Creating a Vault or Container in the IBM Cloud Object Store

The IBM Cloud Object Storage System supports two different modes of operations: vault mode and container mode. By default, the system operates in vault mode. In vault mode, all object I/O occurs at the vault level. Systems are limited to 1,000 vaults.

You can enable container mode when more than 1,000 vaults would be required. In container mode, containers are created inside of vaults and object I/O occurs on containers instead of vaults. This appendix describes the setup for each mode. Refer to the IBM Cloud Object Storage technical documentation for more information.

Vault Mode

Use the following steps to configure a vault.

Task 1: Create a vault in IBM Cloud Object Storage (Vault Mode)

  1. Create a vault template:
    1. Log in to IBM COS Manager and open the Configure tab.
    2. In the IBM COS Manager navigation pane, expand Storage Pools.
    3. Select the IBM COS storage pool where you want to create the vault template, and click the Storage Pool link in the General section.
    4. In the Vault Templates section, click Create Vault Template.
    5. Disable the following items by deselecting the check boxes for Name Index Enabled and also EnableSecureSlice Technology. Select the Recovery Listing Enabled option.
    6. In the Deployment section, select the access pool or pools that you want to use for the template and click Save.
  2. Set the vault template as the default for your IBM COS Manager:
    1. Click the Configure tab.
    2. In he Default Vault Template Configuration section, click Configure.
    3. Select a vault template to use as the default, and click Update to set that template as the default.
    4. Create a vault using the newly created Vault Template by going to the Configure tab and clicking Create Vault.
    5. Select the radio button next to the Vault Template created above and click Create.
    6. Enter a name and description (optional) and click Save. Vault names must be unique and DNS compliant.
    7. Record the name of the vault. It is required later when configuring the Panzura cloud filer.

Task 2: Create a user account on the IBM COS instance

Use an IBM COS account with administration authority to create a user account on the IBM COS instance in your environment. Ensure that the new user account has the Vault Provisioner role.

  1. Click the Security tab and select the new user account.
  2. Generate an access key for the new user:
    1. In the Access Key Authentication section, click Change Keys.
    2. On the Edit Access Keys page, click Generate New Access Key.
    3. Click Back.
  3. In the Access Key Authentication section, locate the Access Key ID and Secret Access Key values.
  4. Record both keys carefully as they are needed later when configuring the Panzura Filer.

Task 3: Locate the URL

  1. Click the Configure tab.
  2. In the IBM COS Manager navigation pane, expand the Devices and Accesser sections.
  3. Select the IBM COS accesser. Verify that the accesser belongs to an access pool to which the default vault template is deployed.
  4. In the Device Configuration section for the accesser, record the IP address value so you can use it when you configure storage pools. Use http:// before the IP address value to prevent certificate security errors.
  5. Record the IP address of the accesser or load balancer. It is needed later when configuring the Panzura cloud filer.

Task 4: Configure Panzura for IBM COS

Configure the CSP-IBM-COS-S3 connector.

  • Hostname. The IP address of the IBM COS Accesser or load balancer.
  • Path. An arbitrary string to denote the path into which disk drive objects are stored.
  • User name. The Access Key ID specified during IBM COS configuration.
  • Password. The Secret Access Key specified during COS configuration.
  • Bucket. The vault name specified during COS configuration.

Container Mode

Use the following steps to configure a container.

Task 1: Creating a container in IBM Cloud Object Storage (Container Mode)

    1. Follow the steps documented in the Container Mode Guide to enable Container Mode in IBM Cloud Object Storage.
    2. Create access keys.

curl "http://<accesser ip>:8337/credentials" -X POST -u admin:password -d '{"credential":{"project_id": "<storage account name>","type":"ec2"}}' -H "Content-Type: application/json"

  1. The response from this command will include the access key and secret key. Record both keys carefully as they are needed later when configuring the Panzura cloud filer. Create a container.
  2. Use the access key credentials to create a container. The example below uses s3curl, but anything similar can be used.

./s3curl.pl --id=storage_id --createBucket -- http://accesser-ip/container-name

Task 2: Locate the URL

    1. Click the Configure tab.
    2. In the IBM COS Manager navigation pane, expand the Devices and Accesser sections.
    3. Select the IBM COS accesser. Verify that the accesser belongs to an access pool to which the container vault is deployed.
    4. In the Device Configuration section for the accesser, record the IP address value so you can use it when you configure storage pools.

Use http:// before the IP address value to prevent certificate security errors.

  1. Record the IP address of the accesser or load balancer. It is needed later when configuring the Panzura cloud filer.

Task 3: Configure Panzura for IBM COS

Configure the CSP-IBM-COS-S3 connector.

  • Hostname. The IP address of the IBM COS Accesser or load balancer.
  • Path. An arbitrary string to denote the path into which disk drive objects are stored.
  • User name. The Access Key ID specified during IBM COS configuration.
  • Password. The Secret Access Key specified during COS configuration.
  • Bucket. The container name specified during COS configuration.