Ceph and OpenStack integration
Backing OpenStack Glance, Cinder, Nova and Cinder Backup with Ceph RBD: pool and CephX key layout, copy-on-write image cloning, raw image format, RBD cache and exclusive locks on compute nodes.

Integration pages for the virtualization platforms that most often consume Ceph block storage, based on the Ceph and Proxmox VE documentation.
Backing OpenStack Glance, Cinder, Nova and Cinder Backup with Ceph RBD: pool and CephX key layout, copy-on-write image cloning, raw image format, RBD cache and exclusive locks on compute nodes.
Running Ceph on Proxmox VE nodes with pveceph: when hyper-converged makes sense, minimum node and OSD counts, memory per OSD, separate cluster, public and corosync networks, and day-two operations on shared hardware.
Giving Kubernetes clusters RBD, CephFS and NFS volumes from a Ceph cluster managed outside Kubernetes: the Ceph-CSI-Operator, deprecated Helm charts and manifests, clusterID mapping, CephX users per cluster and when Rook is the better choice.
Backing OpenNebula image and system datastores with Ceph RBD: pool and libvirt user setup, storage bridge nodes, Ceph versus SSH transfer modes, erasure-coded data pools and the limits of SSH mode.
Using Ceph block devices as CloudStack primary storage through libvirt and librbd: a dedicated pool and cephx user, adding RBD primary storage, disk offering tags, and monitor binding limits in older CloudStack versions.
Storing Nextcloud file content in Ceph RGW through the S3 or Swift primary storage backends: what moves to the object store, why enabling it on an existing instance hides existing files, multi-bucket setups and backup changes.
Pointing GitLab artifacts, LFS, uploads and packages at Ceph RGW: the AWS connection type, the consolidated form, HTTPS for server-side encryption, and what GitLab's community-documented status means for support.
Using Ceph RGW as the S3-compatible backup location for Velero: bucket and credentials, path-style addressing, keeping backups off the cluster being protected, Object Lock for immutability and restore testing.
Running Loki's TSDB index and chunks on Ceph RGW: the S3 storage configuration, path-style access, bucket layout and retention, and sizing RGW for log ingest and queries.
Storing Thanos blocks on Ceph RGW for long-term Prometheus retention: the S3 client configuration, the list_objects_version setting some Ceph versions need, and compaction load on the object store.
Using Ceph RGW as the object store behind a Proxmox Backup Server datastore: bucket and key setup, HTTPS and certificate fingerprints, path-style addressing, and the local cache the datastore still needs.
Running Hadoop and Spark jobs against Ceph RGW buckets with the S3A connector: endpoint, path-style access, region setting, V4 signing, features to disable and cleaning up incomplete multipart uploads.
Signing in to the Ceph Dashboard through Keycloak: SAML 2.0 setup with ceph dashboard sso, the OAuth2 option through the cephadm Management Gateway and oauth2-proxy, and the dashboard roles you still assign.
Letting directory users access S3 buckets on RGW: the LDAP token scheme, bind account and search filters, restricting by group, ldaps, and the risk that tokens carry passwords in clear text.
Issuing short-lived S3 credentials to Keycloak-authenticated users and workloads with AssumeRoleWithWebIdentity: registering the OIDC provider, role trust policies on token claims, session tags and the rgw_sts_key setting.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.