Table of Contents |
---|
Overview
<An overview of Swarm Cloud Gateway>
Prerequisites
CentOS 7.x Setup
...
Create a user group via
groupadd clusteradmins
.Add a new user.
Code Block adduser dcadmin -g clusteradmins -p datacore passwd datacore
Update CentOS and install epel.
Code Block yum -y update yum -y install epel-release
Install NTP server and ensure that NTP starts on the system boot.
Code Block yum -y install chrony systemctl enable chronyd systemctl start chronyd
Install Java 8 JDK via
yum -y install java-1.8.0-openjdk
.Configure the firewall to allow Cloud Gateway
vi /usr/lib/firewalld/services/swarm_gateway.xml
.Code Block language xml <?xml version="1.0" encoding="utf-8"?> <service> <short>SwarmGateway</short> <description>Elasticsearch server REST API, which is based on http traffic.</description> <port protocol="tcp" port="80"/> <port protocol="tcp" port="91"/> <port protocol="tcp" port="8090"/> <port protocol="tcp" port="9100"/> </service>
Restart the firewall service.
Add Cloudgateway firewall rule (permanent)
firewall-cmd --permanent --add-service swarm_gateway
.Reload the firewall service
firewall-cmd --reload
.Unzip Swarm 14.0 bundle package to
/root/datacore
.From the downloaded Swarm bundle, get the latest gateway and UI RPMs.
Code Block ll ~/datacore/Gateway/ total 57352 -rw-r--r--. 1 root root 58718208 Dec 16 22:37 caringo-gateway-7.7.1-2.noarch.rpm -rw-r--r--. 1 root root 395 Dec 16 22:37 README.txt -rw-r--r--. 1 root root 1927 Oct 2 04:17 RPM-GPG-KEY ll ~/datacore/UI/ total 21616 -rw-r--r--. 1 root root 2835590 Oct 2 04:17 caringo-gateway-webui-7.4.0-1.noarch.rpm -rw-r--r--. 1 root root 19286001 Dec 16 22:37 caringo-storage-webui-3.4.0-1.noarch.rpm -rw-r--r--. 1 root root 359 Dec 16 22:37 README.txt -rw-r--r--. 1 root root 1927 Oct 2 04:17 RPM-GPG-KEY
Install Swarm RPM public key included with the distribution bundle using
rpm –import RPM-GPG-KEY
.Install Cloud Gateway components
yum -y install caringo-gateway-7.8.0-1.noarch.rpm
.Complete the IDSYS document for PAM user authentication
vi /etc/caringo/cloudgateway/idsys.json
.Code Block {"pam": { "name" : "idsys-pam", "description": "PAM identity management configuration", "cookieName": "token", "tokenPath": "/.TOKEN/", "tokenAdmin": "dcadmin@" }}
Complete policy document for the access control
vi /etc/caringo/cloudgateway/policy.json
.Code Block { "Id": "Root policy -- grant admins full access to everything", "Statement": [ { "Sid": "Grant admins full access", "Resource": "*", "Principal": { "user": ["dcadmin@"], "group": ["clusteradmins@"] }, "Action": [ "*" ], "Effect": "Allow" } ] }
Install Gateway WebUI
yum -y install caringo-gateway-webui-7.5.0-1.noarch.rpm
.Edit Cloudgateway configure file
/etc/caringo/cloudgateway/gateway.cfg
.Set adminDomain for the administrative domain name to be created. It is recommended to always set a unique name for each Swarm cluster to prevent replication collision between Source and Target Swarm Cluster. . Set a unique name for each Swarm cluster to prevent replication collision.
Set hosts for the storage cluster nodes (i.e., IP address of storage nodes).
Set indexerHosts to Elasticsearch Servers (i.e., IP address of Elasticsearch nodes).
Enable S3.
EnableCluster Admin on the gateway server. It will install Swarm Storage UI.
Enable Management Port 91. The admin user and password must be the same as configured in SCS.
Set admin.username
Set admin.password
Code Block # Following are only needed when enabling cluster_admin managementPort = 91 managementUser = dcadmin managementPassword = datacore
Enable metering.
...