創(chuàng)建CephFS 對(duì)象網(wǎng)關(guān)(RGW)

當(dāng)前在虛擬機(jī)monosd(192.168.10.42)上

rgw邏輯架構(gòu)圖.png

上為官網(wǎng)圖，下為相關(guān)書籍中用圖引用。可以進(jìn)行更為清晰與直觀的看到結(jié)構(gòu)！

rgw邏輯架構(gòu)圖-2.png

安裝ceph-radosgw

bash> yum install ceph-radosgw -y
bash> vim /etc/ceph/ceph.conf
 #新增以下內(nèi)容#
 ---
在global下新增
[global]
...
mon max pg per osd = 300

 #以下純新增
[client.rgw01]
host = monosd
keyring = /var/lib/ceph/radosgw/ceph-rgw01/keyring
log file = /var/log/ceph/ceph-radosgw.rgw01.log
rgw frontends = "civetweb port=3245"
 ---
備選：
[[ certificate.pem文件中包含了證書與私鑰 ]]
[[ 如果想多個(gè)端口，可以port=3245 port=443s ]]
 rgw frontends = "civetweb port=443s ssl_certificate=/etc/ceph/certificate.pem error_log_file=/var/log/civetweb.error.log access_log_file=/var/log/civetweb.access.log"

bash> sudo ceph mkdir -p /var/lib/ceph/radosgw/ceph-rgw01
bash> ceph-authtool -C -n radosgw.rgw01 --gen-key /var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> ceph-authtool -n radosgw.rgw01 --cap mon 'allow rw' --cap osd 'allow rwx' /var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> ceph auth add radosgw.rgw01 --in-file=/var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> chown ceph:ceph /var/lib/ceph/radosgw/ -R

證書生成腳本：將以下內(nèi)容復(fù)制，建立一個(gè)crtgen.sh

#!/bin/bash
# create self-signed server certificate:
read -p "Enter your domain: " DOMAIN
echo "Create server key..."
openssl genrsa -des3 -out $DOMAIN.key 2048
echo "Create server certificate signing request..."
#SUBJECT="/C=US/ST=$DOMAIN/L=$DOMAIN/O=$DOMAIN/OU=$DOMAIN/CN=$DOMAIN"
SUBJECT="/CN=$DOMAIN"
openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
echo "Remove password..."
mv $DOMAIN.key $DOMAIN.origin.key
openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
echo "Sign SSL certificate..."
openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
echo "Generated:"
echo "    $DOMAIN.crt"
echo "    $DOMAIN.key"

將crt轉(zhuǎn)換為pem證書,并將地證書與私鑰合并：

bash> openssl x509 -in 192.168.10.42.crt -out 192.168.10.42.pem
bash> cat 192.168.10.42.crt > certificate.pem
bash> cat 192.168.10.42.key >> certificate.pem

官網(wǎng)配置說明界面-重要*

以上配置完成以后，將三臺(tái)虛擬機(jī)的配置文件同步一下,保持一致，并將之的mon、mgr、osd、mds服務(wù)均重啟一次

啟動(dòng)服務(wù)

bash> systemctl start ceph-radosgw@rgw01
bash> systemctl status ceph-radosgw@rgw01

啟動(dòng)無誤以后，添加到開機(jī)啟動(dòng)：systemctl enable ceph-radosgw@rgw01

為rgw開啟Dashboard管理

bash> radosgw-admin user create --uid=john --display-name="John Doe" --system
bash> radosgw-admin user info --uid=john
bash> ceph dashboard set-rgw-api-access-key 367OXRWXRXIA16189LB0
bash> ceph dashboard set-rgw-api-secret-key grqMG6DD9gONbvljCASmFHwhfO4MMwfHhN4LLDmZ
bash> ceph dashboard set-rgw-api-host monosd
bash> ceph dashboard set-rgw-api-port 3245
bash> ceph dashboard set-rgw-api-scheme http    # http or https
bash> ceph dashboard set-rgw-api-admin-resource <admin_resource>    #不明，可先不執(zhí)行
bash> ceph dashboard set-rgw-api-user-id john
bash> ceph dashboard set-rgw-api-ssl-verify False
bash> ceph dashboard set-rest-requests-timeout 30   # seconds 

REF.
radosgw.
radhat install rgw.
dashboard.
radosgw-admin.
Ceph 15.25 手動(dòng)部署系列筆記