes as inputs or produces as outputs, for lineage tracking and the asset graph (Enterprise Edition). A flow declaring this property on a task is rejected in the open-source edition.
io.kestra.core.models.assets.AssetsDeclaration
IGNOREFAILWARNAsset failure behavior
Behavior applied to the task state when a declared asset fails to render, emit, or be persisted (e.g. a lock conflict): FAIL escalates it to FAILED, WARN (default) warns it if it would otherwise succeed, IGNORE leaves the state untouched.
Whether to auto-register assets referenced dynamically at runtime that are not statically declared in inputs or outputs.
The assets consumed as inputs.
io.kestra.core.models.assets.AssetIdentifier
1The assets produced as outputs.
io.kestra.plugin.ee.assets.Dataset
1150{}1150io.kestra.plugin.ee.assets.File
1150{}1150io.kestra.plugin.ee.assets.Table
1150{}1150io.kestra.plugin.ee.assets.VM
1150{}1150io.kestra.core.models.assets.External
1150{}1150io.kestra.core.models.assets.Custom
11501Custom asset type
{}1150email string
Optional contact email for the user.
password string
Password
Password for the Ceph Dashboard account. Never logged. Required unless token is set; ignored otherwise.
port integerstring
8443Ceph Dashboard port
TCP port of the Ceph Manager Dashboard REST API. Defaults to 8443.
skipSsl booleanstring
falseSkip TLS certificate verification
When true, disables TLS certificate verification. Useful when the Ceph Manager Dashboard uses a self-signed certificate, which is the default on most Ceph deployments. Defaults to false (secure): enable it explicitly and only for trusted networks.
token string
Pre-obtained JWT
A JWT obtained from POST /api/auth, used directly instead of username/password. Reused as-is for every request in the execution. It expires (Ceph default 8h TTL) and is NOT auto-renewed, so do not use it in triggers or scheduled flows; use username/password there instead. Mutually exclusive with password: when set, username/password are ignored.
username string
Username
Ceph Dashboard account used to obtain a session token from POST /api/auth. Required unless token is set.
Outputs
displayName string
Display name
Human-readable name of the user.
email string
Contact email of the user, if set.
keys array
S3 access keys
S3 credentials Ceph generated for the user. Creating the user is the only point at which the secret key is returned.
io.kestra.plugin.ceph.rgw.UserInfo-S3Key
Access key
S3 access key ID for the user.
Secret key
S3 secret access key, encrypted in the outputs. Reference it directly to feed another task, or store it in a secret; avoid logging it.
userId string
User ID
Unique identifier of the RGW user.
