Configuring OpenStack access to monitor the object storage system

Configure OpenStack access for the user name that is used to monitor the IBM Storage Scale object storage system.

About this task

Before you add the IBM Storage Scale object storage system for monitoring, ensure that the user name that you use to monitor the storage system has access to object storage accounts.
Tip: The terms "account" and "project" mean the same thing. Swift, the OpenStack object storage service, uses the term "account" and Keystone, the OpenStack identity service, uses the term "project."

Procedure

  1. Set the object storage account and the domain for the user. By default, the domain is set to Default and cannot be modified after you create the user account. Choose one of the following actions:
    1. To set the account and domain when you create a user account, use the following command:
      openstack user create --domain domainname --project projectname 
      --password Password username
    2. To set the account and the domain for an existing user name, use the following command:
      openstack user set --project projectname username
  2. Assign the admin role for an object storage account to the user name.
    Use the following command:
    openstack role add --user username --project projectname admin
  3. To monitor all accounts on the object storage system, assign to the user name the role that is defined in the reseller_admin_role configuration option in the Swift proxy server. The default value for the reseller_admin_role option is ResellerAdmin.
    For example, use the following command:
    openstack role add --user username --project projectname ResellerAdmin
    Restriction: If you do not assign the ResellerAdmin role, information is collected only for the object storage accounts that the user has admin access to.

What to do next

To learn more about configuring and assigning user roles in OpenStack, see External link iconhttps://docs.openstack.org/.