You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
trying to use other apps like android s3 music player won't work because it tries to "list buckets" within the single bucket connection =(
context:
if I connect to the store without specifying a /bucket-name string after the subdomain.domain I get an error saying "Specify Target Bucket" at the WinSCP client (when trying to upload something)
at the same time there's no list of available buckets (even the 1 created with bucketClaim+bucketAccess combo)
so I rather connect using /bucket-name at the url (using folders settings in WinSCP) or the connection is credential-valid but not usable
finally more basic apps like the android mp3 player for s3 buckets will throw an error because it will stay in the same situation: trying to list buckets
This is the default set of allowed policy actions, which don't seem to be allowing clients to list their own buckets despite the ListAllMyBuckets permission being set:
// AllowedActions is a lenient default list of actions
varAllowedActions= []action{
DeleteObject,
DeleteObjectVersion,
GetBucketAcl,
GetBucketCORS,
GetBucketLocation,
GetBucketLogging,
GetBucketNotification,
GetBucketTagging,
GetBucketVersioning,
GetBucketWebsite,
GetObject,
GetObjectAcl,
GetObjectTorrent,
GetObjectVersion,
GetObjectVersionAcl,
GetObjectVersionTorrent,
ListAllMyBuckets,
ListBucket,
ListBucketMultiPartUploads,
ListBucketVersions,
ListMultipartUploadParts,
PutBucketTagging,
PutBucketVersioning,
PutBucketWebsite,
PutBucketVersioning,
PutLifecycleConfiguration,
PutObject,
PutObjectAcl,
PutObjectVersionAcl,
PutReplicationConfiguration,
RestoreObject,
}
It's unclear to me exactly what the issue is. This could be a permissions issue from COSI, or perhaps these clients require vhost-style access. We are working on that in Rook here: rook/rook#13022
The text was updated successfully, but these errors were encountered:
BlaineEXE
changed the title
clients should be able to list their own bucket
Some clients (WinSCP, android mp3 player) do not work correctly
Dec 7, 2023
A user has reported this:
This is the default set of allowed policy actions, which don't seem to be allowing clients to list their own buckets despite the
ListAllMyBuckets
permission being set:ceph-cosi/pkg/util/s3client/policy.go
Lines 79 to 112 in fed3305
It's unclear to me exactly what the issue is. This could be a permissions issue from COSI, or perhaps these clients require vhost-style access. We are working on that in Rook here: rook/rook#13022
The text was updated successfully, but these errors were encountered: