4.4. 为 Beast 配置 SSL

流程

1. 在当前目录中创建一个名为 rgw.yml 的新文件：

   示例

   [ceph: root@host01 /]# touch rgw.yml

   Copy to Clipboard Toggle word wrap

2. 打开 rgw.yml 文件进行编辑，并根据环境自定义该文件：

   语法

   service_type: rgw
   service_id: SERVICE_ID
   service_name: SERVICE_NAME
   placement:
     hosts:
     - HOST_NAME
   spec:
     ssl: true
     rgw_frontend_ssl_certificate: CERT_HASH

   Copy to Clipboard Toggle word wrap

   示例

   service_type: rgw
   service_id: foo
   service_name: rgw.foo
   placement:
     hosts:
     - host01
   spec:
     ssl: true
     rgw_frontend_ssl_certificate: |
       -----BEGIN RSA PRIVATE KEY-----
       MIIEpAIBAAKCAQEA+Cf4l9OagD6x67HhdCy4Asqw89Zz9ZuGbH50/7ltIMQpJJU0
       gu9ObNtIoC0zabJ7n1jujueYgIpOqGnhRSvsGJiEkgN81NLQ9rqAVaGpadjrNLcM
       bpgqJCZj0vzzmtFBCtenpb5l/EccMFcAydGtGeLP33SaWiZ4Rne56GBInk6SATI/
       JSKweGD1y5GiAWipBR4C74HiAW9q6hCOuSdp/2WQxWT3T1j2sjlqxkHdtInUtwOm
       j5Ism276IndeQ9hR3reFR8PJnKIPx73oTBQ7p9CMR1J4ucq9Ny0J12wQYT00fmJp
       -----END RSA PRIVATE KEY-----
       -----BEGIN CERTIFICATE-----
       MIIEBTCCAu2gAwIBAgIUGfYFsj8HyA9Zv2l600hxzT8+gG4wDQYJKoZIhvcNAQEL
       BQAwgYkxCzAJBgNVBAYTAklOMQwwCgYDVQQIDANLQVIxDDAKBgNVBAcMA0JMUjEM
       MAoGA1UECgwDUkhUMQswCQYDVQQLDAJCVTEkMCIGA1UEAwwbY2VwaC1zc2wtcmhj
       czUtOGRjeHY2LW5vZGU1MR0wGwYJKoZIhvcNAQkBFg5hYmNAcmVkaGF0LmNvbTAe
       -----END CERTIFICATE-----

   Copy to Clipboard Toggle word wrap

3. 使用服务规格文件部署 Ceph 对象网关：

   示例

   [ceph: root@host01 /]# ceph orch apply -i rgw.yml

   Copy to Clipboard Toggle word wrap