TrueCloudLab
/
policy-engine
generated from TrueCloudLab/basic
19
0
Fork 9
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

[#53] iam: Extend support s3 to native actions #53

Merged
dkirillov merged 1 commits from dkirillov/policy-engine:feature/extend_converter_s3_to_native_mapping into master 2024-02-26 14:29:04 +00:00
Conversation 0 Commits 1 Files Changed 2
dkirillov commented 2024-02-26 09:26:34 +00:00
Collaborator

Otherwise, granting s3:DeleteObject action to someone doesn't allow access though native protocol with error:
s3:

2024-02-26T11:48:33.936+0300    error   handler/util.go:46      request failed  {"status": 500, "request_id": "89900aa1-9953-4392-9498-c6386de13d88", "method": "DeleteObject", "bucket": "test", "object": "tmp", "description": "could not delete object", "error": "mark object removal via connection pool: failed to collect relatives: failed to get raw object header: head object via client s01.frostfs.devenv:8080: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound"}

frostfs-cli:

failed to get raw object header: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound

and granting explicitly s3:HeadObject didn't solve the problem (because aws doesn't have such action (I suppose we can support more granularity))

Otherwise, granting `s3:DeleteObject` action to someone doesn't allow access though native protocol with error: s3: ``` 2024-02-26T11:48:33.936+0300 error handler/util.go:46 request failed {"status": 500, "request_id": "89900aa1-9953-4392-9498-c6386de13d88", "method": "DeleteObject", "bucket": "test", "object": "tmp", "description": "could not delete object", "error": "mark object removal via connection pool: failed to collect relatives: failed to get raw object header: head object via client s01.frostfs.devenv:8080: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound"} ``` frostfs-cli: ``` failed to get raw object header: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound ``` and granting explicitly `s3:HeadObject` didn't solve the problem (because aws doesn't have such action (I suppose we can support more granularity))
dkirillov self-assigned this 2024-02-26 09:26:34 +00:00
dkirillov added 1 commit 2024-02-26 09:26:35 +00:00
DCO action / DCO (pull_request) Failing after 59s Details
Tests and linters / Tests (1.21) (pull_request) Failing after 1m36s Details
Tests and linters / Tests with -race (pull_request) Failing after 1m50s Details
Tests and linters / Tests (1.20) (pull_request) Failing after 2m51s Details
Tests and linters / Staticcheck (pull_request) Successful in 2m44s Details
Tests and linters / Lint (pull_request) Successful in 3m7s Details
33c82dcb23 [#XX] iam: Extend support s3 to native actions 
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
dkirillov force-pushed feature/extend_converter_s3_to_native_mapping from 33c82dcb23 to 5861fdf6b8 2024-02-26 09:26:57 +00:00 Compare
dkirillov changed title from [#XX] iam: Extend support s3 to native actions to [#53] iam: Extend support s3 to native actions 2024-02-26 09:26:59 +00:00
dkirillov requested review from storage-core-committers 2024-02-26 09:27:10 +00:00
dkirillov requested review from storage-core-developers 2024-02-26 09:27:11 +00:00
dkirillov requested review from storage-services-committers 2024-02-26 09:27:13 +00:00
dkirillov requested review from storage-services-developers 2024-02-26 09:27:14 +00:00
acid-ant approved these changes 2024-02-26 09:32:11 +00:00
dkirillov force-pushed feature/extend_converter_s3_to_native_mapping from 5861fdf6b8 to c960b1b088 2024-02-26 09:42:26 +00:00 Compare
alexvanin approved these changes 2024-02-26 11:15:13 +00:00
dkirillov merged commit c960b1b088 into master 2024-02-26 14:29:04 +00:00
dkirillov deleted branch feature/extend_converter_s3_to_native_mapping 2024-02-26 14:29:09 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
acid-ant
alexvanin
TrueCloudLab/storage-core-developers
TrueCloudLab/storage-services-developers
Labels
Clear labels
  
Infrastructure

Infrastructure, Automation, CI/CD or DevOps related stuff   
blocked

The issue or PR is blocked by something   
bug

Something is not working   
config

Configuration format update or breaking change   
discussion

Talking about something in order to reach a decision or to exchange ideas   
documentation

Documentation related   
duplicate

This issue or pull request already exists   
enhancement

New feature   
go

Language features adoption   
help wanted

Extra attention is needed   
internal
   
invalid

Something is wrong   
kludge

This is a kludge and we know it   
observability

Related to metrics, tracing and logs   
perfomance

Perfomance related   
question

More information is needed   
refactoring

Refactoring   
wontfix

This won't be fixed
No Label
Infrastructure
blocked
bug
config
discussion
documentation
duplicate
enhancement
go
help wanted
internal
invalid
kludge
observability
perfomance
question
refactoring
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
dkirillov
3 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: TrueCloudLab/policy-engine#53
There is no content yet.
Delete Branch "dkirillov/policy-engine:feature/extend_converter_s3_to_native_mapping"

Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?