Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- I setup a ceph cluster at home under VMware (2x ceph-monitor/managers VMs, 3x Ceph OSD VMs). I got Vault High Availability operational as well on 3x Ubuntu VMs. I am currently working on an ansible script for the SSE-S3 encryption stuff. I also got an HAProxy front-end with a RGW as well. I got part of the S3 aws commands (aws-cli and s3cmd client) working to communicate with the RGW HAproxy front-end to talk with the configuration I applied. I can run the command and 'list' the bucket and its contents. The issue seems to be when I attempt to do a 'put' to the actual encrypted S3 bucket. In the Ceph dashboard it is showing that the 'testbucket' bucket is encrypted, so that is at least a positive note.
- ubuntu@ansible:~$ aws s3 ls --endpoint-url
- http://192.168.1.175
- 2024-08-29 01:20:12 testbucket
- ubuntu@ansible:~$ aws s3 cp myfile.txt s3://testbucket/ --endpoint-url
- http://192.168.1.175
- upload failed: ./myfile.txt to s3://testbucket/myfile.txt argument of type 'NoneType' is not iterable
- ubuntu@ansible:~$ s3cmd ls
- 2024-08-29 02:02 s3://testbucket
- ubuntu@ansible:~$ s3cmd put myfile.txt s3://testbucket
- upload: 'myfile.txt' -> 's3://testbucket/myfile.txt' [1 of 1]
- 21 of 21 100% in 0s 433.09 B/s done
- ERROR: S3 error: 400 (InvalidRequest)
- ubuntu@ansible:~$ s3cmd info s3://testbucket
- s3://testbucket/ (bucket):
- Location: default
- Payer: BucketOwner
- Expiration Rule: none
- Policy: {
- "Version": "2012-10-17",
- "Id": "S3Policy1",
- "Statement": [
- {
- "Sid": "BucketAllow",
- "Effect": "Allow",
- "Principal": {
- "AWS": ["arn:aws:iam:::user/test"]
- },
- "Action": [
- "s3:ListBucket",
- "s3:PutObject",
- "s3:GetObject"
- ],
- "Resource": [
- "arn:aws:s3:::testbucket",
- "arn:aws:s3:::testbucket/*"
- ]
- }
- ]
- }
- CORS: none
- ACL: Test User: FULL_CONTROL
Advertisement
Add Comment
Please, Sign In to add comment