Integrating RADOS Gateway with OpenStack Keystone

Ceph can be integrated with the OpenStack identity management service, 'Keystone'. With this integration, the Ceph RGW is configured to accept keystone tokens for user authority. So, any user who is validated by Keystone will get rights to access the RGW.

How to do it…

Execute the following command on your openstack-node1, unless otherwise specified:

  1. Configure OpenStack to point to the Ceph RGW by creating the service and its endpoints:
    # keystone service-create --name swift --type object-store --description "ceph object store"
    # keystone endpoint-create --service-id 6614554878344bbeaa7fec0d5dccca7f --publicurl http://192.168.1.106:7480/swift/v1 --internalurl http://192.168.1.106:7480/swift/v1 --adminurl ...

Get Ceph Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.