OpenKeel: the sovereign French Cloud solution of the inherent group, with a European reach Discover inherent
Components · Storage
Object storage: Rook-Ceph and its RGW gateway for the S3 and Swift APIs.
Object storage: Rook-Ceph and its RGW gateway for the S3 and Swift APIs.
No such module in the workspace: openkeel-swift
OpenKeel has no Swift service of its own: Rook-Ceph RGW serves the Swift and S3 APIs with Keystone authentication, exercised with standard clients and Skyline on a lab.
Containers and objects are created and listed through the Swift API of RGW, authenticated by Keystone.
okadm install --mode lab --create-kind --ingress --ceph-s3, then openstack container create, object create, object list.
Latest result Run in lab mode on a new kind cluster.
Source: openkeel-okadm/README.md
The S3 API accepts Keystone EC2 credentials, and buckets share one namespace with Swift containers.
openstack ec2 credentials create, then aws s3 mb, PUT and GET.
Latest result Run in lab mode on a new kind cluster.
Source: openkeel-okadm/README.md
Skyline's console lists RGW containers, uploads a file and creates a container through the Swift API.
In a browser on the lab; the file was given to the upload form by script.
Latest result Run in lab mode; production settings covered by unit tests only, never on a real cluster.
Source: openkeel-okadm/README.md
OpenKeel has no Swift service: Rook-Ceph RGW, enabled with okadm --ceph-s3, serves both the Swift and S3 APIs with Keystone authentication.
Taken over by Rook-Ceph RGW
Ceph already provides replicated object storage operated by Rook on Kubernetes; RGW speaks the Swift API.
RGW is the catalog's object-store at /swift/v1/AUTH_<project id>; Skyline's object storage page and the ok container and object commands were tested against it.
Source: openkeel-okadm/README.md
Taken over by Rook-Ceph RGW
RGW serves S3 natively, authenticated through Keystone EC2 credentials.
Containers and buckets are one namespace per project: a container made in Skyline is listed by aws s3 ls. Object storage is optional and absent without --ceph-s3.
Source: openkeel-okadm/README.md
Only what was left out by design is listed here; the work not done yet is in the Known gaps of the module's docs/CONFORMANCE.md. Every module
Service view generated by the diagram skill from the OpenKeel model.
Full screen| From | To | Protocol | What |
|---|---|---|---|
| Swift proxy | Swift storage | REST API | internal account/container/object requests (ring lookup) |
| Swift storage | CSI driver (Longhorn) | Kubernetes API | one PVC per device (block StorageClass) |
| CSI driver (Longhorn) | Swift storage | Data path | XFS devices, 1 Longhorn replica |
Branch stable-2026.2 · 8 files
Read the reverse-specBlock volumes are PVCs of a CSI StorageClass (Rook-Ceph, Longhorn, NetApp, Huawei Dorado, Pure Storage), with CSI snapshots and cinder-backup backups.
Images stored in block PVCs through CDI DataVolumes; the four interoperable import methods.
Multi-tenant NFS shares: one NFS-Ganesha gateway per share network, inside the tenant network.
Go CSI driver for Pure Storage FlashArray over iSCSI: snapshots, clones, expansion, block RWX for KubeVirt. Prototype.