ovstorage Broker Deployment

•
20
•

Deploys and configures the ovstorage-broker daemon with listener authentication, authorization policies, TLS, and storage connections.

The ovstorage Broker Deployment skill provides operational procedures and best practices for standing up a single-tenant ovstorage-broker daemon within NVIDIA Omniverse workflows. It guides operators through configuring listener trust boundaries, enforcing builtin JWT authentication, enabling TLS for public TCP endpoints, setting up storage Layer graphs and connection routing, and managing process lifecycles via SIGHUP reloads and graceful shutdowns.

Key Features

01Configures listener authentication via anonymous trust or builtin-auth JWT validation
02Enforces TLS encryption and secure certificate paths for public TCP listeners
03Defines custom ovstorage Layer graphs, storage connections, and plugin directories
04Manages daemon process lifecycles including SIGHUP reload and graceful drainage
05Validates deny-by-default authorization policies and directory permission boundaries
0620 GitHub stars

Use Cases

01Configuring multi-backend storage layer graphs with JWT-authenticated listener endpoints
02Deploying a secure ovstorage broker daemon across production Omniverse environments
03Hardening remote OpenUSD stage access services with TLS and granular access control