Back to bug 2153775

Who When What Removed Added
Red Hat One Jira (issues.redhat.com) 2022-12-15 13:04:59 UTC Link ID Red Hat Issue Tracker RHCEPH-5801
Veera Raghava Reddy 2022-12-18 05:25:24 UTC Status NEW MODIFIED
Target Release 6.1 6.0
Fixed In Version ceph-17.2.5-32.el9cp
Flags needinfo?(mkasturi)
Flags needinfo?(vereddy)
CC vereddy
Flags needinfo?(mkasturi) needinfo?(vereddy)
errata-xmlrpc 2022-12-19 06:06:21 UTC Status MODIFIED ON_QA
Eliska 2022-12-19 12:39:13 UTC CC ekristov
Flags needinfo?(mbenjamin)
Madhavi Kasturi 2022-12-22 12:07:39 UTC QA Contact mkasturi vimishra
Eliska 2022-12-23 08:36:07 UTC CC akraj, rmandyam
Flags needinfo?(mbenjamin)
Vidushi Mishra 2022-12-28 12:55:58 UTC Status ON_QA ASSIGNED
Red Hat Bugzilla 2022-12-31 19:13:34 UTC Flags needinfo?(vimishra)
CC vimishra
CC amathuri
Red Hat Bugzilla 2022-12-31 19:21:46 UTC CC anrao
Red Hat Bugzilla 2022-12-31 20:00:07 UTC CC sseshasa
Red Hat Bugzilla 2022-12-31 22:43:37 UTC CC rfriedma
Red Hat Bugzilla 2022-12-31 23:43:41 UTC CC rzarzyns
Red Hat Bugzilla 2022-12-31 23:46:00 UTC CC akupczyk
Red Hat Bugzilla 2023-01-01 05:30:04 UTC CC mwatts
Red Hat Bugzilla 2023-01-01 05:35:29 UTC CC ksirivad
Red Hat Bugzilla 2023-01-01 05:39:25 UTC CC aemerson
Red Hat Bugzilla 2023-01-01 05:39:57 UTC CC tserlin
Red Hat Bugzilla 2023-01-01 05:42:48 UTC CC cbodley
Red Hat Bugzilla 2023-01-01 06:27:16 UTC CC lflores
Red Hat Bugzilla 2023-01-01 06:29:09 UTC CC choffman
Red Hat Bugzilla 2023-01-01 07:25:35 UTC CC sbaldwin
Red Hat Bugzilla 2023-01-01 08:23:59 UTC CC kbader
Red Hat Bugzilla 2023-01-01 08:31:32 UTC CC kkeithle
Red Hat Bugzilla 2023-01-01 08:35:17 UTC CC mbenjamin
Assignee mbenjamin nobody
Red Hat Bugzilla 2023-01-01 08:36:49 UTC CC mkasturi
Red Hat Bugzilla 2023-01-01 08:39:02 UTC CC nojha
Red Hat Bugzilla 2023-01-01 08:39:50 UTC CC pdhange
Red Hat Bugzilla 2023-01-01 08:49:14 UTC CC vereddy
Red Hat Bugzilla 2023-01-01 08:50:18 UTC CC vumrao
Alasdair Kergon 2023-01-04 04:39:56 UTC CC aemerson
Alasdair Kergon 2023-01-04 04:40:45 UTC CC akupczyk
Alasdair Kergon 2023-01-04 04:43:34 UTC CC amathuri
Alasdair Kergon 2023-01-04 04:44:13 UTC Assignee nobody mbenjamin
Alasdair Kergon 2023-01-04 04:46:10 UTC CC anrao
Alasdair Kergon 2023-01-04 05:01:28 UTC CC kbader
Alasdair Kergon 2023-01-04 05:08:58 UTC CC ksirivad
Alasdair Kergon 2023-01-04 05:10:58 UTC CC lflores
Alasdair Kergon 2023-01-04 05:15:42 UTC CC mkasturi
Alasdair Kergon 2023-01-04 05:18:31 UTC CC mwatts
Alasdair Kergon 2023-01-04 05:21:38 UTC CC nojha
Alasdair Kergon 2023-01-04 05:28:18 UTC CC pdhange
Alasdair Kergon 2023-01-04 05:34:52 UTC CC rfriedma
Alasdair Kergon 2023-01-04 05:37:37 UTC CC rzarzyns
Alasdair Kergon 2023-01-04 05:40:41 UTC CC sbaldwin
Alasdair Kergon 2023-01-04 05:59:30 UTC CC vumrao
Alasdair Kergon 2023-01-04 06:13:47 UTC CC choffman
Alasdair Kergon 2023-01-04 06:19:28 UTC CC mbenjamin
Alasdair Kergon 2023-01-04 06:29:04 UTC CC vereddy
Alasdair Kergon 2023-01-04 06:39:31 UTC CC cbodley
Alasdair Kergon 2023-01-04 06:49:10 UTC CC kkeithle
Alasdair Kergon 2023-01-04 06:56:31 UTC CC sseshasa
Vidushi Mishra 2023-01-04 12:00:45 UTC Flags needinfo?(vimishra)
Adam C. Emerson 2023-01-04 19:20:02 UTC Assignee mbenjamin aemerson
Status ASSIGNED MODIFIED
Eliska 2023-01-09 08:30:30 UTC CC tserlin
Fixed In Version ceph-17.2.5-32.el9cp ceph-17.2.5-49.el9cp
Status MODIFIED ON_QA
Flags needinfo?(mbenjamin) needinfo?(mbenjamin) needinfo?(aemerson)
Red Hat Bugzilla 2023-01-09 08:31:18 UTC CC ceph-eng-bugs
Alasdair Kergon 2023-01-09 19:43:36 UTC CC ceph-eng-bugs
Adam C. Emerson 2023-01-09 22:08:03 UTC Doc Type If docs needed, set a value Enhancement
Doc Text Feature: RGW S3 policy now prints verbose and useful errors in the errordoc on error. There is also an rgw-policy-check that lets policy documents be tested at the command line.

There is also an option 'rgw policy reject invalid principals' that is false by default in this version that will reject (with error message) invalid principals (on ingest only) rather than ignoring them without error

Reason: RGW policy errors were opaque and not very useful. Also this initial bug seems to have been the result of an accepted (but invalid) principal being ignored silently on ingest but rejected on use later on due to a code change.

Result: Policy errors are now much more useful and invalid principals can be rejected on ingest.
Eliska 2023-01-12 08:44:17 UTC Flags needinfo?(aemerson)
Docs Contact ekristov
Doc Text Feature: RGW S3 policy now prints verbose and useful errors in the errordoc on error. There is also an rgw-policy-check that lets policy documents be tested at the command line.

There is also an option 'rgw policy reject invalid principals' that is false by default in this version that will reject (with error message) invalid principals (on ingest only) rather than ignoring them without error

Reason: RGW policy errors were opaque and not very useful. Also this initial bug seems to have been the result of an accepted (but invalid) principal being ignored silently on ingest but rejected on use later on due to a code change.

Result: Policy errors are now much more useful and invalid principals can be rejected on ingest.
.The Ceph Object Gateway S3 policy errors are now more useful

Previously, Ceph Object Gateway S3 policy error messages were opaque and not very useful.
The initial issue with not being able to access data in the buckets after upgrading versions seemed to be the result of an accepted but invalid principal being ignored silently on ingest but rejected on use later due to a code change.

With this release, the policy now prints detailed and useful error messages.
There is also a new `rgw-policy-check` command that lets policy documents be tested in the command line, and a new option `rgw policy reject invalid principals` that is `false` by default and that rejects, with an error message, invalid principals on ingest only rather than ignoring them without error.
Eliska 2023-01-12 08:48:05 UTC Blocks 2126050
Adam C. Emerson 2023-01-12 18:43:23 UTC Flags needinfo?(aemerson) needinfo?(aemerson)
Vidushi Mishra 2023-01-16 05:21:38 UTC Status ON_QA VERIFIED
Adam C. Emerson 2023-01-18 20:51:29 UTC Depends On 2162135
errata-xmlrpc 2023-03-20 18:59:40 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2023-03-20 18:59:40 UTC
errata-xmlrpc 2023-03-20 19:00:50 UTC Link ID Red Hat Product Errata RHBA-2023:1360

Back to bug 2153775