Create a namespace

You can create a namespace.

Before you begin

  • This operation requires the System Administrator role in ECS.
  • A replication group must exist. The replication group provides access to storage pools in which object data is stored.
  • If you want to allow domain users to access the namespace, an authentication provider must be added to ECS. To configure domain object users or a domain group, you must plan how you want to map users into the namespace. For more information on mapping users, see Domain users require an assigned namespace to perform object user operations.

About this task

For more information about namespaces, see Namespace settings.

Procedure

  1. In the ECS Portal, select Manage > Namespace.
  2. On the Namespace Management page, click New Namespace.
  3. On the New Namespace page, in the Name field, type the name of the namespace.
    The name cannot be changed once created.
  4. In the Namespace Admin field, specify the user ID of one or more domain or local users to whom you want to assign the Namespace Administrator role.
    You can add multiple users or groups as comma separated lists.
  5. In the Domain Group Admin field, you can also add one or more domain groups to whom you want to assign the Namespace Administrator role.
  6. In the Replication Group field, select the default replication group for this namespace.
  7. In the Namespace Quota field, click On to specify a storage space limit for this namespace. If you enable a namespace quota, select one of the following quota behavior options:
    1. Notification Only at <quota_limit_in_GiB>
      Select this option if you want to be notified when the namespace quota setting is reached.
    2. Block Access Only at <quota_limit_in_GiB>
      Select this option is you want write/update access to the buckets in this namespace blocked when the quota is reached.
    3. Block Access at <quota_limit_in_GiB> and Send Notification at <quota_limit_in_GiB>
      Select this option if you want write/update access to the buckets in this namespace blocked when the quota is reached and you want to be notified when the quota reaches a specified storage limit.
  8. In the Default Bucket Quota field, click On to specify a default storage space limit that is automatically set on all buckets created in this namespace.
  9. In the Server-side Encryption field, click On to enable server-side encryption on all buckets created in the namespace and to encrypt all objects in the buckets. If you leave this setting Off, you can apply server-side encryption to individual buckets in the namespace at the time of creation.
  10. In the Access During Outage field, click On or Off to specify the default behavior when accessing data in the buckets created in this namespace during a temporary site outage in a geo-federated setup.
    If you turn this setting on, if a temporary site outage occurs in a geo-federated system and you cannot access a bucket at the failed site where it was created (owner site), you will be able to access a copy of the bucket at another site.
    If you leave this setting off, data in the site which has the temporary outage is not available for access from other sites, and object reads for data that is owned by the failed site will fail.
  11. In the Compliance field, click On to enable compliance features for objects in this namespace.
    Once you turn this setting on, you cannot turn it off.
    You can only turn this setting on during namespace creation.
    Once you turn this setting on, you can add a retention policy by completing the following steps:
    1. In the Retention Policies area, in the Name field, type the name of the policy.
    2. In the Value fields, select a numerical value and then select the unit of measure (seconds, minutes, hours, days, months, years, infinite) to set the retention period for this retention policy.
      Instead of specifying a specific retention period, you can select Infinite as a unit of measure to ensure that buckets assigned to this retention policy are never deleted.
    3. Click Add to add the new policy.
  12. To specify an Active Directory (AD) or Lightweight Directory Access Protocol (LDAP) domain that contains the users who can log in to ECS and perform administration tasks for the namespace, click Domain.
    1. In the Domain field, type the name of the domain.
    2. Specify the groups and attributes for the domain users that are allowed to access ECS in this namespace by typing the values in the Groups, Attribute, and Values fields.
    For information on how to perform complex mappings using groups and attributes, see Domain users require an assigned namespace to perform object user operations.
  13. Click Save.