創(chuàng)建CephFS 對象網(wǎng)關(guān)(RGW)
當(dāng)前在虛擬機(jī)monosd(192.168.10.42)上
rgw邏輯架構(gòu)圖.png
上為官網(wǎng)圖，下為相關(guān)書籍中用圖引用嫂便±塘可以進(jìn)行更為清晰與直觀的看到結(jié)構(gòu)！
rgw邏輯架構(gòu)圖-2.png
安裝ceph-radosgw
bash> yum install ceph-radosgw -y
bash> vim /etc/ceph/ceph.conf
#新增以下內(nèi)容#
---
在global下新增
[global]
...
mon max pg per osd = 300
#以下純新增
[client.rgw01]
host = monosd
keyring = /var/lib/ceph/radosgw/ceph-rgw01/keyring
log file = /var/log/ceph/ceph-radosgw.rgw01.log
rgw frontends = "civetweb port=3245"
---
備選：
[[ certificate.pem文件中包含了證書與私鑰 ]]
[[ 如果想多個端口毙替，可以port=3245 port=443s ]]
rgw frontends = "civetweb port=443s ssl_certificate=/etc/ceph/certificate.pem error_log_file=/var/log/civetweb.error.log access_log_file=/var/log/civetweb.access.log"
bash> sudo ceph mkdir -p /var/lib/ceph/radosgw/ceph-rgw01
bash> ceph-authtool -C -n radosgw.rgw01 --gen-key /var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> ceph-authtool -n radosgw.rgw01 --cap mon 'allow rw' --cap osd 'allow rwx' /var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> ceph auth add radosgw.rgw01 --in-file=/var/lib/ceph/radosgw/ceph-rgw01/keyring
bash> chown ceph:ceph /var/lib/ceph/radosgw/ -R
證書生成腳本：將以下內(nèi)容復(fù)制岸售，建立一個crtgen.sh
#!/bin/bash
# create self-signed server certificate:
read -p "Enter your domain: " DOMAIN
echo "Create server key..."
openssl genrsa -des3 -out $DOMAIN.key 2048
echo "Create server certificate signing request..."
#SUBJECT="/C=US/ST=$DOMAIN/L=$DOMAIN/O=$DOMAIN/OU=$DOMAIN/CN=$DOMAIN"
SUBJECT="/CN=$DOMAIN"
openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
echo "Remove password..."
mv $DOMAIN.key $DOMAIN.origin.key
openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
echo "Sign SSL certificate..."
openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
echo "Generated:"
echo " $DOMAIN.crt"
echo " $DOMAIN.key"
將crt轉(zhuǎn)換為pem證書,并將地證書與私鑰合并：
bash> openssl x509 -in 192.168.10.42.crt -out 192.168.10.42.pem
bash> cat 192.168.10.42.crt > certificate.pem
bash> cat 192.168.10.42.key >> certificate.pem
以上配置完成以后，將三臺虛擬機(jī)的配置文件同步一下,保持一致厂画，并將之的mon凸丸、mgr、osd袱院、mds服務(wù)均重啟一次
啟動服務(wù)
bash> systemctl start ceph-radosgw@rgw01
bash> systemctl status ceph-radosgw@rgw01
啟動無誤以后屎慢，添加到開機(jī)啟動：systemctl enable ceph-radosgw@rgw01
為rgw開啟Dashboard管理
bash> radosgw-admin user create --uid=john --display-name="John Doe" --system
bash> radosgw-admin user info --uid=john
bash> ceph dashboard set-rgw-api-access-key 367OXRWXRXIA16189LB0
bash> ceph dashboard set-rgw-api-secret-key grqMG6DD9gONbvljCASmFHwhfO4MMwfHhN4LLDmZ
bash> ceph dashboard set-rgw-api-host monosd
bash> ceph dashboard set-rgw-api-port 3245
bash> ceph dashboard set-rgw-api-scheme http # http or https
bash> ceph dashboard set-rgw-api-admin-resource <admin_resource> #不明，可先不執(zhí)行
bash> ceph dashboard set-rgw-api-user-id john
bash> ceph dashboard set-rgw-api-ssl-verify False
bash> ceph dashboard set-rest-requests-timeout 30 # seconds
REF.
radosgw.
radhat install rgw.
dashboard.
radosgw-admin.
Ceph 15.25 手動部署系列筆記
