Deploy the S3 Object Browser as a standalone container

Edit online

Deploy the S3 Object Browser as a container by using Podman to run the Object Browser image.

Before you begin

Before you begin, make sure that you have the following prerequisites in place:

  • A system with Podman installed
  • Network access to the S3 endpoint
  • A prepared storage environment that meets the required configuration

About this task

You can deploy the S3 Object Browser independently as a containerized application. This approach provides direct access to the Object Browser without using the IBM Storage Ceph Dashboard.

Procedure

  1. Prepare certificates for HTTPS (SSL) access.
    Required only when using HTTPS with the Ceph Object Gateway. 
    mkdir -p certs
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
  -keyout certs/tls.key \
  -out certs/tls.crt \
  -subj "/CN=S3_BROWSER_IP"
chmod 644 certs/*
  2. Login to Podman. 
    podman login cp.icr.io

    When prompted, enter your username and password.

  3. Pull the Podman S3 Object Browser image. 
    podman pull cp.icr.io/cp/ibm-ceph/object-browser:1.0.0
  4. Run the Object Browser container.
    • For HTTPS configurations, mount the certificate directory. 
      podman run -d \
  --name object-browser \
  -p 8080:8080 \
  -p 9443:8443 \
  -v ./certs:/etc/nginx/certs:Z \
  cp.icr.io/cp/ibm-ceph/object-browser:1.0.0
    • For HTTP (non-SSL) Ceph Object Gateway deployments, omit the certificate mount option. 
      podman run -d \
  --name object-browser \
  -p 8080:8080 \
  -p 9443:8443 \
  cp.icr.io/cp/ibm-ceph/object-browser:1.0.0
  5. Verify that Cross-Origin Resource Sharing (CORS) is configured on the Ceph Object Gateway.
    For more information, see Prepare the storage environment for the S3 Object Browser.
  6. Restart the Ceph Object Gateway service. 
    ceph orch restart rgw.DAEMON

If the container fails to start, verify that the required ports are not already in use.

What to do next

Verify that the container is running.

Use any of the following commands to verify the container status:

  • Verify that the image is listed in the output of the podman ps command.
  • Verify that the service is listed in the output of the ceph orch ls command.

You can now access the IBM Storage Ceph S3 Object Browser.

After deployment, access the Object Browser by using the URL assigned to the service. The URL includes the host and port configured during deployment. For detailed access information, see Access the S3 Object Browser.