diff --git a/pkg/services/object/ape/checker.go b/pkg/services/object/ape/checker.go index 1d42d21d4..d858af2fe 100644 --- a/pkg/services/object/ape/checker.go +++ b/pkg/services/object/ape/checker.go @@ -77,6 +77,11 @@ func (c *checkerImpl) CheckAPE(ctx context.Context, prm Prm) error { return fmt.Errorf("failed to create ape request: %w", err) } + if prm.Method == nativeschema.MethodPutObject && + r.Resource().Property(nativeschema.PropertyKeyObjectType) == objectV2.TypeTombstone.String() { + return nil + } + status, ruleFound, err := c.chainRouter.IsAllowed(apechain.Ingress, policyengine.NewRequestTarget(prm.Namespace, prm.Container.EncodeToString()), r) if err != nil {