[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
Yes you're right. I have a Global sync rule in the zonegroup: "sync_from_all": "true", "sync_from": [], "redirect_zone": "" If I need to stop/start the sync after creation I use the command: radosgw-admin bucket sync enable/disable --bucket=$newbucket I developed it but clients can create bucket and I have no control on the bucket if it's created out of my program. Because of that I'm looking something: 1- Do not sync buckets if its not enabled by me. 2- Sync all the other "sync started" buckets. Szabo, Istvan (Agoda) , 31 May 2021 Pzt, 12:11 tarihinde şunu yazdı: > > Bucket is created but if no sync rule set, the data will not be synced across. > > Istvan Szabo > Senior Infrastructure Engineer > --- > Agoda Services Co., Ltd. > e: istvan.sz...@agoda.com > --- > > -Original Message- > From: mhnx > Sent: Monday, May 31, 2021 4:07 PM > To: Ceph Users > Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW > Multisite env. > > Hello. > > I have a multisite RGW environment. > When I create a new bucket, the bucket is directly created on master and > secondary. > If I don't want to sync a bucket, I need to stop sync after creation. > Is there any global option as "Do not sync directly, only start if I want to" > ? > ___ > ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to > ceph-users-le...@ceph.io > > > This message is confidential and is for the sole use of the intended > recipient(s). It may also be privileged or otherwise protected by copyright > or other legal rules. If you have received it by mistake please let us know > by reply email and delete it from your system. It is prohibited to copy this > message or disclose its content to anyone. Any confidentiality or privilege > is not waived or lost by any mistaken delivery or unauthorized disclosure of > the message. All messages sent to and from Agoda may be monitored to ensure > compliance with company policies, to protect the company's interests and to > remove potential malware. Electronic messages may be intercepted, amended, > lost or deleted, or contain viruses. ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
On 5/31/21 3:02 PM, mhnx wrote: Yes you're right. I have a Global sync rule in the zonegroup: "sync_from_all": "true", "sync_from": [], "redirect_zone": "" If I need to stop/start the sync after creation I use the command: radosgw-admin bucket sync enable/disable --bucket=$newbucket I developed it but clients can create bucket and I have no control on the bucket if it's created out of my program. Because of that I'm looking something: 1- Do not sync buckets if its not enabled by me. 2- Sync all the other "sync started" buckets. This can be achieved using Multisite sync-policy [1]. Create a group policy which allows sync (but not enabled) across all the zones & buckets. And then create another policy at bucket(s) level to enable sync for only those particular ones. Refer to Example-3 in the same page [2]. Thanks, Soumya [1] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/ [2] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/#example-3-mirror-a-specific-bucket Szabo, Istvan (Agoda) , 31 May 2021 Pzt, 12:11 tarihinde şunu yazdı: Bucket is created but if no sync rule set, the data will not be synced across. Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: mhnx Sent: Monday, May 31, 2021 4:07 PM To: Ceph Users Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW Multisite env. Hello. I have a multisite RGW environment. When I create a new bucket, the bucket is directly created on master and secondary. If I don't want to sync a bucket, I need to stop sync after creation. Is there any global option as "Do not sync directly, only start if I want to" ? ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses. ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
Bucket is created but if no sync rule set, the data will not be synced across. Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: mhnx Sent: Monday, May 31, 2021 4:07 PM To: Ceph Users Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW Multisite env. Hello. I have a multisite RGW environment. When I create a new bucket, the bucket is directly created on master and secondary. If I don't want to sync a bucket, I need to stop sync after creation. Is there any global option as "Do not sync directly, only start if I want to" ? ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses. ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
Yeah, this would be interesting for me as well. Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: mhnx Sent: Monday, May 31, 2021 4:33 PM To: Szabo, Istvan (Agoda) Cc: Ceph Users Subject: Re: [Suspicious newsletter] [ceph-users] Bucket creation on RGW Multisite env. Yes you're right. I have a Global sync rule in the zonegroup: "sync_from_all": "true", "sync_from": [], "redirect_zone": "" If I need to stop/start the sync after creation I use the command: radosgw-admin bucket sync enable/disable --bucket=$newbucket I developed it but clients can create bucket and I have no control on the bucket if it's created out of my program. Because of that I'm looking something: 1- Do not sync buckets if its not enabled by me. 2- Sync all the other "sync started" buckets. Szabo, Istvan (Agoda) , 31 May 2021 Pzt, 12:11 tarihinde şunu yazdı: > > Bucket is created but if no sync rule set, the data will not be synced across. > > Istvan Szabo > Senior Infrastructure Engineer > --- > Agoda Services Co., Ltd. > e: istvan.sz...@agoda.com > --- > > -Original Message- > From: mhnx > Sent: Monday, May 31, 2021 4:07 PM > To: Ceph Users > Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW > Multisite env. > > Hello. > > I have a multisite RGW environment. > When I create a new bucket, the bucket is directly created on master and > secondary. > If I don't want to sync a bucket, I need to stop sync after creation. > Is there any global option as "Do not sync directly, only start if I want to" > ? > ___ > ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an > email to ceph-users-le...@ceph.io > > > This message is confidential and is for the sole use of the intended > recipient(s). It may also be privileged or otherwise protected by copyright > or other legal rules. If you have received it by mistake please let us know > by reply email and delete it from your system. It is prohibited to copy this > message or disclose its content to anyone. Any confidentiality or privilege > is not waived or lost by any mistaken delivery or unauthorized disclosure of > the message. All messages sent to and from Agoda may be monitored to ensure > compliance with company policies, to protect the company's interests and to > remove potential malware. Electronic messages may be intercepted, amended, > lost or deleted, or contain viruses. ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
On 6/8/21 4:59 PM, Szabo, Istvan (Agoda) wrote: Yes, but with this the bucket contents will not be synced only. The bucket will be available everywhere just will be empty. There is option to enable sync on the bucket(s) which will then be synced across all the configured zones (as per the group policy configured). Refer to the example I had mentioned. Thanks, Soumya Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: Soumya Koduri Sent: Monday, May 31, 2021 7:38 PM To: mhnx ; Szabo, Istvan (Agoda) Cc: Ceph Users Subject: Re: [ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env. On 5/31/21 3:02 PM, mhnx wrote: Yes you're right. I have a Global sync rule in the zonegroup: "sync_from_all": "true", "sync_from": [], "redirect_zone": "" If I need to stop/start the sync after creation I use the command: radosgw-admin bucket sync enable/disable --bucket=$newbucket I developed it but clients can create bucket and I have no control on the bucket if it's created out of my program. Because of that I'm looking something: 1- Do not sync buckets if its not enabled by me. 2- Sync all the other "sync started" buckets. This can be achieved using Multisite sync-policy [1]. Create a group policy which allows sync (but not enabled) across all the zones & buckets. And then create another policy at bucket(s) level to enable sync for only those particular ones. Refer to Example-3 in the same page [2]. Thanks, Soumya [1] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/ [2] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/#example-3-mirror-a-specific-bucket Szabo, Istvan (Agoda) , 31 May 2021 Pzt, 12:11 tarihinde şunu yazdı: Bucket is created but if no sync rule set, the data will not be synced across. Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: mhnx Sent: Monday, May 31, 2021 4:07 PM To: Ceph Users Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW Multisite env. Hello. I have a multisite RGW environment. When I create a new bucket, the bucket is directly created on master and secondary. If I don't want to sync a bucket, I need to stop sync after creation. Is there any global option as "Do not sync directly, only start if I want to" ? ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io This message is confidential and is for the sole use of the intended recipient(s). It may also be privileged or otherwise protected by copyright or other legal rules. If you have received it by mistake please let us know by reply email and delete it from your system. It is prohibited to copy this message or disclose its content to anyone. Any confidentiality or privilege is not waived or lost by any mistaken delivery or unauthorized disclosure of the message. All messages sent to and from Agoda may be monitored to ensure compliance with company policies, to protect the company's interests and to remove potential malware. Electronic messages may be intercepted, amended, lost or deleted, or contain viruses. ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
Yes, but with this the bucket contents will not be synced only. The bucket will be available everywhere just will be empty. Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: Soumya Koduri Sent: Monday, May 31, 2021 7:38 PM To: mhnx ; Szabo, Istvan (Agoda) Cc: Ceph Users Subject: Re: [ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env. On 5/31/21 3:02 PM, mhnx wrote: > Yes you're right. I have a Global sync rule in the zonegroup: > "sync_from_all": "true", > "sync_from": [], > "redirect_zone": "" > > If I need to stop/start the sync after creation I use the command: > radosgw-admin bucket sync enable/disable --bucket=$newbucket > > I developed it but clients can create bucket and I have no control on > the bucket if it's created out of my program. > > Because of that I'm looking something: > 1- Do not sync buckets if its not enabled by me. > 2- Sync all the other "sync started" buckets. This can be achieved using Multisite sync-policy [1]. Create a group policy which allows sync (but not enabled) across all the zones & buckets. And then create another policy at bucket(s) level to enable sync for only those particular ones. Refer to Example-3 in the same page [2]. Thanks, Soumya [1] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/ [2] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/#example-3-mirror-a-specific-bucket > > > > > > Szabo, Istvan (Agoda) , 31 May 2021 Pzt, 12:11 > tarihinde şunu yazdı: >> Bucket is created but if no sync rule set, the data will not be synced >> across. >> >> Istvan Szabo >> Senior Infrastructure Engineer >> --- >> Agoda Services Co., Ltd. >> e: istvan.sz...@agoda.com >> --- >> >> -Original Message- >> From: mhnx >> Sent: Monday, May 31, 2021 4:07 PM >> To: Ceph Users >> Subject: [Suspicious newsletter] [ceph-users] Bucket creation on RGW >> Multisite env. >> >> Hello. >> >> I have a multisite RGW environment. >> When I create a new bucket, the bucket is directly created on master and >> secondary. >> If I don't want to sync a bucket, I need to stop sync after creation. >> Is there any global option as "Do not sync directly, only start if I want >> to" ? >> ___ >> ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an >> email to ceph-users-le...@ceph.io >> >> >> This message is confidential and is for the sole use of the intended >> recipient(s). It may also be privileged or otherwise protected by copyright >> or other legal rules. If you have received it by mistake please let us know >> by reply email and delete it from your system. It is prohibited to copy this >> message or disclose its content to anyone. Any confidentiality or privilege >> is not waived or lost by any mistaken delivery or unauthorized disclosure of >> the message. All messages sent to and from Agoda may be monitored to ensure >> compliance with company policies, to protect the company's interests and to >> remove potential malware. Electronic messages may be intercepted, amended, >> lost or deleted, or contain viruses. > ___ > ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an > email to ceph-users-le...@ceph.io ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
Hi, I've just got the chance to have a look again and triple (or more) check the config. (I have 3 zones but for this use case only 2 needed to be used). Followed your suggestions but it errored with: WARNING: cannot find source zone id for name=* WARNING: cannot find source zone id for name=* Steps: radosgw-admin sync group create --group-id=general-symmetrical-hkg-sin-sync-group --status=allowed radosgw-admin sync group flow create --group-id=general-symmetrical-hkg-sin-sync-group --flow-id=general-symmetrical-hkg-sin-sync-group-flow --flow-type=symmetrical --zones=hkg,sin radosgw-admin sync group pipe create --group-id=general-symmetrical-hkg-sin-sync-group --pipe-id=symmetrical-hkg-sin --source-zones='*' --source-bucket='*' --dest-zones='*' --dest-bucket='*' radosgw-admin period update --rgw-realm=company --commit Now the bucket part will come which will inherit the symmetrical-hkg-sin pipe: radosgw-admin sync group create --bucket=mlflow-artifacts-bucket --group-id=mlflow-artifacts-bucket-default --status=enabled And here is the above error with a huge dump came: radosgw-admin sync group pipe create --bucket=mlflow-artifacts-bucket --group-id=mlflow-artifacts-bucket-default --pipe-id=symmetrical-hkg-sin --source-zones='*' --dest-zones='*' It doesn't even see this group that has been created: radosgw-admin sync group get --group-id=mlflow-artifacts-bucket-default ERROR: could not find group 'mlflow-artifacts-bucket-default' Where is my mistake? Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- -Original Message- From: Soumya Koduri Sent: Tuesday, June 8, 2021 7:05 PM To: Szabo, Istvan (Agoda) ; mhnx Cc: Ceph Users Subject: Re: [ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env. On 6/8/21 4:59 PM, Szabo, Istvan (Agoda) wrote: > Yes, but with this the bucket contents will not be synced only. The bucket > will be available everywhere just will be empty. There is option to enable sync on the bucket(s) which will then be synced across all the configured zones (as per the group policy configured). Refer to the example I had mentioned. Thanks, Soumya > > Istvan Szabo > Senior Infrastructure Engineer > --- > Agoda Services Co., Ltd. > e: istvan.sz...@agoda.com > --- > > -Original Message- > From: Soumya Koduri > Sent: Monday, May 31, 2021 7:38 PM > To: mhnx ; Szabo, Istvan (Agoda) > > Cc: Ceph Users > Subject: Re: [ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW > Multisite env. > > On 5/31/21 3:02 PM, mhnx wrote: >> Yes you're right. I have a Global sync rule in the zonegroup: >> "sync_from_all": "true", >> "sync_from": [], >> "redirect_zone": "" >> >> If I need to stop/start the sync after creation I use the command: >> radosgw-admin bucket sync enable/disable --bucket=$newbucket >> >> I developed it but clients can create bucket and I have no control on >> the bucket if it's created out of my program. >> >> Because of that I'm looking something: >> 1- Do not sync buckets if its not enabled by me. >> 2- Sync all the other "sync started" buckets. > > This can be achieved using Multisite sync-policy [1]. Create a group policy > which allows sync (but not enabled) across all the zones & buckets. And then > create another policy at bucket(s) level to enable sync for only those > particular ones. Refer to Example-3 in the same page [2]. > > > Thanks, > > Soumya > > > [1] https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/ > > [2] > https://docs.ceph.com/en/latest/radosgw/multisite-sync-policy/#example > -3-mirror-a-specific-bucket > >> >> >> >> >> Szabo, Istvan (Agoda) , 31 May 2021 Pzt, >> 12:11 tarihinde şunu yazdı: >>> Bucket is created but if no sync rule set, the data will not be synced >>> across. >>> >>> Istvan Szabo >>> Senior Infrastructure Engineer >>> --- >>> Agoda Services Co., Ltd. >>> e: istvan.sz...@agoda.com >>> --- >>> >>> -Original Message- >>> From: mhnx >>> Sent: Monday, May 31, 2021 4:07 PM >>> To: Ceph Users >>> Subject: [Suspicious newsletter] [ceph-
[ceph-users] Re: [Suspicious newsletter] Bucket creation on RGW Multisite env.
On 8/4/21 10:12 AM, Szabo, Istvan (Agoda) wrote: Hi, I've just got the chance to have a look again and triple (or more) check the config. (I have 3 zones but for this use case only 2 needed to be used). Followed your suggestions but it errored with: WARNING: cannot find source zone id for name=* WARNING: cannot find source zone id for name=* Steps: radosgw-admin sync group create --group-id=general-symmetrical-hkg-sin-sync-group --status=allowed radosgw-admin sync group flow create --group-id=general-symmetrical-hkg-sin-sync-group --flow-id=general-symmetrical-hkg-sin-sync-group-flow --flow-type=symmetrical --zones=hkg,sin radosgw-admin sync group pipe create --group-id=general-symmetrical-hkg-sin-sync-group --pipe-id=symmetrical-hkg-sin --source-zones='*' --source-bucket='*' --dest-zones='*' --dest-bucket='*' radosgw-admin period update --rgw-realm=company --commit Now the bucket part will come which will inherit the symmetrical-hkg-sin pipe: radosgw-admin sync group create --bucket=mlflow-artifacts-bucket --group-id=mlflow-artifacts-bucket-default --status=enabled And here is the above error with a huge dump came: radosgw-admin sync group pipe create --bucket=mlflow-artifacts-bucket --group-id=mlflow-artifacts-bucket-default --pipe-id=symmetrical-hkg-sin --source-zones='*' --dest-zones='*' It doesn't even see this group that has been created: radosgw-admin sync group get --group-id=mlflow-artifacts-bucket-default ERROR: could not find group 'mlflow-artifacts-bucket-default' Yes. This seems to be regression on the latest master. This feature had definitely worked couple of months back.. (testcases were under review [1]). Now only the global sync policy works as expected. Bucket level sync policy groups are not updated correctly. Thanks, Soumya [1] https://github.com/ceph/ceph/pull/38238 Where is my mistake? Istvan Szabo Senior Infrastructure Engineer --- Agoda Services Co., Ltd. e: istvan.sz...@agoda.com --- ___ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-le...@ceph.io
