Chapter 8. Accessing the RADOS Object Gateway S3 endpoint

Users can access the RADOS Object Gateway (RGW) endpoint directly.

Prerequisites

  • A running OpenShift Container Storage Platform

Procedure

  1. Run oc get service command to get the RGW service name.

    $ oc get service
    
    NAME                                               TYPE
    rook-ceph-rgw-ocs-storagecluster-cephobjectstore   ClusterIP
    
    CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
    172.30.99.207    <none>        80/TCP     4d15h
  2. Run oc expose command to expose the RGW service.

    $ oc expose svc/<RGW service name> --hostname=<route name>

    Replace <RGW-service name> with the RGW service name from the previous step.

    Replace <route name> with a route you want to create for the RGW service.

    For example:

    $ oc expose svc/rook-ceph-rgw-ocs-storagecluster-cephobjectstore --hostname=rook-ceph-rgw-ocs.ocp.host.example.com
  3. Run oc get route command to confirm oc expose is successful and there is an RGW route.

    $ oc get route
    
    NAME                                               HOST/PORT                                PATH
    rook-ceph-rgw-ocs-storagecluster-cephobjectstore   rook-ceph-rgw-ocsocp.host.example.com
    
    SERVICES                                           PORT         TERMINATION   WILDCARD
    rook-ceph-rgw-ocs-storagecluster-cephobjectstore   http         <none>

Verify

  • To verify the ENDPOINT, run the following command:

    aws s3 --no-verify-ssl --endpoint <ENDPOINT> ls

    Replace <ENDPOINT> with the route that you get from the command in the above step 3.

    For example:

    $ aws s3 --no-verify-ssl --endpoint http://rook-ceph-rgw-ocs.ocp.host.example.com ls
Note

To get the access key and secret of the default user ocs-storagecluster-cephobjectstoreuser, run the following commands:

  • Access key:

    $ oc get secret rook-ceph-object-user-ocs-storagecluster-cephobjectstore-ocs-storagecluster-cephobjectstoreuser  -o yaml | grep -w "AccessKey:" | head -n1 | awk '{print $2}' | base64 --decode
  • Secret key:

    $ oc get secret rook-ceph-object-user-ocs-storagecluster-cephobjectstore-ocs-storagecluster-cephobjectstoreuser  -o yaml | grep -w "SecretKey:" | head -n1 | awk '{print $2}' | base64 --decode