Seagate Lyve Cloud Object Storage Configuration

Prev Next

Introduction

Seagate Lyve Cloud Object Storage is a secure, S3-compatible public cloud object storage service designed for storing and managing large volumes of unstructured data. It provides scalable, durable, and cost-predictable cloud storage that can be integrated with applications, backup platforms, analytics workloads, and cloud-based file services such as Nasuni.

Prerequisites

  • Ensure the customer has a Seagate Lyve Cloud Account Subscription.

  • Ensure an Object Storage user account is created.

  • Generate API Keys to use with Nasuni.

    Tip:  Since the customer secret key is not shown again, ensure that a copy is downloaded using the ‘Download as CSV‘ feature.

  • Create a new S3 minimum permission policy.

    Tip:  You must create a JSON file to define the the S3 permission policy and upload this using the ‘UPLOAD PERMISSION FILE’ option.

  • Attach the newly created policy to the appropriate Nasuni user account.

Storage Tiers

Seagate Lyve Cloud Object Storage has 2 performance tiers: Standard and Infrequent Access. Nasuni only supports online tiers, Standard and Infrequent Access.

Storing production data in the Standard tier is recommended for most volumes, because it provides the optimal balance of cost and performance without affecting Edge Appliance efficiency.

Transitioning Objects using Lifecycle logic

To help control storage costs, customers can configure Seagate Lyve Object Storage to manage older or less frequently accessed data using Lifecycle logic. This can include expiring older object versions or moving data to an Infrequent Access tier where supported. Nasuni continues to operate without requiring any configuration changes, as it accesses all objects transparently through Lyve Cloud’s S3-compatible API.

Configuring Seagate Lyve S3 permission policy for Nasuni

Nasuni requires the following permissions for Seagate Lyve Cloud S3 Buckets and Objects:

  • PutObject

  • GetObject

  • DeleteObject

  • CreateBucket

  • ListBucket

  • GetBucketLocation

  • DeleteBucket

Example of the Nasuni recommended minimum S3 permission policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "NasuniBucketAndObjectAccess",
      "Effect": "Allow",
      "Action": [
        "s3:CreateBucket",
        "s3:DeleteBucket",
        "s3:ListBucket",
        "s3:GetBucketLocation",
        "s3:GetObject",
        "s3:PutObject",
        "s3:DeleteObject"
      ],
      "Resource": "arn:aws:s3:::nasuni*"
    }
  ]
}

NOTE: Amazon S3 expects separate statements (or separate resources) for bucket vs object actions. With Seagate Lyve Cloud, even though this uses an Amazon S3 Compatible API, splitting the Amazon Resource Name (ARN) would result in ‘AccessDenied’ when using with Nasuni. Nasuni recommends to follow the above format when creating minimum s3 permission policy when using Nasuni.

Configuration

Nasuni supports Seagate Lyve Cloud Object Storage using the Nasuni Connector for Amazon S3.

To configure Nasuni for Seagate Lyve Cloud Object Storage, follow these steps:

  1. Ensure that port 443 (HTTPS) is open between the Nasuni Edge Appliance and the object storage solution.

  2. Select Configuration. On NMC, select Account.

  3. Select Cloud Credentials from the menu.

  4. Click Add Amazon S3 Credentials or Add New Credentials.

    • If you select Add New Credentials, then select Amazon S3.

  5. Enter information from the Seagate Lyve Cloud Object Storage account:

    • Name: A name for this set of credentials, which is used for display purposes.

    • Access Key ID: The bucket or container user name for authentication.

    • Secret Access Key: The bucket or container user password for authentication.

    • Hostname: The target endpoint URL of the object storage solution. 

      For more information, see S3 API endpoints.

    • Verify SSL Certificates: For self-signed certificates, certificates generated with a private root CA, or a default certificate: Off. For a fully valid SSL certificate: On.

    • Filers (on NMC): The target Nasuni Edge Appliance(s).

At this point, begin adding volumes to the Nasuni Edge Appliance.

Adding volumes

To add volumes with Seagate Lyve Object Storage, follow these steps:

  1. Click Volumes, followed by Add New Volume. The Add New Volume page appears.

  2. Enter the following information for the new volume:
    Name: Enter a human-readable name for the volume.
    Cloud Provider: Select Amazon S3.
    Credentials: Select the Cloud Credentials you defined in step 5 for this volume, such as ObjectStorageCluster1.
    Region: Leave the default setting. For more information, see S3 API endpoints.
    For the remaining options, select what is appropriate for this volume.

  3. Click Save.

This creates a new volume with Seagate Lyve Object Storage.