REST API authentication process

The REST API services require authentication with a user ID and a password.

You must create an IBM Storage Scale GUI user with the ProtocolAdmin role and use those credentials with Basic Auth to authenticate with the IBM Storage Scale REST APIs to access IBM Storage Scale DAS endpoints.
  1. Create an IBM Storage Scale GUI or REST API user with the ProtocolAdmin role.
    oc exec -c liberty ibm-spectrum-scale-gui-0 -n ibm-spectrum-scale 
-- /usr/lpp/mmfs/gui/cli/mkuser s3-admin -p Passw0rd -g 'ProtocolAdmin'
    By default, a user's password is expired after 90 days. If the security policy of your organization permits, you can create a password without expatriation limit by issuing the following command:
    oc exec -c liberty ibm-spectrum-scale-gui-0 -n ibm-spectrum-scale 
-- /usr/lpp/mmfs/gui/cli/mkuser s3-admin -p Passw0rd -g 'ProtocolAdmin' -e 1
  2. Use these user credentials to access the REST APIs for IBM Storage Scale DAS management.
    curl -k -u "s3-admin:Passw0rd" https://<ibm-spectrumscale-host>/scalemgmt/v2/das/<endpoint_ID>