Requirements

Host

linux/amd64 or linux/arm64 with Docker. A VM is sufficient.

Fleet	CPU	Memory	Disk
up to 20 clusters	2 cores	4 GB	20 GB
up to 100 clusters	4 cores	8 GB	50 GB
more than 100 clusters	8 cores	16 GB	100 GB

Network

From	To	For
Browsers	CDM
CDM	each cluster's API (croit: https://<host>, Ceph: https://<mgr>:8443)
CDM	identity provider	sign-in
CDM	www.croit.io	emergency support requests
Browsers	www.croit.io	release notes (optional)

Open UI also needs wildcard DNS and TLS.

Identity provider

An OpenID Connect provider (Single Sign-On). If its certificate is signed by a private CA, mount a CA bundle and set SSL_CERT_FILE. The bundle replaces the built-in one.

Clusters

• croit: v2604 or later, with an API token or user with the viewer role. Write access needs an admin token or user.

• Ceph: the Ceph Manager dashboard, with a user with the read-only role:

  ceph mgr module enable dashboard
  ceph dashboard create-self-signed-cert   # if the dashboard has no certificate
  ceph dashboard ac-user-create cdm -i password-file read-only
  

CDM does not verify the clusters' TLS certificates, so keep the cluster APIs on a trusted network.