Busk: Created page with "Ceph Bucket ceph-bucket storage class WF ``` Workflow of ceph-bucket in Rook-Ceph 1. Define a CephObjectStore (Ceph RGW) Before creating a bucket, you must have a CephObjectSt..."

2025-02-21T15:31:32Z

Created page with "Ceph Bucket ceph-bucket storage class WF ``` Workflow of ceph-bucket in Rook-Ceph 1. Define a CephObjectStore (Ceph RGW) Before creating a bucket, you must have a CephObjectSt..."

New page

Ceph Bucket ceph-bucket storage class WF
```
Workflow of ceph-bucket in Rook-Ceph
1. Define a CephObjectStore (Ceph RGW)
Before creating a bucket, you must have a CephObjectStore, which represents the Ceph RGW (RADOS Gateway) instance running in your cluster.

Example CephObjectStore:

yaml
Copy
Edit
apiVersion: ceph.rook.io/v1
kind: CephObjectStore
metadata:
name: my-store
namespace: rook-ceph
spec:
gateway:
port: 80
securePort: 443
instances: 1
metadataPool:
replicated:
size: 3
dataPool:
replicated:
size: 3
This creates an RGW instance that will be responsible for serving S3 requests.

2. Create a CephObjectStoreUser
A user is required to interact with the S3 storage.

Example CephObjectStoreUser:

yaml
Copy
Edit
apiVersion: ceph.rook.io/v1
kind: CephObjectStoreUser
metadata:
name: my-user
namespace: rook-ceph
spec:
store: my-store
displayName: "My Object Store User"
Once applied, a Kubernetes secret is created that holds the access credentials (AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY).

3. Define a CephBucket (via ObjectBucketClaim)
To dynamically create a bucket, use an ObjectBucketClaim (OBC), which is managed by Rook's Object Bucket (OB) controller.

Example ObjectBucketClaim:

yaml
Copy
Edit
apiVersion: objectbucket.io/v1alpha1
kind: ObjectBucketClaim
metadata:
name: my-bucket
namespace: default
spec:
generateBucketName: my-bucket
storageClassName: rook-ceph-bucket
The storageClassName should match the Ceph Rook Object Store's storage class.
The bucket name is dynamically generated and bound to a CephBucket.
This creates:

A CephBucket in Ceph RGW.
A Secret containing the S3 credentials.
A ConfigMap with the S3 endpoint and bucket details.
4. Accessing the CephBucket
Once the ObjectBucketClaim is created, check the secret and config map:

bash
Copy
Edit
kubectl get secrets my-bucket -o yaml
kubectl get configmap my-bucket -o yaml
These contain:

S3 Endpoint (AWS_ENDPOINT)
Bucket Name
Access & Secret Key
You can then use tools like AWS CLI, MinIO Client, or S3 SDKs to interact with the bucket.

Example AWS CLI usage:

bash
Copy
Edit
export AWS_ACCESS_KEY_ID=<your-access-key>
export AWS_SECRET_ACCESS_KEY=<your-secret-key>
aws --endpoint-url=http://rook-ceph-rgw.default.svc:80 s3 ls
Summary
CephObjectStore = Ceph RGW service (S3-compatible).
CephObjectStoreUser = S3 user with access keys.
ObjectBucketClaim = Dynamically creates a CephBucket and credentials.
Rook-Ceph handles storage provisioning and lifecycle.
```

Ceph bucket - Revision history

Busk: Created page with "Ceph Bucket ceph-bucket storage class WF ``` Workflow of ceph-bucket in Rook-Ceph 1. Define a CephObjectStore (Ceph RGW) Before creating a bucket, you must have a CephObjectSt..."