Difference between revisions of "Object Storage Creation on Netapp ONETAP"
From Notes_Wiki
| (One intermediate revision by the same user not shown) | |||
| Line 3: | Line 3: | ||
| = '''Object Storage Configuration on NetApp ONTAP AFF_c30''' = | = '''Object Storage Configuration on NetApp ONTAP AFF_c30''' = | ||
| In this article, we are providing only the steps for configuring the object storage after creating the SVM.   | |||
| For SVM creation, please follow the article [[Creating SVM in NetApp Storage]]. | |||
| == '''a) Bucket Creation''' == | |||
| == ''' | |||
| #Login to the ONTAP management console using the '''admin''' credentials. | #Login to the ONTAP management console using the '''admin''' credentials. | ||
| Line 24: | Line 14: | ||
| #Once the configuration is complete, click on '''Save''' to create the bucket. | #Once the configuration is complete, click on '''Save''' to create the bucket. | ||
| == ''' | == '''b) S3 User Creation''' == | ||
| #Access the NetApp CLI via SSH. | #Access the NetApp CLI via SSH. | ||
| Line 48: | Line 38: | ||
| #Save the configuration and verify the permission list. | #Save the configuration and verify the permission list. | ||
| == ''' | == '''c) Client Setup''' == | ||
| #Verify the IP address of the SVM created in step (a), and ensure it resolves to the FQDN of the object store server via DNS or `/etc/hosts`. | #Verify the IP address of the SVM created in step (a), and ensure it resolves to the FQDN of the object store server via DNS or `/etc/hosts`. | ||
Latest revision as of 11:30, 12 September 2025
Home > Storage server > NetApp OneTap > Object Storage Creation on Netapp ONETAP
Object Storage Configuration on NetApp ONTAP AFF_c30
In this article, we are providing only the steps for configuring the object storage after creating the SVM. For SVM creation, please follow the article Creating SVM in NetApp Storage.
a) Bucket Creation
- Login to the ONTAP management console using the admin credentials.
- Navigate to Storage → Buckets, and click on +Add to create a new bucket.
- Provide a name for the bucket, select the SVM created in the previous step, and define the bucket size (minimum: 95 GB).
- To enable tiering and versioning, click on More options, and based on the IOPS, select the appropriate performance service level.
- Once the configuration is complete, click on Save to create the bucket.
b) S3 User Creation
- Access the NetApp CLI via SSH.
- Create an S3 user using the following command and safely copy the access and secret keys:
vserver object-store-server user create -vserver <SVM-NAME> -user <USER_NAME> -keep-time-to-live P1W
Example:
vserver object-store-server user create -vserver svm_s3 -user test_user -keep-time-to-live P1W
- Once the user is created, assign the required permissions to the user for accessing the bucket.
- Navigate to Storage → Buckets, select the bucket created previously, and go to the Permissions section.
- Click on Edit, then scroll down to the Permissions section.
- Click on +Add to add new permissions.
- In the new window:
- In Principal, select the S3 user created earlier.
- Set Effect to Allow.
- In Action, select the required actions for the user (e.g., read, write, delete).
 
- Leave the Resource section as default.
- (Optional) Define conditions if needed.
- Save the configuration and verify the permission list.
c) Client Setup
- Verify the IP address of the SVM created in step (a), and ensure it resolves to the FQDN of the object store server via DNS or `/etc/hosts`.
- Install the AWS CLI on the client machine.
- From the NetApp CLI, retrieve the root certificate using:
security certificate show -vserver <SVM_NAME> -type root -instance
This command will display the certificate details including signed date and expiry.
- Copy the public key certificate from the output and save it on the client machine.
- Configure the AWS CLI with the credentials of the S3 user created earlier:
aws configure
You will be prompted to enter:
AWS Access Key ID [None]: <ACCESS_KEY> AWS Secret Access Key [None]: <SECRET_KEY> Default region name [None]: <PRESS ENTER> Default output format [None]: <PRESS ENTER>
- To test the configuration, run the following command:
aws s3 ls s3://<BUCKET-NAME> --endpoint-url https://<FQDN-OF-S3-SERVER>
This confirms that the client can access the S3-compatible bucket via NetApp ONTAP.

