Bug 2344731

Summary:	rgw/cloud-restore: Do not send internal RGW headers to cloud-endpoint
Product:	[Red Hat Storage] Red Hat Ceph Storage	Reporter:	Soumya Koduri <skoduri>
Component:	RGW	Assignee:	Soumya Koduri <skoduri>
Status:	CLOSED ERRATA	QA Contact:	Vidushi Mishra <vimishra>
Severity:	medium	Docs Contact:	Rivka Pollack <rpollack>
Priority:	unspecified
Version:	8.0	CC:	ceph-eng-bugs, cephqe-warriors, jthottan, rpollack, tserlin
Target Milestone:	---
Target Release:	8.1
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	ceph-19.2.1-60.el9cp	Doc Type:	Bug Fix
Doc Text:	.Ceph Object Gateway internal HTTP headers are no longer sent while transitioning the object to Cloud Previously, some Ceph Object Gateway internal HTTP header values were sent to the Cloud endpoint, when transitioning the object to Cloud. As a result, some S3 cloud services did not recognize the headers and failed the transition or failed to restore the operation of the objects. With this fix, internal HTTP headers are not sent to Cloud and transitioning to Cloud works as expected.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2025-06-26 12:25:13 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2351689

Description Soumya Koduri 2025-02-10 19:23:18 UTC

Description of problem:

This is for the epic https://jsw.ibm.com/browse/ISCE-1472 

While validating cloud-restore feature with PoINT archival S3 gateway emulator, it was found that GET request fails with 403 error due to below reason -

Currently PAG does not alphabetically sort unknown query parameters before calculation the signature of the request. As a result the calculated signature differs from that the S3 client software has calculated before sending the request and this causes that the request is rejected.
<<
https://www.point.de/en/solutions/functions/cloud-and-object-storage-integration/

PAG server might fix this issue but meanwhile, since these headers are custom and internal to RGW, they are not needed and can be omitted while fetching object from external cloud-service.


Upstream tracker: https://tracker.ceph.com/issues/69238
PR :  https://github.com/ceph/ceph/pull/61090

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 6 errata-xmlrpc 2025-06-26 12:25:13 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: Red Hat Ceph Storage 8.1 security, bug fix, and enhancement updates), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2025:9775