[LU-18240] Enforce project quota for root on a per-nodemap basis

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.16.0
• Labels: patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

We could want to enable/disable the root_prj_enforce flag on a per-nodemap basis. Indeed, it could be useful to be able to enforce root project quota for non-zero PROJID on the "tenant" nodemaps but not the "admin" nodemap, so that a storage administrator can clean up some mess that the tenant got themselves into.

One possibility could be to add a new rbac role that allows enforcing the project quota for the root user on a per-nodemap basis.

Comments

[Peter Jones]

Merged for 2.17

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/56436/
Subject: LU-18240 sec: enforce per-nodemap project quota for root
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 2686838fefabba038c5a8192b84bfb375391ab14

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/56436
Subject: LU-18240 sec: enforce per-nodemap project quota for root
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: fec54c5f5b94654f53fddfa8861c5e8af063c014