usage: radosgw-admin <cmd> [options...]
commands:
user create create a new user
user modify modify user
user info get user info
user rename rename user
user rm remove user
user suspend suspend a user
user enable re-enable user after suspension
user check check user info
user stats show user stats as accounted by quota subsystem
user list list users
user policy attach attach a managed policy
user policy detach detach a managed policy
user policy list attached list attached managed policies
caps add add user capabilities
caps rm remove user capabilities
dedup stats Display dedup statistics from the last run
dedup estimate Runs dedup in estimate mode (no changes will be made)
dedup restart Restart dedup
dedup abort Abort dedup
dedup pause Pause dedup
dedup resume Resume paused dedup
subuser create create a new subuser
subuser modify modify subuser
subuser rm remove subuser
key create create access key
key rm remove access key
account create create a new account
account modify modify an existing account
account get get account info
account stats dump account storage stats
account rm remove an account
account list list all account ids
bucket list list buckets (specify --allow-unordered for faster, unsorted listing)
bucket limit check show bucket sharding stats
bucket link link bucket to specified user
bucket unlink unlink bucket from specified user
bucket stats returns bucket statistics
bucket suspend suspend a bucket
bucket unsuspend unsuspend a bucket
bucket rm remove bucket
bucket check check bucket index by verifying size and object count stats
bucket check olh check for olh index entries and objects that are pending removal
bucket check unlinked check for object versions that are not visible in a bucket listing
bucket chown link bucket to specified user and update its object ACLs
bucket reshard reshard bucket
bucket set-min-shards set the minimum number of shards that dynamic resharding will consider for a bucket
bucket rewrite rewrite all objects in the specified bucket
bucket sync checkpoint poll a bucket's sync status until it catches up to its remote
bucket sync disable disable bucket sync
bucket sync enable enable bucket sync
bucket radoslist list rados objects backing bucket's objects
bucket logging flush flush pending log records object of source bucket to the log bucket
bucket logging info get info on bucket logging configuration on source bucket or list of sources in log bucket
bucket logging list list the log objects pending commit for the source bucket
bi get retrieve bucket index object entries
bi put store bucket index object entries
bi list list raw bucket index entries
bi purge purge bucket index entries
object rm remove object; include --yes-i-really-mean-it to force removal from bucket index
object put put object
object stat stat an object for its metadata
object unlink unlink object from bucket index
object rewrite rewrite the specified object
object reindex reindex the object(s) indicated by --bucket and either --object or --objects-file
objects expire run expired objects cleanup
objects expire-stale list list stale expired objects (caused by reshard)
objects expire-stale rm remove stale expired objects
period rm remove a period
period get get period info
period get-current get current period info
period pull pull a period
period push push a period
period list list all periods
period update update the staging period
period commit commit the staging period
quota set set quota params for a user/bucket/account
quota enable enable quota for a user/bucket/account
quota disable disable quota for a user/bucket/account
ratelimit get get ratelimit params
ratelimit set set ratelimit params
ratelimit enable enable ratelimit
ratelimit disable disable ratelimit
global quota get view global quota params
global quota set set global quota params
global quota enable enable a global quota
global quota disable disable a global quota
global ratelimit get view global ratelimit params
global ratelimit set set global ratelimit params
global ratelimit enable enable a ratelimit quota
global ratelimit disable disable a ratelimit quota
realm create create a new realm
realm rm remove a realm
realm get show realm info
realm get-default get default realm name
realm list list realms
realm list-periods list all realm periods
realm rename rename a realm
realm set set realm info (requires infile)
realm default set realm as default
realm default rm clear the current default realm
realm pull pull a realm and its current period
zonegroup add add a zone to a zonegroup
zonegroup create create a new zone group info
zonegroup default set default zone group
zonegroup delete delete a zone group info
zonegroup get show zone group info
zonegroup modify modify an existing zonegroup
zonegroup set set zone group info (requires infile)
zonegroup rm remove a zone from a zonegroup
zonegroup rename rename a zone group
zonegroup list list all zone groups set on this cluster
zonegroup placement list list zonegroup's placement targets
zonegroup placement get get a placement target of a specific zonegroup
zonegroup placement add add a placement target id to a zonegroup
zonegroup placement modify modify a placement target of a specific zonegroup
zonegroup placement rm remove a placement target from a zonegroup
zonegroup placement default set a zonegroup's default placement target
zone create create a new zone
zone rm remove a zone
zone get show zone cluster params
zone modify modify an existing zone
zone set set zone cluster params (requires infile)
zone list list all zones set on this cluster
zone rename rename a zone
zone placement list list zone's placement targets
zone placement get get a zone placement target
zone placement add add a zone placement target
zone placement modify modify a zone placement target
zone placement rm remove a zone placement target
metadata sync status get metadata sync status
metadata sync init init metadata sync
metadata sync run run metadata sync
data sync status get data sync status of the specified source zone
data sync init init data sync for the specified source zone
data sync run run data sync for the specified source zone
pool add add an existing pool for data placement
pool rm remove an existing pool from data placement set
pools list list placement active set
policy read bucket/object policy
log list list log objects
log show dump a log from specific object or (bucket + date + bucket-id)
(NOTE: required to specify formatting of date to "YYYY-MM-DD-hh")
log rm remove log object
usage show show usage (by user, by bucket, date range)
usage trim trim usage (by user, by bucket, date range)
usage clear reset all the usage stats for the cluster
gc list dump expired garbage collection objects (specify
--include-all to list all entries, including unexpired)
gc process manually process garbage (specify
--include-all to process all entries, including unexpired)
lc list list all bucket lifecycle progress
lc get get a lifecycle bucket configuration
lc process manually process lifecycle
lc reshard fix fix LC for a resharded bucket
metadata get get metadata info
metadata put put metadata info
metadata rm remove metadata info
metadata list list metadata info
mdlog list list metadata log
mdlog autotrim auto trim metadata log
mdlog trim trim metadata log (use marker)
mdlog status read metadata log status
bilog list list bucket index log
bilog trim trim bucket index log (use start-marker, end-marker); without end-marker, requires --yes-i-really-mean-it
bilog status read bucket index log status
bilog autotrim auto trim bucket index log
datalog list list data log
datalog trim trim data log
datalog status read data log status
datalog type change datalog type to --log_type={fifo,omap}
datalog semaphore list List recovery semaphores
datalog semaphore reset Reset recovery semaphore (use marker)
orphans find deprecated -- init and run search for leaked rados objects (use job-id, pool)
orphans finish deprecated -- clean up search for leaked rados objects
orphans list-jobs deprecated -- list the current job-ids for orphans search
* the three 'orphans' sub-commands are now deprecated; consider using the `rgw-orphan-list` tool
role create create a AWS role for use with STS
role delete remove a role
role get get a role
role list list roles with specified path prefix
role-trust-policy modify modify the assume role policy of an existing role
role-policy put add/update permission policy to role
role-policy list list policies attached to a role
role-policy get get the specified inline policy document embedded with the given role
role-policy delete remove policy attached to a role
role policy attach attach a managed policy
role policy detach detach a managed policy
role policy list attached list attached managed policies
role update update max_session_duration of a role
reshard add schedule a resharding of a bucket
reshard list list all bucket resharding or scheduled to be resharded
reshard status read bucket resharding status
reshard process process of scheduled reshard jobs
reshard cancel cancel resharding a bucket
reshard stale-instances list list stale-instances from bucket resharding
reshard stale-instances delete cleanup stale-instances from bucket resharding
reshardlog list list bucket resharding log
reshardlog purge trim bucket resharding log
sync error list list sync error
sync error trim trim sync error
mfa create create a new MFA TOTP token
mfa list list MFA TOTP tokens
mfa get show MFA TOTP token
mfa remove delete MFA TOTP token
mfa check check MFA TOTP token
mfa resync re-sync MFA TOTP token
topic list list bucket notifications topics
topic get get a bucket notifications topic
topic rm remove a bucket notifications topic
topic stats get a bucket notifications persistent topic stats (i.e. reservations, entries & size)
topic dump dump (in JSON format) all pending bucket notifications of a persistent topic
script put upload a Lua script to a context
script get get the Lua script of a context
script rm remove the Lua scripts of a context
script-package add add a Lua package to the scripts allowlist
script-package rm remove a Lua package from the scripts allowlist
script-package list get the Lua packages allowlist
script-package reload install/remove Lua packages according to allowlist
notification list list bucket notifications configuration
notification get get a bucket notifications configuration
notification rm remove a bucket notifications configuration
options:
--tenant=<tenant> tenant name
--user_ns=<namespace> namespace of user (oidc in case of users authenticated with oidc provider)
--uid=<id> user id
--new-uid=<id> new user id
--subuser=<name> subuser name
--account-name=<name> account name
--account-id=<id> account id
--max-users max number of users for an account
--max-roles max number of roles for an account
--max-groups max number of groups for an account
--max-access-keys max number of keys per user for an account
--access-key=<key> S3 access key
--email=<email> user's email address
--secret/--secret-key=<key> specify secret key
--gen-access-key generate random access key (for S3)
--gen-secret generate random secret key
--generate-key create user with or without credentials
--key-type=<type> key type, options are: swift, s3
--key-active=<bool> activate or deactivate a key
--temp-url-key[-2]=<key> temp url key
--access=<access> Set access permissions for sub-user, should be one
of read, write, readwrite, full
--display-name=<name> user's display name
--max-buckets max number of buckets for a user
--admin set the admin flag on the user
--system set the system flag on the user
--op-mask set the op mask on the user
--bucket=<bucket> Specify the bucket name. Also used by the quota command.
--pool=<pool> Specify the pool name. Also used to scan for leaked rados objects.
--object=<object> object name
--objects-file=<file> file containing a list of object names to process
--object-version=<version> object version
--date=<date> date in the format yyyy-mm-dd
--start-date=<date> start date in the format yyyy-mm-dd
--end-date=<date> end date in the format yyyy-mm-dd
--bucket-id=<bucket-id> bucket id
--bucket-new-name=<bucket> for bucket link: optional new name
--count=<count> optional for:
datalog semaphore reset
--shard-id=<shard-id> optional for:
mdlog list
data sync status
gc list
gc process
required for:
mdlog trim
--gen=<gen-id> optional for:
bilog list
bilog trim
bilog status
--max-entries=<entries> max entries for listing operations
--metadata-key=<key> key to retrieve metadata from with metadata get
--remote=<remote> zone or zonegroup id of remote gateway
--period=<id> period id
--url=<url> url for pushing/pulling period/realm
--epoch=<number> period epoch
--commit commit the period during 'period update'
--staging get staging period info
--master set as master
--master-zone=<id> master zone id
--rgw-realm=<name> realm name
--realm-id=<id> realm id
--realm-new-name=<name> realm new name
--rgw-zonegroup=<name> zonegroup name
--zonegroup-id=<id> zonegroup id
--zonegroup-new-name=<name> zonegroup new name
--rgw-zone=<name> name of zone in which radosgw is running
--zone-id=<id> zone id
--zone-new-name=<name> zone new name
--source-zone specify the source zone (for data sync)
--default set entity (realm, zonegroup, zone) as default
--read-only set zone as read-only (when adding to zonegroup)
--redirect-zone specify zone id to redirect when response is 404 (not found)
--placement-id placement id for zonegroup placement commands
--storage-class storage class for zonegroup placement commands
--tags=<list> list of tags for zonegroup placement add and modify commands
--tags-add=<list> list of tags to add for zonegroup placement modify command
--tags-rm=<list> list of tags to remove for zonegroup placement modify command
--endpoints=<list> zone endpoints
--index-pool=<pool> placement target index pool
--data-pool=<pool> placement target data pool
--data-extra-pool=<pool> placement target data extra (non-ec) pool
--placement-index-type=<type> placement target index type (normal, indexless, or #id)
--placement-inline-data=<true> set whether the placement target is configured to store a data
chunk inline in head objects
--compression=<type> placement target compression type (plugin name or empty/none)
--tier-type=<type> zone tier type
--tier-config=<k>=<v>[,...] set zone tier config keys, values
--tier-config-rm=<k>[,...] unset zone tier config keys
--sync-from-all[=false] set/reset whether zone syncs from all zonegroup peers
--sync-from=[zone-name][,...] set list of zones to sync from
--sync-from-rm=[zone-name][,...] remove zones from list of zones to sync from
--bucket-index-max-shards override a zone/zonegroup's default bucket index shard count
--fix besides checking bucket index, will also fix it
--check-objects bucket check: rebuilds bucket index according to actual objects state
--format=<format> specify output format for certain operations: xml, json
--purge-data when specified, user removal will also purge all the
user data
--purge-keys when specified, subuser removal will also purge all the
subuser keys
--purge-objects remove a bucket's objects before deleting it
(NOTE: required to delete a non-empty bucket)
--sync-stats option to 'user stats', update user stats with current
stats reported by user's buckets indexes
--reset-stats option to 'user stats', reset stats in accordance with user buckets
--show-config show configuration
--show-log-entries=<flag> enable/disable dump of log entries on log show
--show-log-sum=<flag> enable/disable dump of log summation on log show
--skip-zero-entries log show only dumps entries that don't have zero value
in one of the numeric field
--infile=<file> file to read in when setting data
--categories=<list> comma separated list of categories, used in usage show
--caps=<caps> list of caps (e.g., "usage=read, write; user=read")
--op-mask=<op-mask> permission of user's operations (e.g., "read, write, delete, *")
--yes-i-really-mean-it required for certain operations
--warnings-only when specified with bucket limit check, list
only buckets nearing or over the current max
objects per shard value
--bypass-gc when specified with bucket deletion, triggers
object deletions by not involving GC
--inconsistent-index when specified with bucket deletion and bypass-gc set to true,
ignores bucket index consistency
--min-rewrite-size min object size for bucket rewrite (default 4M)
--max-rewrite-size max object size for bucket rewrite (default ULLONG_MAX)
--min-rewrite-stripe-size min stripe size for object rewrite (default 0)
--trim-delay-ms time interval in msec to limit the frequency of sync error log entries trimming operations,
the trimming process will sleep the specified msec for every 1000 entries trimmed
--max-concurrent-ios maximum concurrent ios for bucket operations (default: 32)
--enable-feature enable a zone/zonegroup feature
--disable-feature disable a zone/zonegroup feature
<date> := "YYYY-MM-DD[ hh:mm:ss]"
Quota options:
--max-objects specify max objects (negative value to disable)
--max-size specify max size (in B/K/M/G/T, negative value to disable)
--quota-scope scope of quota (bucket, user, account)
Rate limiting options:
--max-read-ops specify max requests per minute for READ ops per RGW (GET and HEAD request methods), 0 means unlimited
--max-read-bytes specify max bytes per minute for READ ops per RGW (GET and HEAD request methods), 0 means unlimited
--max-write-ops specify max requests per minute for WRITE ops per RGW (Not GET or HEAD request methods), 0 means unlimited
--max-write-bytes specify max bytes per minute for WRITE ops per RGW (Not GET or HEAD request methods), 0 means unlimited
--ratelimit-scope scope of rate limiting: bucket, user, anonymous
anonymous can be configured only with global rate limit
Orphans search options:
--num-shards num of shards to use for keeping the temporary scan info
--orphan-stale-secs num of seconds to wait before declaring an object to be an orphan (default: 86400)
--job-id set the job id (for orphans find)
--detail detailed mode, log and stat head objects as well
Orphans list-jobs options:
--extra-info provide extra info in job list
Role options:
--role-name name of the role to create
--path path to the role
--assume-role-policy-doc the trust relationship policy document that grants an entity permission to assume the role
--policy-name name of the policy document
--policy-doc permission policy document
--path-prefix path prefix for filtering roles
--description Role description
--policy-arn ARN of a managed policy
MFA options:
--totp-serial a string that represents the ID of a TOTP token
--totp-seed the secret seed that is used to calculate the TOTP
--totp-seconds the time resolution that is being used for TOTP generation
--totp-window the number of TOTP tokens that are checked before and after the current token when validating token
--totp-pin the valid value of a TOTP token at a certain time
Bucket notifications options:
--topic bucket notifications topic name
--notification-id bucket notifications id
Script options:
--context context in which the script runs. one of: prerequest, postrequest, background, getdata, putdata
--package name of the Lua package that should be added/removed to/from the allowlist
--allow-compilation package is allowed to compile C code as part of its installation
Bucket check olh/unlinked options:
--min-age-hours minimum age of unlinked objects to consider for bucket check unlinked (default: 1)
--dump-keys when specified, all keys identified as problematic are printed to stdout
--hide-progress when specified, per-shard progress details are not printed to stderr
radoslist options:
--rgw-obj-fs the field separator that will separate the rados object name from the rgw object name;
additionally rados objects for incomplete multipart uploads will not be output
Bucket list objects options:
--max-entries max number of entries listed (default 1000)
--marker the marker used to specify on which entry the listing begins, default none (i.e., very first entry)
--conf/-c FILE read configuration from the given configuration file
--id ID set ID portion of my name
--name/-n TYPE.ID set name
--cluster NAME set cluster name (default: ceph)
--setuser USER set uid to user or uid (and gid to user's gid)
--setgroup GROUP set gid to group or gid
--version show version and quit
Options (150)
| Option | Description | Source |
|---|---|---|
--tenant tenant | Name of the tenant. | help + man |
--user_ns namespace | namespace of user (oidc in case of users authenticated with oidc provider) | help |
--uid id | The user on which to operate. | help + man |
--new-uid id | The new ID of the user. | help + man |
--subuser name | Name of the subuser. | help + man |
--account-name name | account name | help |
--account-id id | account id | help |
--max-users | max number of users for an account | help |
--max-roles | max number of roles for an account | help |
--max-groups | max number of groups for an account | help |
--max-access-keys | max number of keys per user for an account | help |
--access-key key | S3 access key. | help + man |
--email email | The e-mail address of the user. | help + man |
--gen-access-key | Generate random access key (for S3). | help + man |
--gen-secret | Generate random secret key. | help + man |
--generate-key | create user with or without credentials. | help + man |
--key-type type | Key type, options are: swift, s3. | help + man |
--key-active bool | activate or deactivate a key | help |
--temp-url-key -2]=<key | temp url key | help |
--access access | Set access permissions for sub-user, should be one of read, write, readwrite, full | help + man |
--display-name name | The display name of the user. | help + man |
--max-buckets | Maximum number of buckets for a user (0 for no limit, negative value to disable bucket creation). | help + man |
--admin | Set the admin flag on the user. | help + man |
--system | Set the system flag on the user. | help + man |
--op-mask | set the op mask on the user | help |
--bucket bucket | Specify the bucket name. | help |
--pool pool | Specify the pool name. | help + man |
--object object | Specify the object name. | help + man |
--objects-file file | file containing a list of object names to process | help |
--object-version version | object version | help |
--date date | The date in the format yyyy-mm-dd. | help + man |
--start-date date | The start date in the format yyyy-mm-dd. | help + man |
--end-date date | The end date in the format yyyy-mm-dd. | help + man |
--bucket-id bucket-id | Specify the bucket id. | help + man |
--bucket-new-name bucket | for bucket link: optional new name | help |
--count count | optional for: datalog semaphore reset | help |
--shard-id shard-id | optional for: mdlog list data sync status gc list gc process required for: mdlog trim | help + man |
--gen gen-id | optional for: bilog list bilog trim bilog status | help |
--max-entries entries | Optional for listing operations to specify the max entries. | help + man |
--metadata-key key | Key from which to retrieve metadata, used with metadata get. | help + man |
--remote remote | Zone or zonegroup id of remote gateway. | help + man |
--period id | Period ID. | help + man |
--url url | URL for pushing/pulling period or realm. | help + man |
--epoch number | Period epoch. | help + man |
--commit | Commit the period during 'period update'. | help + man |
--staging | Get the staging period info. | help + man |
--master | Set as master. | help + man |
--master-zone id | Master zone ID. | help + man |
--rgw-realm name | The realm name. | help + man |
--realm-id id | The realm ID. | help + man |
--realm-new-name name | New name for the realm. | help + man |
--rgw-zonegroup name | The zonegroup name. | help + man |
--zonegroup-id id | The zonegroup ID. | help + man |
--zonegroup-new-name name | The new name of the zonegroup. | help + man |
--rgw-zone name | name of zone in which radosgw is running | help + man |
--zone-id id | The zone ID. | help + man |
--zone-new-name name | The new name of the zone. | help + man |
--source-zone | specify the source zone (for data sync) | help + man |
--default | Set the entity (realm, zonegroup, zone) as default. | help + man |
--read-only | Set the zone as read-only when adding to the zonegroup. | help + man |
--redirect-zone | specify zone id to redirect when response is 404 (not found) | help |
--placement-id | Placement ID for the zonegroup placement commands. | help + man |
--storage-class | storage class for zonegroup placement commands | help |
--tags list | The list of tags for zonegroup placement add and modify commands. | help + man |
--tags-add list | The list of tags to add for zonegroup placement modify command. | help + man |
--tags-rm list | The list of tags to remove for zonegroup placement modify command. | help + man |
--endpoints list | The zone endpoints. | help + man |
--index-pool pool | The placement target index pool. | help + man |
--data-pool pool | The placement target data pool. | help + man |
--data-extra-pool pool | The placement target data extra (non-EC) pool. | help + man |
--placement-index-type type | The placement target index type (normal, indexless, or #id). | help + man |
--placement-inline-data true | set whether the placement target is configured to store a data chunk inline in head objects | help + man |
--compression type | Placement target compression algorithm (lz4|snappy|zlib|zstd). | help + man |
--tier-type type | The zone tier type. | help + man |
--tier-config k>=<v | set zone tier config keys, values | help |
--tier-config-rm k | unset zone tier config keys | help |
--sync-from-all false | set/reset whether zone syncs from all zonegroup peers | help |
--sync-from zone-name | set list of zones to sync from | help |
--sync-from-rm zone-name | remove zones from list of zones to sync from | help |
--bucket-index-max-shards | Override a zone's or zonegroup's default number of bucket index shards. | help + man |
--fix | Fix the bucket index in addition to checking it. | help + man |
--check-objects | Bucket check: Rebuilds the bucket index according to actual object state. | help + man |
--format format | specify output format for certain operations: xml, json | help + man |
--purge-data | when specified, user removal will also purge all the user data | help + man |
--purge-keys | when specified, subuser removal will also purge all the subuser keys | help + man |
--purge-objects | remove a bucket's objects before deleting it (NOTE: required to delete a non-empty bucket) | help + man |
--sync-stats | option to 'user stats', update user stats with current stats reported by user's buckets indexes | help + man |
--reset-stats | option to 'user stats', reset stats in accordance with user buckets | help |
--show-config | Show configuration. | help + man |
--show-log-entries flag | Enable/disable dumping of log entries on log show. | help + man |
--show-log-sum flag | Enable/disable dump of log summation on log show. | help + man |
--skip-zero-entries | Log show only dumps entries that don't have zero value in one of the numeric field. | help + man |
--infile file | Specify a file to read when setting data. | help + man |
--categories list | Comma separated list of categories, used in usage show. | help + man |
--caps caps | List of capabilities (e.g., "usage=read, write; | help + man |
--yes-i-really-mean-it | Required as a guardrail for certain destructive operations. | help + man |
--warnings-only | When specified with bucket limit check, list only buckets nearing or over the current max objects per shard value. | help + man |
--bypass-gc | When specified with bucket deletion, triggers object deletion without involving GC. | help + man |
--inconsistent-index | When specified with bucket deletion and bypass-gc set to true, ignores bucket index consistency. | help + man |
--min-rewrite-size | Specify the minimum object size for bucket rewrite (default 4M). | help + man |
--max-rewrite-size | Specify the maximum object size for bucket rewrite (default ULLONG_MAX). | help + man |
--min-rewrite-stripe-size | Specify the minimum stripe size for object rewrite (default 0). | help + man |
--trim-delay-ms | time interval in msec to limit the frequency of sync error log entries trimming operations, the trimming process will sleep the specified msec for every 1000 entries trimmed | help |
--max-concurrent-ios | maximum concurrent ios for bucket operations (default: 32) | help + man |
--enable-feature | enable a zone/zonegroup feature | help |
--disable-feature | disable a zone/zonegroup feature | help |
--max-objects | Specify the maximum number of objects (negative value to disable). | help + man |
--max-size | Specify the maximum object size (in B/K/M/G/T, negative value to disable). | help + man |
--quota-scope | scope of quota (bucket, user, account) | help + man |
--max-read-ops | specify max requests per minute for READ ops per RGW (GET and HEAD request methods), 0 means unlimited | help |
--max-read-bytes | specify max bytes per minute for READ ops per RGW (GET and HEAD request methods), 0 means unlimited | help |
--max-write-ops | specify max requests per minute for WRITE ops per RGW (Not GET or HEAD request methods), 0 means unlimited | help |
--max-write-bytes | specify max bytes per minute for WRITE ops per RGW (Not GET or HEAD request methods), 0 means unlimited | help |
--ratelimit-scope | scope of rate limiting: bucket, user, anonymous anonymous can be configured only with global rate limit | help |
--num-shards | num of shards to use for keeping the temporary scan info | help + man |
--orphan-stale-secs | num of seconds to wait before declaring an object to be an orphan (default: 86400) | help + man |
--job-id | set the job id (for orphans find) | help + man |
--detail | detailed mode, log and stat head objects as well | help |
--extra-info | Provide extra info in the job list. | help + man |
--role-name | The name of the role to create. | help + man |
--path | The path to the role. | help + man |
--assume-role-policy-doc | The trust relationship policy document that grants an entity permission to assume the role. | help + man |
--policy-name | The name of the policy document. | help + man |
--policy-doc | The permission policy document. | help + man |
--path-prefix | The path prefix for filtering the roles. | help + man |
--description | Role description | help |
--policy-arn | ARN of a managed policy | help |
--totp-serial | a string that represents the ID of a TOTP token | help |
--totp-seed | the secret seed that is used to calculate the TOTP | help |
--totp-seconds | the time resolution that is being used for TOTP generation | help |
--totp-window | the number of TOTP tokens that are checked before and after the current token when validating token | help |
--totp-pin | the valid value of a TOTP token at a certain time | help |
--topic | The bucket notifications/pubsub topic name. | help + man |
--notification-id | bucket notifications id | help |
--context | context in which the script runs. | help |
--package | name of the Lua package that should be added/removed to/from the allowlist | help |
--allow-compilation | package is allowed to compile C code as part of its installation | help |
--min-age-hours | minimum age of unlinked objects to consider for bucket check unlinked (default: 1) | help |
--dump-keys | when specified, all keys identified as problematic are printed to stdout | help |
--hide-progress | when specified, per-shard progress details are not printed to stderr | help |
--rgw-obj-fs | the field separator that will separate the rados object name from the rgw object name; | help |
--marker | the marker used to specify on which entry the listing begins, default none (i.e., very first entry) | help |
--id ID | set ID portion of my name | help |
--cluster NAME | set cluster name (default: ceph) | help |
--setuser USER | set uid to user or uid (and gid to user's gid) | help |
--setgroup GROUP | set gid to group or gid | help |
--version | show version and quit | help |
-c, --conf ceph.conf | Use ceph.conf configuration file instead of the default /etc/ceph/ceph.conf to determine monitor addresses during startup. (in the manual page but not in --help) | man |
--subscription | The pubsub subscription name. (in the manual page but not in --help) | man |
--event-id | The event id in a pubsub subscription. (in the manual page but not in --help) | man |
Examples (14) from the manual page, untested
radosgw-admin user create --display-name="johnny rotten" --uid=johnny
Generate a new user:radosgw-admin user rm --uid=johnny
Remove a user:radosgw-admin user rename --uid=johnny --new-uid=joe
Rename a user:radosgw-admin user rm --uid=johnny --purge-data
Remove a user and all associated buckets with their contents:radosgw-admin bucket rm --bucket=foo
Remove a bucket:radosgw-admin bucket link --bucket=foo --bucket_id=<bucket id> --uid=johnny
Link bucket to specified user:radosgw-admin bucket unlink --bucket=foo --uid=johnny
Unlink bucket from specified user:radosgw-admin bucket link --bucket=foo --bucket-new-name=bar --uid=johnny
Rename a bucket:radosgw-admin bucket link --bucket=foo --uid='12345678$12345678'
Move a bucket from the old global tenant space to a specified tenant:radosgw-admin bucket chown --bucket=foo --uid='12345678$12345678'
Link bucket to specified user and change object ACLs:radosgw-admin log show --bucket=foo --date=2012-04-01-01 --bucket-id=default.14193.1
Show the logs of a bucket from April 1st, 2012:radosgw-admin usage show --uid=johnny \
Show usage information for user from March 1st to (but not including) April 1st, 2012:radosgw-admin usage show --show-log-entries=false
Show only summary of usage information for all users:radosgw-admin usage trim --uid=johnny --end-date=2012-04-01
Trim usage information for user until March 1st, 2012: