Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions content/docs/object-storage-s3/rclone.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -144,15 +144,15 @@ Then, you will need to choose how to enter your S3 credentials. **In this case,

![s3client](/img/data-care/rclone/rclone-cmd4.png)

In the next steps, enter your **access_key_id** and **secret_access_key**, which you either received from the administrator or generated yourself with the [Gatekeeper service](https://access.du.cesnet.cz/) .
In the next steps, enter your **access_key_id** and **secret_access_key**, which you either received from the administrator or generated yourself with the [Gatekeeper service](https://gatekeeper.du.cesnet.cz/) .

![s3client](/img/data-care/rclone/rclone-cmd5.png)

Next, select the **Option region**. Leave **this field empty** and press **Enter** to continue.

![s3client](/img/data-care/rclone/rclone-cmd6.png)

Enter the **Option endpoint** corresponding to the data center for which you generated the credentials (**s3.cl2.du.cesnet.cz** as an example). Check the [Gatekeeper service](https://access.du.cesnet.cz/) if you do not rememeber the endpoint address.
Enter the **Option endpoint** corresponding to the data center for which you generated the credentials (**s3.cl2.du.cesnet.cz** as an example). Check the [Gatekeeper service](https://gatekeeper.du.cesnet.cz/) if you do not rememeber the endpoint address.

![s3client](/img/data-care/rclone/rclone-cmd7.png)

Expand Down
2 changes: 1 addition & 1 deletion content/docs/object-storage-s3/s3-features.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -494,7 +494,7 @@ Only the bucket owner can modify policies!
</Callout>

<Callout type="info" emoji="ℹ️">
The group identifier can be obtained from the Gatekeeper service: **https://access.du.cesnet.cz/**.
The group identifier can be obtained from the [Gatekeeper service](https://gatekeeper.du.cesnet.cz/).
In the following image:
A – Group/Tenant ID
B – User ID
Expand Down
6 changes: 3 additions & 3 deletions content/docs/object-storage-s3/s3-getting-access.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -41,15 +41,15 @@ When you finished your registration (or your brand new VO has been set up for yo
**Important:** It takes some time to propagate your Perun registration information to other systems. Please wait at least 30 minutes before you proceed with the following steps.
</Callout>

The storage access credentials consist of a pair of keys (long hexadecimal numbers) - an `access key` and a `secret key`; keys are generated by every user in the access control system called Gatekeeper [https://access.du.cesnet.cz](https://access.du.cesnet.cz).
The storage access credentials consist of a pair of keys (long hexadecimal numbers) - an `access key` and a `secret key`; keys are generated by every user in the access control system called Gatekeeper [https://gatekeeper.du.cesnet.cz](https://gatekeeper.du.cesnet.cz).

You can generate as many key pairs as you wish to access your storage. Is is recommended to generate and use a separate access/secret key pair for each and every specific tool you access the storage with (see below).

<Callout type="info" emoji="ℹ️">
**Recommendation:** It might be a good practice to record key pairs together with a description of where they are to be used in a password management aplication (like Keepass, 1Password, etc.). While you can always find the `access key` at the Gatekeeper, there is no way to reveal the genereated `secret key` - it is displayed only once at the time of generation. In you lose the secret key, you have to generate a new pair of keys (and delete the old one once you have reconfigured all clients that used it).
</Callout>

To **generate keys**, log in to Gatekeeper [https://access.du.cesnet.cz](https://access.du.cesnet.cz), press the `+ New key` button and enter a name for the key pair (like *My WinSCP Keys*). Wait until keys are genereated and copy and save them **both**. Also, mark down (copy and save) the S3 Storage Endpoint address displayed above the list of generated keys.
To **generate keys**, log in to [Gatekeeper](https://gatekeeper.du.cesnet.cz), press the `+ New key` button and enter a name for the key pair (like *My WinSCP Keys*). Wait until keys are genereated and copy and save them **both**. Also, mark down (copy and save) the S3 Storage Endpoint address displayed above the list of generated keys.

<Callout type="info" emoji="ℹ️">
**Note:** You will need access key, secret key, and S3 storage endpoint address to configure access to the storage in a client application.
Expand All @@ -69,6 +69,6 @@ You will need to (install and) configure a suitable [S3 client](s3-clients) to a

It is useful to distinguish following systems:
- Perun ([https://einfra.cesnet.cz/](https://einfra.cesnet.cz)) is a system managing which users have access to particular services (based on your membership in Virtual Organisations and groups)
- Gatekeeper ([https://access.du.cesnet.cz/](https://access.du.cesnet.cz)) will give you credentials to the storage based on what Perun says
- Gatekeeper ([https://gatekeeper.du.cesnet.cz/](https://gatekeeper.du.cesnet.cz), formerly [https://access.du.cesnet.cz/](https://access.du.cesnet.cz)) will give you credentials to the storage based on what Perun says
- and finally, the storage itself is accessed with those credentials by a client you prefer.