Chapter 11. Managing Ceph Object Gateway using the dashboard

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Users tab, click Create.

3. Create User form, set the following parameters:

   1. Enter the User ID and Full name.
   2. If required, edit the maximum number of buckets.
   3. Optional: Fill in an Email address
   4. Optional: Select if the user is Suspended or a System user.
   5. Optional: In the S3 key section, set a custom access key and secret key by clearing the Auto-generate key selection.
   6. Optional: In the User quota section, select if the user quota is Enabled, Unlimited size, or has Unlimited objects. If there is a limited size enter the maximum size. If there are limited objects, enter the maximum objects.
   7. Optional: In the Bucket quota section, select if the bucket quota is Enabled, Unlimited size, or has Unlimited objects. If there is a limited size enter the maximum size. If there are limited objects, enter the maximum objects.

4. Click Create User.

   Figure 11.3. Create Ceph object gateway user

   

   View larger image

   

   A notification displays that the user was created successfully.

Procedure

1. Log in to the Dashboard.
2. On the navigation bar, click Object Gateway.
3. Click Roles.
4. Select the user by clicking the relevant row.
5. From Edit drop-down menu, select Create Role.

6. In the Create Role window, configure Role name, Path, and Assume Role Policy Document.

   Figure 11.4. Create Ceph object gateway subuser

   

   View larger image

   
7. Click Create Role.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Uers tab, select a user and click Edit.
3. In the Edit User form, click Create Subuser.
4. In the Create Subuser dialog, enter the username and select the appropriate permissions.

5. Select the Auto-generate secret box and then click Create Subuser.

   Figure 11.5. Create Ceph object gateway subuser

   

   View larger image

   
   Note

   By selecting Auto-generate-secret, the secret key for Object Gateway is generated automatically.

6. In the Edit User form, click Edit user.

   A notification displays that the user was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. On the Users tab, select the user row and click Edit.

3. In the Edit User form, edit the required parameters and click Edit User.

   Figure 11.6. Edit Ceph object gateway user

   

   View larger image

   

   A notification displays that the user was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Users.
2. Select the Username to delete, and click Delete from the action drop-down.

3. In the Delete user notification, select Yes, I am sure and click Delete User.

   The user is removed from the Users table.

   Figure 11.7. Delete Ceph object gateway user

   

   View larger image

   

Procedure

1. Go to Object > User management > Accounts > Create.
2. Enter the required account information.
3. Configure resource modes and limits, including maximum users, roles, groups, and access keys.
4. Optional: Set the account-level quota.
5. Optional: Set the bucket-level quota.
6. Click Create Account.

Procedure

1. Go to Object > User management > Accounts > Edit.
2. In the user list, open the ⋮ (three-dot menu) for the account list and account you want to modify.
3. Select Edit and update the required identity details, limits, or managed policies.
4. Save the changes.

Procedure

1. Go to Object > User management > Accounts > Delete.

   Note

   An account cannot be deleted until all user linked to the accounts are deleted.

2. In the user list, open the ⋮ (three-dot menu) for the user you want to delete.
3. Select Delete and confirm the action.

Procedure

1. Choose one of the following methods to associate a bucket with an account:

   1. Create a new bucket under a user who belongs to an account, and specify the account user as the owner.
   2. Edit an existing bucket created by a normal RGW user and update its ownership to an account user.
2. In the bucket creation or edit form, select the account user from the owner list.
3. Save the bucket configuration.

Procedure

1. Go to Object > Users.

2. Choose one of the following ways to associate a user with an account:

   1. Create a new user and link it to an account during creation.
   2. Edit an existing user and link it to an account.
3. In the Link Account field, select the account to associate it with the user.
4. Optional: Select Account Root User if the user requires administrative privileges to manage other users or roles.
5. Optional: Apply managed policies if the user requires predefined full-access or read-only permissions.
6. Save the user configuration.

Procedure

1. From the dashboard navigation, go to Object→Buckets.

2. Click Create.

   The Create Bucket form displays.

3. Enter a Name for the bucket.
4. Select an Owner. The owner is a user that is not suspended.

5. Select a Placement target.

   Important

   A bucket’s placement target cannot be changed after creation.

6. Optional: In the Locking section, select Enabled to enable locking for the bucket objects.

   Important

   Locking can only be enabled while creating a bucket and cannot be changed after creation.

   1. Select the Mode, either Compliance or Governance.
   2. In the Days field, select the default retention period that is applied to new objects placed in this bucket.

7. Optional: In the Security section, select Security to encrypt objects in the bucket.

   1. Set the configuration values for SSE-S3. Click the Encryption information icon and then Click here.

      Note

      When using SSE-S3 encryption type, Ceph manages the encryption keys that are stored in the vault by the user.

      1. In the Update RGW Encryption Configurations dialog, ensure that SSE-S3 is selected as the Encryption Type.
      2. Fill the other required information.

      3. Click Submit.

         Figure 11.8. Encrypt objects in the bucket

         

         View larger image

         

8. In the Tags section, click Add to add bucket tags.

   These tags are equivalent to the S3 PutBucketTagging. Enter the tag Key and tag Value to categorize your storage buckets.

9. Set the bucket policies in the Policies section.

   1. Enter the Bucket policy. Use the Policy generator or Policy examples buttons to help create the bucket policies, as needed. Enter or modify the policy in JSON format.

      Use the following links from within the form to help create your bucket policy. These links open a new tab in your browser.

      • Policy generator is an external tool from AWS to generate a bucket policy. For more information, see link::https://awspolicygen.s3.amazonaws.com/policygen.html[AWS Policy Generator].

        Note

        You can use the policy generator with the S3 Bucket Policy type as a guideline for building your Ceph Object Gateway bucket policies.

      • Policy examples takes you to AWS documentation with examples of bucket policies.

        For more information about managing bucket policies through the dashboard, see Managing Ceph Object Gateway bucket policies on the dashboard.

   2. Set the Access Control Lists (ACL) grantee and permission information.

      Expand

      Table 11.1. ACL user options

      Permission	Bucket	Object
      READ	Grantee can list the objects in the bucket.	Grantee can read the object.
      WRITE	Grantee can write or delete objects in the bucket.	N/A
      FULL_CONTROL	Grantee has full permissions for object in the bucket.	Grantee can read or write to the object ACL.

      Show more

10. Click Create bucket.

    A notification displays that the bucket was created successfully.

Procedure

1. From the dashboard navigation, go to Object>Buckets.
2. On the navigation bar, click Object Gateway.

3. Select the bucket row that needs to be updated, and click Edit. The Edit Bucket displays.

   1. Optional: Enable Versioning if you want to enable versioning state for all the objects in an existing bucket.

      • To enable versioning, you must be the owner of the bucket.
      • If Locking is enabled during bucket creation, you cannot disable the versioning.
      • All objects added to the bucket will receive a unique version ID.
      • If the versioning state has not been set on a bucket, then the bucket will not have a versioning state.

   2. Optional: Select (Delete enabled) for Multi-Factor Authentication. Multi-Factor Authentication (MFA) ensures that users need to use a one-time password (OTP) when removing objects on certain buckets. Enter a value for Token Serial Number and Token PIN.

      Note

      The buckets must be configured with versioning and MFA enabled which can be done through the S3 API.

   3. Optional: As needed, update the Tags and Policies. Updating the Policies includes updating the Bucket policy and Access Control Lists (ACL) grantee and permission information. For more information, see Creating Ceph object gateway buckets on the dashboard.
4. Click Edit Bucket to save the changes. A notification displays that the bucket was updated successfully.

Procedure

1. From the dashboard navigation, go to Object→Buckets.
2. Select the bucket to be deleted, and click Delete from the action drop-down.

3. In the Delete Bucket notification, select Yes, I am sure and click Delete bucket.

   Figure 11.9. Delete Ceph Object Gateway bucket

   

   View larger image

   

Procedure

1. Go to Object Gateway > Bucket notifications and select the Destinations tab.
2. Click Create destination.
3. Enter the destination details, including the name, endpoint type, and required configuration fields.
4. Click Save.
5. Verify that the destination appears in the list.

Procedure

1. Go to Object Gateway > Bucket notifications and select the Destinations tab.
2. Select the destination and click Edit.
3. Update the required fields.
4. Click Save.
5. Verify that the updated details appear in the list.

Procedure

1. In the Ceph Dashboard, select Object Gateway > Notification destinations.
2. Click the Notification destinations tab.
3. Review the list of configured notification destinations.
4. Optional: Use the search or filters to refine the list.

Procedure

1. Go to Object Gateway > Bucket notifications and select the Destinations tab.
2. Select the destination that you want to delete.
3. Click Delete.
4. Confirm the deletion when prompted.
5. Verify that the destination is removed from the list.