OpenStack Keystone integration

As a storage administrator, you can use OpenStack's Keystone authentication service to authenticate users through the Ceph Object Gateway. Before you can configure the Ceph Object Gateway, you need to configure Keystone first. This enables the Swift service, and points the Keystone service to the Ceph Object Gateway. Next, you need to configure the Ceph Object Gateway to accept authentication requests from the Keystone service.

When using the OpenStack Keystone authentication service, be sure to configure the Ceph Object Gateway in the following order:
  1. Understand Keystone authentication roles and usage. See Keystone authentication and the Ceph Object Gateway.
  2. Creating the Swift service.
  3. Setting the Ceph Object Gateway endpoints.
  4. Verifying Openstack is using the Ceph Object Gateway endpoints.
  5. Configure the Ceph Object Gateway in one of the following ways:
  6. Restarting the Ceph Object Gateway daemon.

Before you begin

Before you begin, make sure that you have the following prerequisites in place:
  • A running Red Hat OpenStack Platform environment.
  • A running IBM Storage Ceph environment.
  • A running Ceph Object Gateway environment.