9.4.3. 创建或更新 Object Storage 服务端点

流程

1. 列出当前的 swift 端点和服务：

    $ oc rsh openstackclient openstack endpoint list | grep 'swift.*object'
    $ oc rsh openstackclient openstack service list | grep 'swift.*object'

2. 如果服务和端点不存在，请创建缺少的 swift 资源：

   $ oc rsh openstackclient openstack service create --name swift --description 'OpenStack Object Storage' object-store
   $ oc rsh openstackclient openstack role add --user swift --project service member
   $ oc rsh openstackclient openstack role add --user swift --project service admin
   > for i in public internal; do
   >     oc rsh openstackclient endpoint create --region regionOne object-store $i http://<RGW_VIP>:8080/swift/v1/AUTH_%\(tenant_id\)s
   > done
   $ oc rsh openstackclient openstack role add --project admin --user admin swiftoperator

   • 将 <RGW_VIP& gt; 替换为 Ceph RGW 入口 VIP。

3. 如果端点存在，请更新端点以指向正确的 RGW 入口 VIP：

   $ oc rsh openstackclient openstack endpoint set --url http://<RGW_VIP>:8080/swift/v1/AUTH_%\(tenant_id\)s <swift_public_endpoint_uuid>
   $ oc rsh openstackclient openstack endpoint set --url http://<RGW_VIP>:8080/swift/v1/AUTH_%\(tenant_id\)s <swift_internal_endpoint_uuid>
   $ oc rsh openstackclient openstack endpoint list | grep object
   | 0d682ad71b564cf386f974f90f80de0d | regionOne | swift        | object-store | True    | public    | http://172.18.0.100:8080/swift/v1/AUTH_%(tenant_id)s    |
   | b311349c305346f39d005feefe464fb1 | regionOne | swift        | object-store | True    | internal  | http://172.18.0.100:8080/swift/v1/AUTH_%(tenant_id)s    |

   • 将 <swift_public_endpoint_uuid > 替换为 swift 公共端点的 UUID。
   • 将 <swift_internal_endpoint_uuid > 替换为 swift 内部端点的 UUID。

4. 测试迁移的服务：

   $ oc rsh openstackclient openstack container list --debug
   
   ...
   ...
   ...
   REQ: curl -g -i -X GET http://keystone-public-openstack.apps.ocp.openstack.lab -H "Accept: application/json" -H "User-Agent: openstacksdk/1.0.2 keystoneauth1/5.1.3 python-requests/2.25.1 CPython/3.9.23"
   Starting new HTTP connection (1): keystone-public-openstack.apps.ocp.openstack.lab:80
   http://keystone-public-openstack.apps.ocp.openstack.lab:80 "GET / HTTP/1.1" 300 298
   RESP: [300] content-length: 298 content-type: application/json date: Mon, 14 Jul 2025 17:41:29 GMT location: http://keystone-public-openstack.apps.ocp.openstack.lab/v3/ server: Apache set-cookie: b5697f82cf3c19ece8be533395142512=d5c6a9ee2
   267c4b63e9f656ad7565270; path=/; HttpOnly vary: X-Auth-Token x-openstack-request-id: req-452e42c5-e60f-440f-a6e8-fe1b9ea89055
   RESP BODY: {"versions": {"values": [{"id": "v3.14", "status": "stable", "updated": "2020-04-07T00:00:00Z", "links": [{"rel": "self", "href": "http://keystone-public-openstack.apps.ocp.openstack.lab/v3/"}], "media-types": [{"base": "applic
   ation/json", "type": "application/vnd.openstack.identity-v3+json"}]}]}}
   GET call to http://keystone-public-openstack.apps.ocp.openstack.lab/ used request id req-452e42c5-e60f-440f-a6e8-fe1b9ea89055
   
   ...
   
   REQ: curl -g -i -X GET "http://172.18.0.100:8080/swift/v1/AUTH_44477474b0dc4b5b8911ceec23a22246?format=json" -H "User-Agent: openstacksdk/1.0.2 keystoneauth1/5.1.3 python-requests/2.25.1 CPython/3.9.23" -H "X-Auth-Token: {SHA256}ec5deca0be37bd8bfe659f132b9cdf396b8f409db5dc16972d50cbf3f28474d4"
   Starting new HTTP connection (1): 172.18.0.100:8080
   http://172.18.0.100:8080 "GET /swift/v1/AUTH_44477474b0dc4b5b8911ceec23a22246?format=json HTTP/1.1" 200 2
   RESP: [200] accept-ranges: bytes content-length: 2 content-type: application/json; charset=utf-8 date: Mon, 14 Jul 2025 17:41:31 GMT x-account-bytes-used: 0 x-account-bytes-used-actual: 0 x-account-container-count: 0 x-account-object-count: 0 x-account-storage-policy-default-placement-bytes-used: 0 x-account-storage-policy-default-placement-bytes-used-actual: 0 x-account-storage-policy-default-placement-container-count: 0 x-account-storage-policy-default-placement-object-count: 0 x-openstack-request-id: tx000001e95361131ccf694-006875414a-7753-default x-timestamp: 1752514891.25991 x-trans-id: tx000001e95361131ccf694-006875414a-7753-default
   RESP BODY: []
   GET call to http://172.18.0.100:8080/swift/v1/AUTH_44477474b0dc4b5b8911ceec23a22246?format=json used request id tx000001e95361131ccf694-006875414a-7753-default
   
   clean_up ListContainer:
   END return value: 0