Chapter 12. Managing Ceph Object Gateway using the dashboard

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Users tab, click Create.

3. Create User form, set the following parameters:

   1. Enter the User ID and Full name.
   2. If required, edit the maximum number of buckets.
   3. Optional: Fill in an Email address
   4. Optional: Select if the user is Suspended or a System user.
   5. Optional: In the S3 key section, set a custom access key and secret key by clearing the Auto-generate key selection.
   6. Optional: In the User quota section, select if the user quota is Enabled, Unlimited size, or has Unlimited objects. If there is a limited size enter the maximum size. If there are limited objects, enter the maximum objects.
   7. Optional: In the Bucket quota section, select if the bucket quota is Enabled, Unlimited size, or has Unlimited objects. If there is a limited size enter the maximum size. If there are limited objects, enter the maximum objects.

4. Click Create User.

   Figure 12.3. Create Ceph object gateway user

   

   A notification displays that the user was created successfully.

Procedure

1. Log in to the Dashboard.
2. On the navigation bar, click Object Gateway.
3. Click Roles.
4. Select the user by clicking the relevant row.
5. From Edit drop-down menu, select Create Role.

6. In the Create Role window, configure Role name, Path, and Assume Role Policy Document.

   Figure 12.4. Create Ceph object gateway subuser

   
7. Click Create Role.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Uers tab, select a user and click Edit.
3. In the Edit User form, click Create Subuser.
4. In the Create Subuser dialog, enter the username and select the appropriate permissions.

5. Select the Auto-generate secret box and then click Create Subuser.

   Figure 12.5. Create Ceph object gateway subuser

   
   Note

   By selecting Auto-generate-secret, the secret key for Object Gateway is generated automatically.

6. In the Edit User form, click Edit user.

   A notification displays that the user was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Users tab, select the user row and click Edit.

3. In the Edit User form, edit the required parameters and click Edit User.

   Figure 12.6. Edit Ceph object gateway user

   

   A notification displays that the user was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. Select the Username to delete, and click Delete from the action drop-down.

3. In the Delete user notification, select Yes, I am sure and click Delete User.

   The user is removed from the Users table.

   Figure 12.7. Delete Ceph object gateway user

   

Procedure

1. From the dashboard navigation, go to Object→Buckets.

2. Click Create.

   The Create Bucket form displays.

3. Enter a Name for the bucket.
4. Select an Owner. The owner is a user that is not suspended.

5. Select a Placement target.

   Important

   A bucket’s placement target cannot be changed after creation.

   Figure 12.8. Create Ceph object gateway bucket

   

6. Optional: In the Locking section, select Enabled to enable locking for the bucket objects.

   Important

   Locking can only be enabled while creating a bucket and cannot be changed after creation.

   1. Select the Mode, either Compliance or Governance.
   2. In the Days field, select the default retention period that is applied to new objects placed in this bucket.

7. Optional: In the Security section, select Security to encrypt objects in the bucket.

   1. Set the configuration values for SSE-S3. Click the Encryption information icon and then Click here.

      Note

      When using SSE-S3 encryption type, Ceph manages the encryption keys that are stored in the vault by the user.

      1. In the Update RGW Encryption Configurations dialog, ensure that SSE-S3 is selected as the Encryption Type.
      2. Fill the other required information.

      3. Click Submit.

         Figure 12.9. Encrypt objects in the bucket

         

8. Click Create bucket.

   A notification displays that the bucket was created successfully.

Procedure

1. Log in to the Dashboard.
2. On the navigation bar, click Object Gateway.
3. Click Buckets.
4. To edit the bucket, click it’s row.
5. From the Edit drop-down select Edit.

6. In the Edit bucket window, edit the Owner by selecting the user from the dropdown.

   Figure 12.10. Edit Ceph object gateway bucket

   

   1. Optional: Enable Versioning if you want to enable versioning state for all the objects in an existing bucket.

      • To enable versioning, you must be the owner of the bucket.
      • If Locking is enabled during bucket creation, you cannot disable the versioning.
      • All objects added to the bucket will receive a unique version ID.
      • If the versioning state has not been set on a bucket, then the bucket will not have a versioning state.

   2. Optional: Check Delete enabled for Multi-Factor Authentication. Multi-Factor Authentication(MFA) ensures that users need to use a one-time password(OTP) when removing objects on certain buckets. Enter a value for Token Serial Number and Token PIN.

      Note

      The buckets must be configured with versioning and MFA enabled which can be done through the S3 API.

7. Click Edit Bucket.
8. You get a notification that the bucket was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Buckets.
2. Select the bucket to be deleted, and click Delete from the action drop-down.

3. In the Delete Bucket notification, select Yes, I am sure and click Delete bucket.

   Figure 12.11. Delete Ceph Object Gateway bucket

   

Procedure

1. From the dashboard, go to Object Buckets.

2. Create or modify a bucket policy for an existing bucket.

   Note

   To create a bucket policy during bucket creation, click Create and fill in the bucket policy information in the Policies section of the Create Bucket form.

   Select the bucket for which the bucket policy will be created or modified, and then click Edit.

3. In the Create Bucket form, go to Policies.

4. Enter or modify the policy in JSON format.

   Use the following links from within the form to help create your bucket policy. These links open a new tab in your browser.

   • Policy generator is an external tool from AWS to generate a bucket policy. For more information, see AWS Policy Generator.

     Note

     You can use the policy generator with the S3 Bucket Policy type as a guideline for building your Ceph Object Gateway bucket policies.

   • Policy examples takes you to AWS documentation with examples of bucket policies.

5. To save the bucket policy, click Edit Bucket.

   Note

   When creating a bucket policy during an initial bucket creation, click Create Bucket.

   When the bucket policy is saved, the Updated Object Gateway bucket `bucketname` notification is displayed.

Procedure

1. From the dashboard, go to Object Buckets.
2. Select the bucket for which the bucket policy will be created or modified, and then click Edit.
3. In the Edit Bucket form, go to Policies.
4. Click Clear.

5. To complete the bucket policy deletion, click Edit Bucket.

   When the bucket policy is deleted, the Updated Object Gateway bucket `bucketname` notification is displayed.

1. From the dashboard, go to Object Buckets.
2. Select the bucket for which the lifecycle policy needs to be applied and click Edit.
3. In the Edit Bucket form, go to Policies and apply the lifecycle rule in the Lifecycle field in JSON format.

4. To save the bucket lifecycle policy, click Edit Bucket.

   Figure 12.13. Apply bucket lifecycle policy

   

5. After the bucket lifecycle policy is applied, it can viewed in the bucket listing screen by expanding the relevant bucket entry.

   Figure 12.14. View bucket lifecycle policy

   

Procedure

1. From the dashboard, go to Object Buckets.
2. Select the bucket for which the bucket lifecycle policy needs to be deleted, and click Edit.
3. In the Edit Bucket form, go to Policies.
4. Click Clear.
5. To complete the bucket lifecycle policy deletion, click Edit Bucket.

Procedure

1. From the dashboard navigation of the secondary site, go to Object→Buckets.

   The Object Gateway buckets from the primary site are displayed.

2. Select the bucket that you want to edit, and click Edit from the action drop-down.

3. In the Edit Bucket form, edit the required prameters, and click Edit Bucket.

   A notification is displayed that the bucket is updated successfully.

   Figure 12.15. Edit buckets in a multi-site

   

Procedure

1. From the dashboard navigation of the primary site, go to Object→Buckets.
2. Select the bucket of the secondary site to be deleted, and click Delete from the action drop-down.

3. In the Delete Bucket notification, select Yes, I am sure and click Delete bucket.

   The bucket is deleted from the Buckets table.