PowerScale: Configuring a Secondary Isilon Cluster as a Cloud Storage Provider for CloudPools
Summary: How to configure a Secondary PowerScale Cluster as a Cloud Storage Provider for CloudPools.
Instructions
Step-by-Step instructions for setting up an PowerScale Cluster as the cloud target for another PowerScale Cluster
This information is provided in the OneFS CloudPools Administration Guides. This article provides additional detail with examples.
The secondary cluster must be running the same (Major) version of OneFS as the primary cluster and both clusters must have active SmartPools and CloudPools licenses.
To configure a secondary PowerScale cluster as the cloud storage repository, complete all tasks below:
- On the cloud storage cluster, log in with system administrator privileges and create a new user.
Example:
TF8002-1# isi auth users create --name=clouduser --provider=lsa-local-provider:System --password=a TF8002-1# isi auth users view clouduser Name: clouduser DN: CN=clouduser,CN=Users,DC=TF0002 DNS Domain: - Domain: TF0002 Provider: lsa-local-provider:System Sam Account Name: clouduser UID: 2000 SID: S-1-5-21-3139723500-3259212500-621551500-1000 Enabled: Yes Expired: No Expiry: - Locked: No Email: - GECOS: - Generated GID: No Generated UID: No Generated UPN: Yes Primary Group ID: GID:1800 Name: Isilon Users Home Directory: /ifs/home/clouduser Max Password Age: 4W Password Expired: No Password Expiry: 2016-12-31T09:20:44 Password Last Set: 2016-09-15T12:07:16 Password Expires: No Shell: /bin/zsh UPN: clouduser@TF0002 User Can Change Password: Yes
- On the cloud storage cluster, create a Role-Based Access Control (RBAC) role with access to Console, Platform API, HTTP, License, NameSpace Traverse, and NameSpace Access privileges. Make the new user a member of this role.
isi auth roles create name=cloudrole isi auth roles modify cloudrole add-priv-ro=ISI_PRIV_LOGIN_CONSOLE,ISI_PRIV_LOGIN_PAPI,ISI_PRIV_NS_TRAVERSE,ISI_PRIV_NS_IFS_ACCESS add-priv=ISI_PRIV_HTTP,ISI_PRIV_LICENSE,ISI_PRIV_IFS_RESTORE TF8002-1# isi auth roles view cloudrole Name: cloudrole Description: - Members: clouduser Privileges ID: ISI_PRIV_LOGIN_CONSOLE Read Only: True ID: ISI_PRIV_LOGIN_PAPI Read Only: True ID: ISI_PRIV_HTTP Read Only: False ID: ISI_PRIV_LICENSE Read Only: False ID: ISI_PRIV_NS_TRAVERSE Read Only: True ID: ISI_PRIV_NS_IFS_ACCESS Read Only: True Add the user to the role: TF0002-1# isi auth roles modify cloudrole --add-user=clouduser
- On the cloud storage cluster, log in as the new user, and create the directory where cloud data should be stored. For example:
/ifs/data/cloudtarget2
# isi_run -l clouduser # mkdir /ifs/data/cloudtarget2 TF0002-1# cd /ifs/data TF0002-1# ls Isilon_Support cloudtarget2 TF0002-1# cd cloudtarget2 Note: The following is what the cloud buckets created by CloudPools look like. Do not create any buckets - Cloud Pools creates its own buckets. These are Data (d) buckets and Metadata (m) buckets TF0002-1# ls d000c297f91b833e1b356dc191af10f640268i4 d000c297f91b833e1b356dc191af10f640268i6 m000c297f91b833e1b356dc191af10f640268i5 d000c297f91b833e1b356dc191af10f640268i5 m000c297f91b833e1b356dc191af10f640268i4 m000c297f91b833e1b356dc191af10f640268i6 TF0002-1# ls -l total 76 drwx------ 2 clouduser Isilon Users 0 Sep 17 08:15 d000c297f91b833e1b356dc191af10f640268i4 drwx------ 202 clouduser Isilon Users 4400 Oct 19 15:30 d000c297f91b833e1b356dc191af10f640268i5 drwx------ 2 clouduser Isilon Users 0 Sep 29 08:19 d000c297f91b833e1b356dc191af10f640268i6 drwx------ 2 clouduser Isilon Users 0 Sep 17 08:15 m000c297f91b833e1b356dc191af10f640268i4 drwx------ 158 clouduser Isilon Users 3432 Oct 19 15:31 m000c297f91b833e1b356dc191af10f640268i5 drwx------ 2 clouduser Isilon Users 0 Sep 29 08:19 m000c297f91b833e1b356dc191af10f640268i6
- On the primary cluster, set up the Isilon cloud storage account, specifying the new user's credentials and the appropriate URI for the secondary cluster.
If the secondary cluster is within your corporate network, the URI could look similar to the following example: https://xxx.xxx.xxx.xxx:8080/namespace/ifs/data/cloudtarget2
tf80-1# isi cloud accounts create --name=cacct2 --type=isilon --uri=https://192.168.142.159:8080/namespace/ifs/data/cloudtarget2 --account-username=clouduser --key=a --skip-ssl-validation=true tf80-1# isi cloud accounts list Name Type Account Username URI State ------------------------------------------------------------------------------------------------------ cacct2 isilon clouduser https://xxx.xxx.xxx.xxx:8080/namespace/ifs/data/cloudtarget2 OK ------------------------------------------------------------------------------------------------------ Total: 4 tf80-1# isi cloud accounts view cacct2 ID: cacct2 Name: cacct2 Type: isilon Account Username: clouduser URI: https://xxx.xxx.xxx.xxx:8080/namespace/ifs/data/cloudtarget2 State: OK State Details: Enabled: Yes Bucket: d000c297f91b833e1b356dc191af10f640268i5 Account ID: 0 Telemetry Bucket: - Storage Region: - Skip Ssl Validation: Yes
5. On the primary cluster, create a CloudPools that contains the PowerScale cloud storage account.
tf80-1# isi cloud pools list Name Type State ------------------------------ cloudarch2 isilon OK ------------------------------ Total: 3 tf80-1# isi cloud pools view cloudarch2 ID: cloudarch2 Name: cloudarch2 Type: isilon State: OK State Details: Accounts: cacct2 Description: - Vendor: -
You can now set up your CloudPools Policies and run SmartPools.