Re: Ceph rgw & dashboard problem

[Kiefer Chang <kiefer.chang@xxxxxxxx>]

Hi Mika,

Could you see if making the `test` user a system user works?

The user that the Dashboard uses to communicate with RGW needs to be a system user.
The document suggests a `--system` flag should be provided when creating the user:
https://docs.ceph.com/en/latest/mgr/dashboard/#enabling-the-object-gateway-management-frontend

```
radosgw-admin user create --uid=<user_id> --display-name=<display_name> \
    --system
```

I think you can use `radosgw-admin user modify ...` command to modify the existing user.

--
Kiefer




On 2020/12/22, 10:56 PM, "Mika Saari" <mika.saari@xxxxxxxxx> wrote:

Hi,

  Using Ceph Octopus installed with cephadm here. Version running currently
is 15.2.6. There are 3 machines running the cluster. Machine names are
introduced in /etc/hosts in long(FQDN) & short forms but ceph hostnames of
the servers are in short form (not sure if this affects anyway). rdb side
is working nicely, tested with a linux client.

  Trying to get object gateway to be visible in dashboard but getting error
when selecting "Object Gateway -> Daemons"
Error:
    RGW REST API failed request with status code 403
(b'{"Code":"AccessDenied","RequestId":"tx000000000000000000040-005fe20384-8ecbc'
b'-ou","HostId":"8ecbc-ou-default"}')

  What am I doing wrong here?

    Thanks a lot,
     -Mika

 ---- Procedure what I have done ----
   1) ceph orch apply rgw default ou --placement="1 ceph1"
   2) radosgw-admin user create --uid=test --display-name=test
--access-key=test --secret-key=test
   3) radosgw-admin period update --rgw-realm=default --commit
   4) aws configure --profile=default
        aws configure --profile=default
        AWS Access Key ID [None]: test
        AWS Secret Access Key [None]: test
        Default region name [None]: default
        Default output format [None]: json
    5) aws s3 mb s3://test1 --endpoint-url http://ceph1
        make_bucket: test1
    5.1) radosgw-admin bucket list
        [
            "test1"
        ]
    6) ceph dashboard --help | grep reset-rgw | awk '{print $2}' | xargs -n
1 ceph dashboard
        Option RGW_API_ACCESS_KEY reset to default value ""
        Option RGW_API_ADMIN_RESOURCE reset to default value "admin"
        Option RGW_API_HOST reset to default value ""
        Option RGW_API_PORT reset to default value "80"
        Option RGW_API_SCHEME reset to default value "http"
        Option RGW_API_SECRET_KEY reset to default value ""
        Option RGW_API_SSL_VERIFY reset to default value "True"
        Option RGW_API_USER_ID reset to default value ""
    7) ceph dashboard set-rgw-api-user-id "test"
        Option RGW_API_USER_ID updated
    8) ceph dashboard set-rgw-api-access-key test
        Option RGW_API_ACCESS_KEY updated
    9) ceph dashboard set-rgw-api-secret-key test
        Option RGW_API_SECRET_KEY updated
    10) ceph mgr module disable dashboard
    11) ceph mgr module enable dashboard
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx


_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx