{{ action | titlecase }} {{ resource | upperFirst }}
Click here to create a new Realm/Zone Group/Zone Authentication must be enabled in an active `mgtm-gateway` service to enable Single Sign-On(SSO) with `oauth2-proxy` With an active mgmt-gateway service, the dashboard will continue to be served on {{currentURL}}:{{port}} and all other services will be accessible from {{currentURL}}:{{port}}/service_name SMB service management is intended for advanced users only. For most scenarios, it is recommended to use the SMB module instead. To manage SMB clusters and shares, please visit the SMB page.
Type
This field is required.
Backend Service
This field is required.
Block Pool
An RBD application-enabled pool in which the gateway configuration can be managed. This field is required.
Group Name
The name of the gateway group. This field is required.
Service Name
{{serviceForm.controls.service_type.value}}.
This field is required. This service id is already in use. MDS service id must start with a letter and contain alphanumeric characters or '.', '-', and '_'
Realm
Zone Group
Zone
Unmanaged If Unmanaged is selected, the orchestrator will not start or stop any daemons associated with this service. Placement and all other properties will be ignored.
Placement
Label
This field is required.
Hosts
Count
Number of deamons that will be deployed The value must be at least 1. The entered value needs to be a number.
Port
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535.
Pool
This field is required.
Trusted IPs Comma separated list of IP addresses.
Please add the Ceph Manager IP addresses here, otherwise the iSCSI gateways can't be reached.
Port
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535.
User
This field is required.
Password
This field is required.
Cluster id A short name identifying the SMB “cluster”. In this case a cluster is simply a management unit of one or more Samba services sharing a common configuration, and may not provide actual clustering or availability mechanisms.
This field is required.
Config URI Configuration source that should be loaded by the samba-container as the primary configuration file.
This field is required. The value must start with either 'http:', 'https:', 'rados:' or 'rados:mon-config-key:'
Features Pre-defined terms enabling specific deployment characteristics.
{{feature}}
Join sources Comma separated list of URIs.
A list of values that will be used to identify where authentication data that will be used to perform domain joins are located.
User sources Comma separated list of URIs.
A list of pseudo-uris containing data the samba-container can use to create users (and/or groups). A ceph based samba container may typically use a rados uri or a mon config-key store uri
Ceph users Comma separated list of Ceph users.
A list of cephx user names that the Samba Containers may use.
Virtual IP The virtual IP address and subnet (in CIDR notation) where the ingress service will be available.
This field is required.
Frontend Port The port used to access the ingress service.
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535. This field is required.
Monitor Port The port used by haproxy for load balancer status.
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535. This field is required.
CIDR Networks A list of networks to identify which network interface to use for the virtual IP address.
Version
This field is required.
Destination Must be of the format hostname:port.
This field is required. The value does not match the pattern: hostname:port
Engine Id Unique identifier for the device (in hex).
This field is required. The value does not match the pattern: Must be in hexadecimal and length must be multiple of 2 with min value = 10 amd max value = 64.
Auth Protocol
This field is required.
Privacy Protocol
Credentials
SNMP Community
This field is required.
Username
This field is required.
Password
This field is required.
Encryption
This field is required.
Provider display name
The display name for the identity provider (IdP) in the UI. This field is required.
Client ID
The client ID for authenticating with the IdP. This field is required.
Client secret
The client secret for authenticating with the IdP. This field is required.
OIDC Issuer URL
The URL of the OpenID Connect (OIDC) issuer. This field is required. Invalid url.
Https address
The address for HTTPS connections as [IP|Hostname]:port. Format must be [IP|Hostname]:port and the port between 0 and 65535
Redirect URL
The URL the oauth2-proxy service will redirect to after a successful login.
Allowlist domains
Comma separated list of domains to be allowed to redirect to, used for login or logout.
Port
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535.
Authentication Enable Allows to enable authentication through an external Identity Provider (IdP) using Single Sign-On (SSO)
SSL ciphers
Default cipher list used: https://ssl-config.mozilla.org/#server=nginx Invalid cipher suite. Each cipher must be separated by '-' and each cipher suite must be separated by ':'
SSL
Certificate The SSL certificate in PEM format.
This field is required. Invalid SSL certificate.
Private key The SSL private key in PEM format.
This field is required. Invalid SSL private key.
@if(serviceForm.controls.service_type.value === 'rgw') {
{{ option.label }}
}
Grafana Port The default port used by grafana.
The entered value needs to be a number. The value must be at least 1. The value cannot exceed 65535. This field is required.
Grafana Password The password of the default Grafana Admin. Set once on first-run.
Modifying the default settings could lead to a weaker security configuration
Encryption Enables mutual TLS (mTLS) between the client and the gateway server.
Root CA certificate
This field is required.
Client CA certificate
This field is required.
Client key
This field is required.
Gateway server certificate
This field is required.
Gateway server key
This field is required.