Chapter 14. Using TLS certificates for applications accessing RGW

Procedure

• For internal RGW server

  • Get the TLS certificate and key from the kubernetes secret:

    $ oc get secrets/<secret_name> -o jsonpath='{.data..tls\.crt}' | base64 -d
    
    $ oc get secrets/<secret_name> -o jsonpath='{.data..tls\.key}' | base64 -d

    Copy to Clipboard Toggle word wrap

    <secret_name>

    The default kubernetes secret name is <objectstore_name>-cos-ceph-rgw-tls-cert. Specify the name of the object store.

• For external RGW server

  • Get the the TLS certificate from the kubernetes secret:

    $ oc get secrets/<secret_name> -o jsonpath='{.data.cert}' | base64 -d

    Copy to Clipboard Toggle word wrap

    <secret_name>

    The default kubernetes secret name is ceph-rgw-tls-cert and it is an opaque type of secret. The key value for storing the TLS certificates is cert.