8.4. 为 Multicloud Object Gateway 启用存储桶日志记录 [技术预览]
bucket 日志记录可帮助您记录针对 Multicloud 对象网关(MCG)存储桶执行的 S3 操作,以满足合规性、审核和优化的目的。
重要
技术预览功能为用户提供了一个对最新的产品创新的试用机会,以便用户可以对其进行测试并提供反馈。但是,Red Hat 服务等级协议不支持这些功能,其功能可能并不完善,且不适用于生产环境。由于红帽会考虑在将来的产品中使用这些技术预览功能,我们将尝试解决客户在使用这些功能时遇到的问题。
如需更多信息,请参阅技术预览功能支持范围。
先决条件
- 安装了带有 OpenShift Data Foundation operator 的 OpenShift Container Platform。
访问 MCG。
如需更多信息 ,请参阅使用应用程序访问多云对象网关。
流程
创建一个数据存储桶,您可以在其中上传对象。
nb bucket create data.bucket
nb bucket create data.bucket
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 使用以下命令,创建要存储存储桶操作的日志存储桶:
nb bucket create log.bucket
nb bucket create log.bucket
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 使用日志存储桶在数据存储桶上配置存储桶日志记录。
nb api bucket_api put_bucket_logging '{ "name": "data.bucket", "log_bucket": "log.bucket", "log_prefix": "data-bucket-logs" }'
nb api bucket_api put_bucket_logging '{ "name": "data.bucket", "log_bucket": "log.bucket", "log_prefix": "data-bucket-logs" }'
Copy to Clipboard Copied! Toggle word wrap Toggle overflow 验证是否为 data bucket 设置了存储桶日志记录。
nb api bucket_api get_bucket_logging '{ "name": "data.bucket" }'
nb api bucket_api get_bucket_logging '{ "name": "data.bucket" }'
Copy to Clipboard Copied! Toggle word wrap Toggle overflow S3 操作最多可能需要 24 小时才能记录在日志存储桶中。以下示例显示了记录的日志以及如何下载它们:
Example
s3_alias cp s3://logs.bucket/data-bucket-logs/logs.bucket.bucket_data-bucket-logs_1719230150.log - | tail -n 2 Jun 24 14:00:02 10-XXX-X-XXX.sts.openshift-storage.svc.cluster.local {"noobaa_bucket_logging":"true","op":"GET","bucket_owner":"operator@noobaa.io","source_bucket":"data.bucket","object_key":"/data.bucket?list-type=2&prefix=data-bucket-logs&delimiter=%2F&encoding-type=url","log_bucket":"logs.bucket","remote_ip":"100.XX.X.X","request_uri":"/data.bucket?list-type=2&prefix=data-bucket-logs&delimiter=%2F&encoding-type=url","request_id":"luv2XXXX-ctyg2k-12gs"} Jun 24 14:00:06 10-XXX-X-XXX.s3.openshift-storage.svc.cluster.local {"noobaa_bucket_logging":"true","op":"PUT","bucket_owner":"operator@noobaa.io","source_bucket":"data.bucket","object_key":"/data.bucket/B69EC83F-0177-44D8-A8D1-4A10C5A5AB0F.file","log_bucket":"logs.bucket","remote_ip":"100.XX.X.X","request_uri":"/data.bucket/B69EC83F-0177-44D8-A8D1-4A10C5A5AB0F.file","request_id":"luv2XXXX-9syea5-x5z"}
s3_alias cp s3://logs.bucket/data-bucket-logs/logs.bucket.bucket_data-bucket-logs_1719230150.log - | tail -n 2 Jun 24 14:00:02 10-XXX-X-XXX.sts.openshift-storage.svc.cluster.local {"noobaa_bucket_logging":"true","op":"GET","bucket_owner":"operator@noobaa.io","source_bucket":"data.bucket","object_key":"/data.bucket?list-type=2&prefix=data-bucket-logs&delimiter=%2F&encoding-type=url","log_bucket":"logs.bucket","remote_ip":"100.XX.X.X","request_uri":"/data.bucket?list-type=2&prefix=data-bucket-logs&delimiter=%2F&encoding-type=url","request_id":"luv2XXXX-ctyg2k-12gs"} Jun 24 14:00:06 10-XXX-X-XXX.s3.openshift-storage.svc.cluster.local {"noobaa_bucket_logging":"true","op":"PUT","bucket_owner":"operator@noobaa.io","source_bucket":"data.bucket","object_key":"/data.bucket/B69EC83F-0177-44D8-A8D1-4A10C5A5AB0F.file","log_bucket":"logs.bucket","remote_ip":"100.XX.X.X","request_uri":"/data.bucket/B69EC83F-0177-44D8-A8D1-4A10C5A5AB0F.file","request_id":"luv2XXXX-9syea5-x5z"}
Copy to Clipboard Copied! Toggle word wrap Toggle overflow (可选)要禁用存储桶日志记录,请使用以下命令:
nb api bucket_api delete_bucket_logging '{ "name": "data.bucket" }'
nb api bucket_api delete_bucket_logging '{ "name": "data.bucket" }'
Copy to Clipboard Copied! Toggle word wrap Toggle overflow