Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

Overview

<An overview of Swarm Cloud Gateway>Image Removed

Prerequisites

...

Info

Info

Creating a user group/user/password applies when PAM authentication is used. You can create a user group via groupadd clusteradmins, and a new user via adduser dcadmin -g clusteradmins -p datacore and  & passwd datacore commands.

  1. Create a user group via groupadd clusteradmins.

  2. Add a new user.

    Code Block
    languagebash
    adduser dcadmin -g clusteradmins -p datacore 
    passwd datacore 
  3. Update CentOS and install epel.

    Code Block
    languagebash
    yum -y update
    yum -y install epel-release
  4. Install NTP server and ensure that NTP starts on the system boot.

    Code Block
    languagebash
    yum -y install chrony 
    systemctl enable chronyd 
    systemctl start chronyd 
  5. Install Java 8 JDK via yum -y install java-1.8.0-openjdk.

  6. Configure the firewall to allow Cloud Gateway vi /usr/lib/firewalld/services/swarm_gateway.xml.

    Code Block
    languagexml
    <?xml version="1.0" encoding="utf-8"?> 
    <service> 
      <short>SwarmGateway</short> 
      <description>Elasticsearch server REST API, which is based on http traffic.</description> 
      <port protocol="tcp" port="80"/> 
      <port protocol="tcp" port="91"/> 
      <port protocol="tcp" port="8090"/> 
      <port protocol="tcp" port="9100"/> 
    </service> 
  7. Restart the firewall service.

  8. Add Cloudgateway Cloud Gateway firewall rule (permanent) via firewall-cmd --permanent --add-service swarm_gateway command.

  9. Reload the firewall service firewall-cmd --reload.

  10. Unzip Swarm 14.0 bundle package to /root/datacore.

  11. From the downloaded Swarm bundle, get the latest gateway and UI RPMs.

    Code Block
    languagebash
    ll ~/datacore/Gateway/ 
    total 57352
    -rw-r--r--. 1 root root 58718208 Dec 16 22:37 caringo-gateway-7.7.1-2.noarch.rpm 
    -rw-r--r--. 1 root root      395 Dec 16 22:37 README.txt 
    -rw-r--r--. 1 root root     1927 Oct  2 04:17 RPM-GPG-KEY
    
    ll ~/datacore/UI/ 
    total 21616 
    -rw-r--r--. 1 root root  2835590 Oct  2 04:17 caringo-gateway-webui-7.4.0-1.noarch.rpm 
    -rw-r--r--. 1 root root 19286001 Dec 16 22:37 caringo-storage-webui-3.4.0-1.noarch.rpm 
    -rw-r--r--. 1 root root      359 Dec 16 22:37 README.txt 
    -rw-r--r--. 1 root root     1927 Oct  2 04:17 RPM-GPG-KEY 
  12. Install Swarm RPM public key included with the distribution bundle using rpm –import RPM-GPG-KEY.

  13. Install Cloud Gateway components yum -y install caringo-gateway-7.8.0-1.noarch.rpm.

  14. Complete the IDSYS document for PAM user authentication vi /etc/caringo/cloudgateway/idsys.json

    Code Block
    languagejson
    {"pam": { 
      "name" : "idsys-pam", 
      "description": "PAM identity management configuration", 
      "cookieName": "token", 
      "tokenPath":  "/.TOKEN/", 
      "tokenAdmin": "dcadmin@"
    }} 
  15. Complete policy document for the access control vi /etc/caringo/cloudgateway/policy.json.

    Code Block
    languagejson
    { 
      "Id": "Root policy -- grant admins full access to everything", 
    
      "Statement": [ 
        { "Sid": "Grant admins full access", 
          "Resource": "*", 
          "Principal": { 
            "user": ["dcadmin@"], 
            "group": ["clusteradmins@"] 
          }, 
          "Action": [ "*" ], 
          "Effect": "Allow" 
        } 
      ] 
    } 
  16. Install Gateway WebUI yum -y install caringo-gateway-webui-7.5.0-1.noarch.rpm.

  17. Edit Cloudgateway Cloud Gateway configure file /etc/caringo/cloudgateway/gateway.cfg.

    1. Set adminDomain for the administrative domain name to be created. It is recommended to always set a unique name for each Swarm cluster to prevent replication collision between Source and Target Swarm Cluster. Set a unique name for each Swarm cluster to prevent replication collision.

    2. Set hosts for the storage cluster nodes (i.e., IP address of storage nodes).

    3. Set indexerHosts to Elasticsearch Servers (i.e., IP address of Elasticsearch nodes).

    4. Enable S3.

    5. EnableCluster Admin on the gateway server. It will install Swarm Storage UI.

    6. Enable Management Port 91. The admin user and password must be the same as configured in SCS.

      1. Set admin.username

      2. Set admin.password

        Code Block
        languagebash
        # Following are only needed when enabling cluster_admin 
        managementPort = 91 
        managementUser = dcadmin 
        managementPassword = datacore 
    7. Enable metering.

...