Additional configurable properties
Learn about the advanced configuration parameters available for tuning the Ozone S3 Gateway Security Token Service (STS) endpoint. These properties allow administrators to customize network bindings and token revocation cleanup settings within ozone-site.xml to meet specific requirements.
The following properties can be adjusted in ozone-site.xml to customize the behavior of the STS endpoint on the S3 Gateway:
| Property | Default value | Description |
|---|---|---|
| ozone.s3g.sts.http.enabled | false | Feature flag for the STS endpoint. |
| ozone.s3g.sts.http-port | 9880 | HTTP port for STS. |
| ozone.s3g.sts.https-port | 9881 | HTTPS port for STS. |
| ozone.s3g.sts.http-bind-host | 0.0.0.0 | HTTP bind host. |
| ozone.s3g.sts.https-bind-host | 0.0.0.0 | HTTPS bind host |
| ozone.om.sts.token.cleanup.service.interval | 3h | Interval for cleaning revoked token entries older than 12 hours. |
| ozone.om.sts.token.cleanup.service.timeout | 15m | Timeout for a cleanup run. |
After enabling, the STS endpoint is available at one or more of the following URLs, depending
on the ozone.http.policy value (HTTP_ONLY,
HTTPS_ONLY, or HTTP_AND_HTTPS) and whether TLS is configured.
By default, the value is HTTPS_ONLY:
http://[***S3G_HOST***]:[***HTTP_PORT***]
https://[***S3G_HOST***]:[***HTTPS_PORT***]where,
- [***HTTP_PORT***] is the ozone.s3g.sts.http-port value.
- [***HTTPS_PORT***] is the ozone.s3g.sts.https-port value.
Example,
http://[***S3G_HOST***]:9880
https://[***S3G_HOST***]:9881The S3 object API remains on the existing S3G port (typically 9879).
