storage aggregate object-store config modify
- PDF of this doc site
Collection of separate PDF docs
Creating your file...
Modify object store configuration attributes
Availability: This command is available to cluster administrators at the admin privilege level.
Description
The storage aggregate object-store config modify
command is used to update one or more of object store configuration parameters. This command must not be used to reassociate an existing valid object-store configuration to a new object-store or container. The modifiable parameters include object store name, server name, port, access_key, secret-password, ipspace and is-ssl-enabled.
Parameters
-object-store-name <text>
- Object Store Configuration Name-
This parameter identifies the configuration to be modified.
[-new-object-store-name <text>]
- Object Store Configuration New Name-
This optional parameter specifies the new name for the object store configuration.
[-auth-type <object_store_auth_type>]
- Authentication Used to Access the Object Store-
This optional parameter specifies where the system obtains credentials for authentication to an object store. The available choices depend on the platform (Cloud Volumes ONTAP or not) and provider-type (AWS_S3 or not). The
keys
value is always applicable, and if selected means that theaccess-key
andsecret-password
are provided by the system administrator. In Cloud Volumes ONTAP, theEC2-IAM
value is also applicable. It means that the IAM role is associated with the EC2 instance, and that theaccess-key
,secret-password
and session token are are retrieved from EC2 instance metadata for this IAM role. Note that-use-iam-role
and-auth-type
are mutually exclusive,-auth-type EC2-IAM
is an equivalent of-use-iam-role true
, and-auth-type key
is an equivalent of-use-iam-role false
. For theAWS_S3
provider, theCAP
(C2S Authentication Portal) value is also applicable. This should only be used when accessing C2S (Commercial Cloud Services). If theCAP
value is specified, then the`-cap-url` must be specified. Seecap-url
. [-cap-url <text>]
- URL to Request Temporary Credentials for C2S Account-
This parameter is available only when
-auth-type
isCAP
. It specifies a full URL of the request to a CAP server for retrieving temporary credentials (access-key, secret-pasword and session token) for accessing the object store server. The CAP URL may look like:https://123.45.67.89:1234/CAP/api/v1/credentials?agency=myagency=mymission=myrole
[-server <Remote InetAddress>]
- Fully Qualified Domain Name of the Object Store Server-
This optional parameter specifies the new Fully Qualified Domain Name (FQDN) of the same object store server. For Amazon S3, server name must be an AWS regional endpoint in the format s3.amazonaws.com or s3-<region>.amazonaws.com, for example, s3-us-west-2.amazonaws.com. The region of the server and the bucket must match. For more information on AWS regions, refer to 'Amazon documentation on AWS regions and endpoints'. For Azure, if the
-server
is a "blob.core.windows.net" or a "blob.core.usgovcloudapi.net", then a value of-azure-account
followed by a period will be added in front of the server. [-is-ssl-enabled {true|false}]
- Is SSL/TLS Enabled-
This optional parameter indicates whether a secured SSL/TLS connection will be used during data access to the object store.
[-port <integer>]
- Port Number of the Object Store-
This optional parameter specifies a new port number to connect to the object store server indicated in the
-server
parameter. [-access-key <text>]
- Access Key ID for S3 Compatible Provider Types-
This optional parameter specifies a new access key (access key ID) for the AWS S3, SGWS and IBM COS object stores.
[-secret-password <text>]
- Secret Access Key for S3 Compatible Provider Types-
This optional parameter specifies a new password (secret access key) for the AWS S3, SGWS and IBM COS object stores. For an Azure object store see
-azure-private-key
. If the-access-key
is specified but the-secret-password
is not then one will be asked to enter the-secret-password
without echoing the input. [-ask-azure-private-key {true|false}]
- Ask to Enter the Azure Access Key without Echoing-
If this optional parameter is true then one will be asked to enter the
-azure-private-key
without echoing the input. [-azure-private-key <text>]
- Azure Access Key-
This optional parameter specifies a new access key for Azure object store. For other object store providers see
secret-password
. See alsoask-azure-private-key
. [-ipspace <IPspace>]
- IPspace to Use in Order to Reach the Object Store-
This optional parameter specifies new ipspace values for the configuration.
[-use-iam-role {true|false}]
- (DEPRECATED)-Use IAM Role for AWS Cloud Volumes ONTAP-
This optional parameter is depricated. Please use
-auth-type
instead. Note, that-auth-type EC2-IAM
is an equivalent of-use-iam-role true
, and-auth-type key
is an equivalent of-use-iam-role false
. [-is-certificate-validation-enabled {true|false}]
- Is SSL/TLS Certificate Validation Enabled-
This optional parameter indicates whether an SSL/TLS certificate of an object store server is validated whenever an SSL/TLS connection to an object store server is established. This parameter is only applicable when
is-ssl-enabled
istrue
. It is recommended to keep the default value which istrue
to make sure that Data ONTAP connects to a trusted object store server, otherwise identities of an object store server are not verified.
Examples
The following example modifies two parameters (port number and is-ssl-enabled) of an object store configuration named my-store:
cluster1::>storage aggregate object-store config modify -object-store-name my-store -port 1235 -is-ssl-enabled true