Chapter 11. Accessing the RADOS Object Gateway S3 endpoint

Users can access the RADOS Object Gateway (RGW) endpoint directly.

Prerequisites

  • A running OpenShift Container Storage Platform

Procedure

  1. Run oc get service command to get the RGW service name. 

    $ oc get service

NAME                                               TYPE
rook-ceph-rgw-ocs-storagecluster-cephobjectstore   ClusterIP

CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
172.30.99.207    <none>        80/TCP     4d15h

  2. Run oc expose command to expose the RGW service. 

    $ oc expose svc/<RGW service name> --hostname=<route name>

    Replace <RGW-service name> with the RGW service name from the previous step.

    Replace <route name> with a route you want to create for the RGW service.

    For example: 

    $ oc expose svc/rook-ceph-rgw-ocs-storagecluster-cephobjectstore --hostname=rook-ceph-rgw-ocs.ocp.host.example.com

  3. Run oc get route command to confirm oc expose is successful and there is an RGW route. 

    $ oc get route

NAME                                               HOST/PORT                                PATH
rook-ceph-rgw-ocs-storagecluster-cephobjectstore   rook-ceph-rgw-ocsocp.host.example.com

SERVICES                                           PORT         TERMINATION   WILDCARD
rook-ceph-rgw-ocs-storagecluster-cephobjectstore   http         <none>

Verify

  • To verify the ENDPOINT, run the following command: 

    aws s3 --no-verify-ssl --endpoint <ENDPOINT> ls

    Replace <ENDPOINT> with the route that you get from the command in the above step 3.

    For example: 

    $ aws s3 --no-verify-ssl --endpoint http://rook-ceph-rgw-ocs.ocp.host.example.com ls
Note

To get the access key and secret of the default user ocs-storagecluster-cephobjectstoreuser, run the following commands:

  • Access key: 

    $ oc get secret rook-ceph-object-user-ocs-storagecluster-cephobjectstore-ocs-storagecluster-cephobjectstoreuser  -o yaml | grep -w "AccessKey:" | head -n1 | awk '{print $2}' | base64 --decode

  • Secret key: 

    $ oc get secret rook-ceph-object-user-ocs-storagecluster-cephobjectstore-ocs-storagecluster-cephobjectstoreuser  -o yaml | grep -w "SecretKey:" | head -n1 | awk '{print $2}' | base64 --decode