Configuring Swift with S3 emulation to use Keystone

朱雀 2021-11-24 01:02 255阅读 0赞

### ###

#### 地址：[http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-swift-with-s3-emulation-to-use-keystone.html][http_docs.openstack.org_trunk_openstack-compute_admin_content_configuring-swift-with-s3-emulation-to-use-keystone.html] ####

#### Configuring Swift with S3 emulation to use Keystone ####

Keystone support validating S3 tokens using the same tokens as the generated EC2 tokens. When you have generated a pair of EC2 access token and secret you can access your swift cluster directly with the S3 API.

1.  Configure the paste file for swift-proxy (\`/etc/swift/proxy-server.conf\`) to use S3token and Swift3 middleware. You must have the s3token middleware in the pipeline when using keystone and swift3.
    
    Here's an example:
    
        [DEFAULT]
        bind_port = 8080
        user = <user>
        
        [pipeline:main]
        pipeline = catch_errors healthcheck cache swift3 s3token authtoken keystone proxy-server
        
        [app:proxy-server]
        use = egg:swift#proxy
        account_autocreate = true
        
        [filter:catch_errors]
        use = egg:swift#catch_errors
        
        [filter:healthcheck]
        use = egg:swift#healthcheck
        
        [filter:cache]
        use = egg:swift#memcache
        
        [filter:swift3]
        use = egg:swift#swift3
        
        [filter:keystone]
        paste.filter_factory = keystoneclient.middleware.swift_auth:filter_factory
        operator_roles = admin, swiftoperator
        
        [filter:s3token]
        paste.filter_factory = keystoneclient.middleware.s3_token:filter_factory
        auth_port = 35357
        auth_host = 127.0.0.1
        auth_protocol = http
        
        [filter:authtoken]
        paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
        service_port = 5000
        service_host = 127.0.0.1
        auth_port = 35357
        auth_host = 127.0.0.1
        auth_protocol = http
        auth_token = ADMIN
        admin_token = ADMIN
2.  You can then access directly your Swift via the S3 API, here's an example with the \`boto\` library:
    
        import boto
        import boto.s3.connection
        
        connection = boto.connect_s3(
            aws_access_key_id='<ec2 access key for user>',
            aws_secret_access_key='<ec2 secret access key for user>',
            port=8080,
            host='localhost',
            is_secure=False,
            calling_format=boto.s3.connection.OrdinaryCallingFormat())

[http_docs.openstack.org_trunk_openstack-compute_admin_content_configuring-swift-with-s3-emulation-to-use-keystone.html]: http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-swift-with-s3-emulation-to-use-keystone.html