Hey guys,
i have a use case where the user of an ONTAP S3 bucket wants to gather information about his buckets over the ONTAP Rest API.
To have more security i'd like to give him access only to the svm's api which holds the users s3 buckets.
But somehow i'm not able to access the api of an SVM mgmt lif. I can access the svm over ssh but when it try to access it via ssh it closes the connection.
Firewall-Policiy is set to default-management so that shouldn't be a problem.
#Rest API on Storage VM Management LIF
silent forge
tropic vapor
it's not possible to access rest over the svm mgmt lif. it's essentially the same restriction as seen in system manager, which is rest based.
you'll probably have to do some fancy permissions to limit access
https://kb.netapp.com/onprem/ontap/os/How_to_set_up_and_configure_RBAC_in_ONTAP_to_limit_administrator_access_to_specific_volumes_or_SVMs
modest jay
it's not possible to access rest over the svm mgmt lif. it's essentially the sam...
the documentation says that accessing the API over an SVM management LIF should work: https://docs.netapp.com/us-en/ontap-automation/get-started/access_rest_api.html
and a quick test with curl seems to suggest that you at least get a reply from http://x.x.x.x/api/v1 if you try it on an SVM management LIF
tropic vapor
hmm, you are right. still, it's not recommended, and you aren't going to know what you can and can't do until you get the not authorized.
all i had to do was switch the policy to management when i tried it just now. it's possible this is something that changed recently, what version are you testing with?