Difference between revisions of "Swift/ideas/account-quota-files"
(Swift needs a way to enforce quota-count on accounts) |
(→Problem) |
||
Line 1: | Line 1: | ||
== Problem == | == Problem == | ||
− | It's possible to set "X-Container-Meta-Quota-Bytes" and "X-Container-Meta-Quota-Count" on containers | + | It's possible to set "X-Container-Meta-Quota-Bytes" and "X-Container-Meta-Quota-Count" on containers, as documented in the [https://docs.openstack.org/swift/latest/api/container_quotas.html official docs]. It's currently possible to configure quotas on Accounts for "quota-bytes", which is by the way not documented in the official documentation but only [https://www.swiftstack.com/docs/admin/middleware/account_quotas.html here]. There's no way to configure account quota for "quota-count". Because of this, a user could possibly exhaust the filesystem inodes. |
== Proposed solution == | == Proposed solution == |
Revision as of 15:42, 7 June 2018
Problem
It's possible to set "X-Container-Meta-Quota-Bytes" and "X-Container-Meta-Quota-Count" on containers, as documented in the official docs. It's currently possible to configure quotas on Accounts for "quota-bytes", which is by the way not documented in the official documentation but only here. There's no way to configure account quota for "quota-count". Because of this, a user could possibly exhaust the filesystem inodes.
Proposed solution
The code https://github.com/openstack/swift/blob/master/swift/common/middleware/account_quotas.py should include a way for users with ResellerAdmin role to add a quota-count limit on accounts, and enforce such limit.
Contact: mpasserini on IRC