IBM Spectrum Scale provide an option to configure Object with External Keystone.
There are two method to achieve the same First is using Installer to Configure the Object with External Keystone and Other is to use mmuserauth cli for setting up Object Authentication.
Following entities must be present on keystone server which is hosted outside of Spectrum Scale cluster.
- User ‘swift’ and ‘admin’ with valid password
- Project ‘service’ and ‘admin’
- Role ‘admin’
- ‘swift’ user should have ‘admin’ role in ‘service’ tenant
- ‘admin’ user should have ‘admin’ role in ‘admin’ tenant
- keystone service of type ‘identity’
- Keystone endpoint
- Swift service of type ‘object-store’
- Swift endpoint.
Refer Configure Openstack-Keystone for IBM Spectrum Scale Object Storage for configuring external keystone server which fulfill all above requirement.
On Spectrum Scale cluster.
# Remove the existing authentication if any using following command
[root@swiftnode ~]# mmuserauth service remove --data-access-method object [root@swiftnode ~]# mmuserauth service remove --data-access-method object --idmapdelete
# Configure IBM Spectrum Scale Object with external keystone using following command
[root@swiftnode ~]# mmuserauth service create --data-access-method object --type userdefined --ks-ext-endpoint http://mykeystone:35357/v3 --ks-swift-user swift --ks-swift-pwd password
Spectrum Scale Object is configured with External Keystone and Waiting for you to upload lots of Object. Hurry up … 🙂
Disclaimer: The content of this post is not approved nor endorsed by IBM.