Ceph CreateUser
CertifiedCreate an RGW user
Ceph CreateUser
Create an RGW user
Calls POST /api/rgw/user and returns the resulting user, including the generated S3 access keys. The secret key is returned only at creation time and is encrypted in the outputs.
type: io.kestra.plugin.ceph.rgw.CreateUserExamples
Create an RGW user
id: create_rgw_user
namespace: company.team
tasks:
- id: create_user
type: io.kestra.plugin.ceph.rgw.CreateUser
host: "ceph-mgr.internal"
username: "admin"
password: "{{ secret('CEPH_DASHBOARD_PASSWORD') }}"
uid: "svc-backups"
displayName: "Backup service account"
email: "backups@company.team"
Properties
displayName *Requiredstring
Display name
Human-readable name for the user.
host *Requiredstring
Ceph Dashboard host
Hostname or IP address of the Ceph Manager Dashboard. Must be reachable from the Kestra worker.
uid *Requiredstring
User ID
Unique identifier for the new RGW user.
email string
Optional contact email for the user.
password string
Password
Password for the Ceph Dashboard account. Never logged. Required unless token is set; ignored otherwise.
pluginDefaultsRef Non-dynamicstring
Reference (ref) of the pluginDefaults to apply to this task.
port integerstring
8443Ceph Dashboard port
TCP port of the Ceph Manager Dashboard REST API. Defaults to 8443.
skipSsl booleanstring
falseSkip TLS certificate verification
When true, disables TLS certificate verification. Useful when the Ceph Manager Dashboard uses a self-signed certificate, which is the default on most Ceph deployments. Defaults to false (secure): enable it explicitly and only for trusted networks.
token string
Pre-obtained JWT
A JWT obtained from POST /api/auth, used directly instead of username/password. Reused as-is for every request in the execution. It expires (Ceph default 8h TTL) and is NOT auto-renewed, so do not use it in triggers or scheduled flows; use username/password there instead. Mutually exclusive with password: when set, username/password are ignored.
username string
Username
Ceph Dashboard account used to obtain a session token from POST /api/auth. Required unless token is set.
Outputs
displayName string
Display name
Human-readable name of the user.
email string
Contact email of the user, if set.
keys array
S3 access keys
S3 credentials Ceph generated for the user. Creating the user is the only point at which the secret key is returned.
io.kestra.plugin.ceph.rgw.UserInfo-S3Key
Access key
S3 access key ID for the user.
Secret key
S3 secret access key, encrypted in the outputs. Reference it directly to feed another task, or store it in a secret; avoid logging it.
userId string
User ID
Unique identifier of the RGW user.
