aarifullin/frostfs-node
1
0
Fork 0
forked from TrueCloudLab/frostfs-node
Code Issues Pull requests Projects Releases Packages Wiki Activity

[#1574] tree: Introduce debug logging for APE check failures

Browse source 
Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
This commit is contained in:
Airat Arifullin 2025-02-24 19:49:10 +03:00
parent 521e72b995
commit 060e4b2f76
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
pkg/services/tree/signature.go
View file

@ -8,6 +8,7 @@ import (
"errors"
"fmt"
"git.frostfs.info/TrueCloudLab/frostfs-node/internal/logs"
core "git.frostfs.info/TrueCloudLab/frostfs-node/pkg/core/container"
checkercore "git.frostfs.info/TrueCloudLab/frostfs-node/pkg/services/common/ape"
"git.frostfs.info/TrueCloudLab/frostfs-sdk-go/api/refs"
@ -19,6 +20,7 @@ import (
frostfsecdsa "git.frostfs.info/TrueCloudLab/frostfs-sdk-go/crypto/ecdsa"
"git.frostfs.info/TrueCloudLab/frostfs-sdk-go/user"
"github.com/nspcc-dev/neo-go/pkg/crypto/keys"
"go.uber.org/zap"
)
type message interface {
@ -65,6 +67,17 @@ func (s *Service) verifyClient(ctx context.Context, req message, cid cidSDK.ID,
}
if err = s.checkAPE(ctx, bt, cnr, cid, op, role, pubKey); err != nil {
var chainRouterErr *checkercore.ChainRouterError
if errors.As(err, &chainRouterErr) {
s.log.Debug(ctx, logs.APECheckDeniedRequest,
zap.Stringer("status", chainRouterErr.Status()),
zap.String("operation", chainRouterErr.Request().Operation()),
zap.Any("target", chainRouterErr.Target()),
zap.Any("request_properties", chainRouterErr.Request().Properties()),
zap.Any("resource_name", chainRouterErr.Resource().Name()),
zap.Any("resource_properties", chainRouterErr.Resource().Properties()),
)
}
return apeErr(err)
}
return nil