[LU-18240] Enforce project quota for root on a per-nodemap basis

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.16.0
• Labels: patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

We could want to enable/disable the root_prj_enforce flag on a per-nodemap basis. Indeed, it could be useful to be able to enforce root project quota for non-zero PROJID on the "tenant" nodemaps but not the "admin" nodemap, so that a storage administrator can clean up some mess that the tenant got themselves into.

One possibility could be to add a new rbac role that allows enforcing the project quota for the root user on a per-nodemap basis.