第 5 章 保护多云对象网关

流程

1. 获取帐户名称。

   要列出帐户，请运行以下命令：

   $ noobaa account list

   输出示例：

   NAME           ALLOWED_BUCKETS   DEFAULT_RESOURCE               PHASE   AGE
   account-test   [*]               noobaa-default-backing-store   Ready   14m17s
   test2          [first.bucket]    noobaa-default-backing-store   Ready   3m12s

   或者，从终端运行 oc get noobaaaccount 命令：

   $ oc get noobaaaccount

   输出示例：

   NAME           PHASE   AGE
   account-test   Ready   15m
   test2          Ready   3m59s

2. 要重新生成 noobaa 帐户 S3 凭证，请运行以下命令：

   $ noobaa account regenerate <noobaa_account_name> [options]

   $ noobaa account regenerate
   FATA[0000] ❌ Missing expected arguments: <noobaa-account-name>
   
   Usage:
       noobaa account regenerate <noobaa-account-name> [flags] [options]
   
   Use "noobaa options" for a list of global command-line options (applies to all commands).

3. 运行 noobaa account regenerate 命令后，它会提示您一个警告，"This will invalidate all connections between S3 clients and NooBaa which are connected using the current credentials."，并要求确认：

   Example:

   $ noobaa account regenerate account-test

   输出示例：

   INFO[0000] You are about to regenerate an account's security credentials.
   INFO[0000] This will invalidate all connections between S3 clients and NooBaa which are connected using the current credentials.
   INFO[0000] are you sure? y/n

4. 批准后，它会重新生成凭证并最终打印它们：

   INFO[0015] ✅ Exists: Secret "noobaa-account-account-test"
   Connection info:
   AWS_ACCESS_KEY_ID      : ***
   AWS_SECRET_ACCESS_KEY  : ***

流程

1. 要获取 OBC 名称，请运行以下命令：

   $ noobaa obc list

   输出示例：

   NAMESPACE   NAME       BUCKET-NAME                                     STORAGE-CLASS       BUCKET-CLASS                  PHASE
   default     obc-test   obc-test-35800e50-8978-461f-b7e0-7793080e26ba   default.noobaa.io   noobaa-default-bucket-class   Bound

   或者，从终端运行 oc get obc 命令：

   $ oc get obc

   输出示例：

   NAME       STORAGE-CLASS       PHASE   AGE
   obc-test   default.noobaa.io   Bound   38s

2. 要重新生成 noobaa OBC S3 凭证，请运行以下命令：

   $ noobaa obc regenerate <bucket_claim_name> [options]

   $ noobaa obc regenerate
   FATA[0000] ❌ Missing expected arguments: <bucket-claim-name>
   
   Usage:
      noobaa obc regenerate <bucket-claim-name> [flags] [options]
   
   Use "noobaa options" for a list of global command-line options (applies to all commands).

3. 运行 noobaa obc regenerate 命令后，它将提示警告，"This will invalidate all connections between the S3 clients and noobaa which are connected using the current credentials."，并要求确认：

   Example:

   $ noobaa obc regenerate obc-test

   输出示例：

   INFO[0000] You are about to regenerate an OBC's security credentials.
   INFO[0000] This will invalidate all connections between S3 clients and NooBaa which are connected using the current credentials.
   INFO[0000] are you sure? y/n

4. 批准后，它会重新生成凭证并最终打印它们：

   INFO[0022] ✅ RPC: bucket.read_bucket() Response OK: took 95.4ms
   
   ObjectBucketClaim info:
     Phase                  : Bound
     ObjectBucketClaim      : kubectl get -n default objectbucketclaim obc-test
     ConfigMap              : kubectl get -n default configmap obc-test
     Secret                 : kubectl get -n default secret obc-test
     ObjectBucket           : kubectl get objectbucket obc-default-obc-test
     StorageClass           : kubectl get storageclass default.noobaa.io
     BucketClass            : kubectl get -n default bucketclass noobaa-default-bucket-class
   
   Connection info:
    BUCKET_HOST            : s3.default.svc
    BUCKET_NAME            : obc-test-35800e50-8978-461f-b7e0-7793080e26ba
       BUCKET_PORT            : 443
       AWS_ACCESS_KEY_ID      : ***
       AWS_SECRET_ACCESS_KEY  : ***
   
   Shell commands:
     AWS S3 Alias           : alias s3='AWS_ACCESS_KEY_ID=***
   AWS_SECRET_ACCESS_KEY=*** aws s3 --no-verify-ssl --endpoint-url ***'
   
   Bucket status:
     Name                   : obc-test-35800e50-8978-461f-b7e0-7793080e26ba
     Type                   : REGULAR
     Mode                   : OPTIMAL
     ResiliencyStatus       : OPTIMAL
     QuotaStatus            : QUOTA_NOT_SET
     Num Objects            : 0
     Data Size              : 0.000 B
     Data Size Reduced      : 0.000 B
     Data Space Avail       : 13.261 GB
     Num Objects Avail      : 9007199254740991