docker registry接入ceph Swift API

博文源地址：http://bingdian.blog.51cto.com/94171/1893658/

1.下载 Docker 的
ceph镜像 并启动

docker pull docker.io/ceph/demo  

docker run -d –net=host -e MON_IP=10.70.74.144 -e CEPH_NETWORK=10.70.74.0/24 ceph/demo

2.创建用户

(ceph-rgw)[root@ceph-node01 /]# radosgw-admin user create --uid=registry --display-name="registry"   

{  

"user_id": "registry",  

"display_name": "registry",  

"email": "",  

"suspended": 0,  

"max_buckets": 1000,  

"auid": 0,  

"subusers": [],  

"keys": [  

{  

"user": "registry",  

"access_key": "3JHGH0WDQO5LG2HTF6UX",  

"secret_key": "jt8KzI8XUagl2KTX0XkdFTP39mkcD9774ql4ZbDp"  

}  

],  

"swift_keys": [],  

"caps": [],  

"op_mask": "read, write, delete",  

"default_placement": "",  

"placement_tags": [],  

"bucket_quota": {  

"enabled": false,  

"max_size_kb": -1,  

"max_objects": -1  

},  

"user_quota": {  

"enabled": false,  

"max_size_kb": -1,  

"max_objects": -1  

},  

"temp_url_keys": []  

}  

3.创建Swift用户

(ceph-rgw)[root@ceph-node01 /]# radosgw-admin subuser create --uid=registry --subuser=registry:swift --access=full   

{  

"user_id": "registry",  

"display_name": "registry",  

"email": "",  

"suspended": 0,  

"max_buckets": 1000,  

"auid": 0,  

"subusers": [  

{  

"id": "registry:swift",  

"permissions": "full-control"  

}  

],  

"keys": [  

{  

"user": "registry",  

"access_key": "3JHGH0WDQO5LG2HTF6UX",  

"secret_key": "jt8KzI8XUagl2KTX0XkdFTP39mkcD9774ql4ZbDp"  

}  

],  

"swift_keys": [  

{  

"user": "registry:swift",  

"secret_key": "dfRwo00KoOTw3IJJJCrRpFqIinaEFSEvxCuBxXa5"  

}  

],  

"caps": [],  

"op_mask": "read, write, delete",  

"default_placement": "",  

"placement_tags": [],  

"bucket_quota": {  

"enabled": false,  

"max_size_kb": -1,  

"max_objects": -1  

},  

"user_quota": {  

"enabled": false,  

"max_size_kb": -1,  

"max_objects": -1  

},  

"temp_url_keys": []  

}  

4.配置registry访问

storage:
swift:
authurl: http://192.168.48.213:6780/auth/v1 username: registry:swift
password: dfRwo00KoOTw3IJJJCrRpFqIinaEFSEvxCuBxXa5
container: registry
cache:
layerinfo: inmemory
maintenance:
uploadpurging:
enabled: false
delete:
enable: true
health:
storagedriver:
enabled: true
interval: 10s
threshold: 3