Chapter 4. Deprecated functionality
This section provides an overview of functionality that has been deprecated in all minor releases up to this release of Red Hat Ceph Storage.
Deprecated functionality continues to be supported until the end of life of Red Hat Ceph Storage 9. Deprecated functionality will likely not be supported in future major releases of this product and is not recommended for new deployments. For the most recent list of deprecated functionality within a particular major release, refer to the latest version of release documentation.
Deprecated method of configuring OIDC federation and IAM roles at the tenant level
All OIDC resources are now managed as resources within a Ceph Object Gateway account. These OIDC resources include providers, roles, and polices, As a result, all OIDC operations that target a tenant, including the global or empty tenant, are considered deprecated. The deprecated operations incldue creating providers, creating roles, and assuming roles.
With the newer per-account model, federated users are directly associated with the account and Ceph Object Gateway no longer creates shadow users (for example, TENANT$USER_NAMESPACE) upon role assumption. The account itself tracks all resources and identities.
Tenant-based OIDC federation users should migrate their configurations to the new Ceph Object Gateway per-account model, before feature removal.
For more information, see Secure Token Service.