Openstack Object Storage

From CAC Documentation wiki
Revision as of 09:55, 22 October 2018 by Shl1 (talk | contribs) (Created page with "__TOC__ Red Cloud object storage can be accessed using the following interfaces: =='''Swift''' == * CLI client: the `swift` command is part of the Using_Openstack_CLI_Clie...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Red Cloud object storage can be accessed using the following interfaces:

Swift

S3

Known Issue: At this time, Red Cloud's s3 interface supports only AWS signature v2. `InvalidAccessKeyId` error will be returned if AWS signature v4 is used.

  1. To use the S3 interface, first create ec2 credentials for your Openstack account using the `openstack ec2 credentials create` command in the Openstack CLI client.
    • List existing ec2 credentials in your Openstack account using the `openstack ec2 credentials list` command or revoke one using `openstack ec2 credentials delete`.
  2. You can now use an s3 client or SDK to access the object storage. Remember to specify to use AWS signature v2 if your tool defaults to signature v4. For reference, here's a configuration file for s3cmd
[default]
access_key = a06875e7572f49e9b36c084a003f485f
secret_key = ba7547430d0341db908d3c4e6c1e2014
host_base = redcloud.cac.cornell.edu:8443
host_bucket = redcloud.cac.cornell.edu:8443
signature_v2 = True
bucket_location = US
default_mime_type = binary/octet-stream
delete_removed = False
dry_run = False
encoding = UTF-8
encrypt = False
follow_symlinks = False
force = False
get_continue = False
gpg_command = /usr/local/bin/gpg
gpg_decrypt = %(gpg_command)s -d --verbose --no-use-agent --batch --yes --passphrase-fd %(passphrase_fd)s -o %(output_file)s %(input_file)s
gpg_encrypt = %(gpg_command)s -c --verbose --no-use-agent --batch --yes --passphrase-fd %(passphrase_fd)s -o %(output_file)s %(input_file)s
gpg_passphrase =
guess_mime_type = True
human_readable_sizes = False
list_md5 = False
preserve_attrs = True
progress_meter = True
recursive = False
recv_chunk = 4096
reduced_redundancy = False
send_chunk = 4096
skip_existing = False
socket_timeout = 300 
urlencoding_mode = normal
use_https = True
verbosity = WARNING