NetBackup™ for OpenStack 管理指南

配置 NBOSVM 服务主体

1. 在 NetBackup 主服务器中创建非 root 用户。

   adduser <username>

2. 使用 Web UI 登录 NetBackup 主服务器。
3. 从左侧菜单中，转到“安全”> RBAC >“默认安全管理员”。
4. 在“用户”选项卡上，添加已创建的非 root 用户。
5. 转到“安全”>“访问密钥”。
6. 单击“添加”并输入非 root 用户以创建访问令牌。
7. 在 cURL 命令中添加生成的访问令牌和 NetBackupHostName，然后在 NetBackup 主服务器上运行它。

   curl --insecure --location --request POST  \
     'https://<NetBackupHostName>:1556/netbackup/security/service-principal-configs' \
     -H 'accept: application/vnd.netbackup+json;version=11.0' \
     -H 'Content-Type: application/vnd.netbackup+json;version=11.0' \
     -H 'Authorization: <Access Token>' \
     -d '{
     "data": {
       "type": "servicePrincipalConfiguration",
       "attributes": {
         "servicePrincipalId": "Service_Principal_NBOSVM",
         "servicePrincipalType": "OPENSTACK",
         "servicePrincipalApiKeyExpireAfterDays": "P365D",
         "isSecurityAdmin": true,
         "accessDefinitions": [
             
           {
             "namespace": "|SECURITY|USERS|API-KEYS|",
             "operations": [
    
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|SECURITY|SERVICE-PRINCIPAL|",
             "operations": [
    
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|ASSETS|OPENSTACK|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|VIEW|",
                "|OPERATIONS|UPDATE|",
               "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ORIGINAL|",
               "|OPERATIONS|ASSETS|OPENSTACK|RESTORE_ALTERNATE|",
               "|OPERATIONS|ASSETS|OPENSTACK|PROTECT|"
             ]
           },
           {
             "namespace": "|PROTECTION|PROTECTION_PLAN|",
             "operations": [
               "|OPERATIONS|VIEW|",
               "|OPERATIONS|PROTECTION|PROTECTION_PLAN|SUBSCRIBE|"
             ]
           },
           {
             "namespace": "|PROTECTION|POLICIES|",
             "operations": [
               "|OPERATIONS|PROTECTION|POLICIES|MANUAL-BACKUP|",
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|CREDENTIALS|",
             "operations": [
    
               "|OPERATIONS|ADD|",
               "|OPERATIONS|UPDATE|",
               "|OPERATIONS|DELETE|"
             ]
           },
           {
             "namespace": "|MANAGE|NBOSVM-SERVER|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|UPDATE|",
                "|OPERATIONS|DELETE|"
             ]
           },
           {
             "namespace": "|MANAGE|JOBS|",
             "operations": [
               "|OPERATIONS|ADD|",
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|STORAGE|STORAGE-SERVERS|",
             "operations": [
               "|OPERATIONS|VIEW|"
             ]
           },
           {
             "namespace": "|STORAGE|STORAGE-SERVERS|UNIVERSAL-SHARES|",
             "operations": [
               "|OPERATIONS|VIEW|"
             ]
           },
           {
              "namespace": "|MANAGE|IMAGES|",
              "operations": [
                "|OPERATIONS|VIEW|"
             ]
           }
         ]
       }
     }
   }'

   注意:

   记下 cURL 响应中的 servicePrincipalId 和 apiKey。它们是 NetBackup for OpenStack 配置中的必需项。