openstack/openstack-ansible-os_swift
Code Issues Proposed changes
openstack-ansible-os_swift/doc/source/configure-swift.rst
Dmitriy Rabotyagov 1d0bba49a7 Stop reffering _member_ role 
Keystone has stopped providing or reffering `_member_` role for a while,
thus role should not be refferenced anymore.

Moreover, with 2023.1 service policies have dropped `_member_`
which resulted in the role to be insufficient for basic operations.

Change-Id: I4d6eacae2041b0a00114dda4e8315d4ec6295319
Related-Bug: #2029486
2023-08-15 13:10:38 +02:00

2.1 KiB
Raw Permalink Blame History

Home OpenStack-Ansible Swift

Configuring swift

configure-swift-devices.rst configure-swift-config.rst configure-swift-glance.rst configure-swift-add.rst configure-swift-policies.rst

Object Storage (swift) is a multi-tenant Object Storage system. It is highly scalable, can manage large amounts of unstructured data, and provides a RESTful HTTP API.

The following procedure describes how to set up storage devices and modify the Object Storage configuration files to enable swift usage.

  1. The section called "Configure and mount storage devices"

  2. The section called "Configure an Object Storage deployment"

  3. Optionally, allow all Identity (keystone) users to use swift by setting swift_allow_all_users in the user_variables.yml file to True. Any users with the member role (all authorized keystone users) can create containers and upload objects to Object Storage.

    If this value is False, then by default, only users with the admin role or role set in swift_operator_role are allowed to create containers or manage tenants.

    When the backend type for the Image Service (glance) is set to swift, glance can access the swift cluster regardless of whether this value is True or False.

Overview

Object Storage (swift) is configured using the /etc/openstack_deploy/conf.d/swift.yml file and the /etc/openstack_deploy/user_variables.yml file.

When installing swift, use the group variables in the /etc/openstack_deploy/conf.d/swift.yml file for the Ansible playbooks. Some variables cannot be changed after they are set, while some changes require re-running the playbooks. The values in the swift_hosts section supersede values in the swift section.

To view the configuration files, including information about which variables are required and which are optional, see Appendix A, *OSA Example test environment configuration*.