projeto-importado/docs/certificado_ssl_ceph.md

Atualizar certificado CEPH

CEPH - Ubuntu

• Acesse o ceph via interface web e ir em "Services > ingres.rgw.IPM"

  • Clicar em Edit
  • Informar o certificado com a CA no campo Certificate
  • Informar a chave privada no campo Private Key

• Acesse servidores RGW via SSH e editar os arquivos abaixo, inserindo o certificado com a CA e a chave privada no arquivo.

# vim /var/lib/ceph/47982c20-e8e3-11ec-a4bc-5b54e4d1bd58/haproxy.rgw.IPM.pr01-s3-rgw01.fcmldd/haproxy/haproxy.pem
# vim /var/lib/ceph/47982c20-e8e3-11ec-a4bc-5b54e4d1bd58/haproxy.rgw.IPM.pr01-s3-rgw02.bgyrid/haproxy/haproxy.pem

• Acesse o servidor MON-01 via SSH e executar os comandos abaixo.

# cephadm shell

# ceph -s
  cluster:
    id:     47982c20-e8e3-11ec-a4bc-5b54e4d1bd58
    health: HEALTH_OK

  services:
    mon:     3 daemons, quorum pr01-s3-mon01,pr01-s3-mon02,pr01-s3-mon03 (age 5d)
    mgr:     pr01-s3-mon02.rdxgcr(active, since 2w), standbys: pr01-s3-mon03.asxocd, pr01-s3-mon01.ybckvc
    mds:     1/1 daemons up, 1 standby
    osd:     32 osds: 32 up (since 3M), 32 in (since 16M)
    rgw:     2 daemons active (2 hosts, 1 zones)
    rgw-nfs: 3 daemons active (3 hosts, 1 zones)

  data:
    volumes: 1/1 healthy
    pools:   11 pools, 385 pgs
    objects: 32.49M objects, 4.1 TiB
    usage:   8.5 TiB used, 120 TiB / 128 TiB avail
    pgs:     385 active+clean

  io:
    client:   5.1 MiB/s rd, 6.05k op/s rd, 0 op/s wr

# ceph orch restart ingress.rgw.IPM
Scheduled to restart haproxy.rgw.IPM.pr01-s3-rgw01.fcmldd on host 'pr01-s3-rgw01'
Scheduled to restart keepalived.rgw.IPM.pr01-s3-rgw01.jyicnu on host 'pr01-s3-rgw01'
Scheduled to restart haproxy.rgw.IPM.pr01-s3-rgw02.bgyrid on host 'pr01-s3-rgw02'
Scheduled to restart keepalived.rgw.IPM.pr01-s3-rgw02.uqblji on host 'pr01-s3-rgw02'

• Acesse o ceph via interface web e acompanhe o status dos serviços "ingres.rgw.IPM"

CEPH Red Hat

• Acesse o ceph via interface web e ir em "Services > ingres.rgw.default"

  • Clicar em Edit
  • Informar o certificado com a CA no campo Certificate
  • Informar a chave privada no campo Private Key

• Acesse servidores RGW via SSH e editar os arquivos abaixo, inserindo o certificado com a CA e a chave privada no arquivo.

# vim /var/lib/ceph/13b8a71a-dd2d-11ed-bdae-005056b9558d/haproxy.rgw.default.pr01-s3-rhcs-01-rgw-01-0531.sxgpxi/haproxy/haproxy.pem
# vim /var/lib/ceph/13b8a71a-dd2d-11ed-bdae-005056b9558d/haproxy.rgw.default.pr01-s3-rhcs-01-rgw-02-0531.epasvo/haproxy/haproxy.pem

• Acesse o servidor MON-01 via SSH e executar os comandos abaixo.

# cephadm shell

# ceph -s
  cluster:
    id:     13b8a71a-dd2d-11ed-bdae-005056b9558d
    health: HEALTH_OK

  services:
    mon:     3 daemons, quorum pr01-s3-rhcs-01-mon-01-0531.atende.net,pr01-s3-rhcs-01-mon-03-0531,pr01-s3-rhcs-01-mon-02-0531 (age 4M)
    mgr:     pr01-s3-rhcs-01-mon-03-0531.eeiulx(active, since 4M), standbys: pr01-s3-rhcs-01-mon-01-0531.atende.net.ppauhk, pr01-s3-rhcs-01-mon-02-0531.rporv                                                                                h
    osd:     63 osds: 63 up (since 4M), 63 in (since 6M)
    rgw:     2 daemons active (2 hosts, 1 zones)
    rgw-nfs: 3 daemons active (3 hosts, 1 zones)

  data:
    pools:   10 pools, 385 pgs
    objects: 30.11M objects, 4.7 TiB
    usage:   9.7 TiB used, 242 TiB / 252 TiB avail
    pgs:     385 active+clean

  io:
    client:   4.4 MiB/s rd, 211 op/s rd, 0 op/s wr

# ceph orch restart ingress.rgw.default
Scheduled to restart haproxy.rgw.IPM.pr01-s3-rgw01.fcmldd on host 'pr01-s3-rgw01'
Scheduled to restart keepalived.rgw.IPM.pr01-s3-rgw01.jyicnu on host 'pr01-s3-rgw01'
Scheduled to restart haproxy.rgw.IPM.pr01-s3-rgw02.bgyrid on host 'pr01-s3-rgw02'
Scheduled to restart keepalived.rgw.IPM.pr01-s3-rgw02.uqblji on host 'pr01-s3-rgw02'