global config to enable RGW and Swift webUI && Barbican webUI

[senolcolak]

add these parameters inside the configuration

/etc/kolla/global.yml

# barbican
enable_horizon_barbican: "yes"
enable_barbican: "yes"
barbican_crypto_plugin: "simple_crypto"
## ceph
enable_ceph_rgw: "yes"
enable_ceph_rgw_keystone: "yes"
ceph_rgw_swift_compatibility: "true"
ceph_rgw_swift_account_in_url: "true"
enable_ceph_rgw_loadbalancer: "yes"
ceph_rgw_port: 6780
ceph_rgw_hosts:
  - host: 10.1.199.170
    port: 80
ceph_rgw_external_fqdn: rgw2.cephos.eu-de-2.cloud.sap
ceph_rgw_internal_fqdn: rgw2.cephos.eu-de-2.cloud.sap

[senolcolak]

these are the next things to fix

# create Openstack swift users

# 1. Create the user (password will be used in ceph.conf)
openstack user create --domain default --password-prompt swift

# 2. Create the 'object-store' service type
openstack service create --name swift --description "OpenStack Object Storage" object-store

# 3. Assign the 'admin' role to the user within the 'service' project
# This allows RGW to validate tokens and manage users
openstack role add --project service --user swift admin   

# Enable RGW
cd /home/ubuntu/rook/deploy/examples
kubectl apply -f object.yml

ceph config set client.rgw.my.store.a  rgw_crypt_require_ssl                       false
ceph config set client.rgw.my.store.a  rgw_crypt_s3_kms_cache_enabled              true
ceph config set client.rgw.my.store.a  rgw_crypt_s3_kms_cache_max_size             1000
ceph config set client.rgw.my.store.a  rgw_crypt_s3_kms_cache_negative_ttl         120
ceph config set client.rgw.my.store.a  rgw_crypt_s3_kms_cache_positive_ttl         60
ceph config set client.rgw.my.store.a  rgw_crypt_s3_kms_cache_transient_error_ttl  10
ceph config set client.rgw.my.store.a  rgw_enable_apis                             s3 swift admin notifications sts                      
ceph config set client.rgw.my.store.a  rgw_enable_usage_log                        true
ceph config set client.rgw.my.store.a  rgw_keystone_accepted_admin_roles           objectstore_admin                                     
ceph config set client.rgw.my.store.a  rgw_keystone_accepted_reader_roles          objectstore_viewer                           
ceph config set client.rgw.my.store.a  rgw_keystone_accepted_roles                 objectstore_admin,member,objectstore_viewer  
ceph config set client.rgw.my.store.a  rgw_keystone_admin_domain                   Default                                      
ceph config set client.rgw.my.store.a  rgw_keystone_admin_password                 L3sRuNGn8nPl5pEpA04dFEzLwtEc7sJXb92gZdyJ     
ceph config set client.rgw.my.store.a  rgw_keystone_admin_project                  service                                      
ceph config set client.rgw.my.store.a  rgw_keystone_admin_user                     swift                                        
ceph config set client.rgw.my.store.a  rgw_keystone_api_version                    3
ceph config set client.rgw.my.store.a  rgw_keystone_implicit_tenants               swift    
#after ceph 20.0.x
ceph config set client.rgw.my.store.a  rgw_swift_account_in_url true

than on the openstack configure the swift endpoint to RGW endpoint

$ kubectl get pods -A -o wide |grep rgw
this will give you the host that runs RGW, configure this on the endpoints
$ openstack endpoint list|grep swift
internal, share, public
| 2720c31ac1814524a2843facd9e72f07 | RegionOne | swift        | object-store   | True    | internal  | http://rgw2.cephos.eu-de-2.cloud.sap:6780/v1/AUTH_%(project_id)s |
| 3c15fbcacff34f3c988ff5ae50b17367 | RegionOne | swift        | object-store   | True    | public    | http://rgw2.cephos.eu-de-2.cloud.sap:6780/v1/AUTH_%(project_id)s |
$ openstack endpoint set --url 'http://10.1.199.142:80/swift/v1/AUTH_%(project_id)s' 2720c31ac1814524a2843facd9e72f07
$ openstack endpoint set --url 'http://10.1.199.142:80/swift/v1/AUTH_%(project_id)s' 3c15fbcacff34f3c988ff5ae50b17367

[senolcolak]

one more thing, to attach the disk direcly to the VM.

First, identify the target disk's unique ID by running the following command in the Proxmox shell:

ls -l /dev/disk/by-id

Locate the disk you wish to pass through (e.g., ata-WDC_WD10EZEX-08WN4A0_...) and note the full path. Then, attach the disk to your VM using the qm set command, replacing [VM_ID] with your virtual machine's ID and [DISK_ID] with the identifier found:

qm set [VM_ID] -scsi1 /dev/disk/by-id/[DISK_ID]

If your VM already uses a SCSI controller, increment the number (e.g., -scsi2). For VirtIO controllers, use -virtio1 instead.  If you are passing multiple disks of the same model to a VM (such as for TrueNAS), you may need to append a unique serial number to avoid conflicts:

qm set [VM_ID] -scsi1 /dev/disk/by-id/[DISK_ID],serial=custom_serial_1