Backport #22259
closed
- Tracker changed from Tasks to Backport
- Project changed from Stable releases to rgw
- Status changed from New to Fix Under Review
- Assignee set to Marcus Watts
This is a jewel-only bugfix.
- Description updated (diff)
description¶
In ceph jewel, it is possible to store swift read acls of the form ".r:*", but these do not have the expected effect of allowing "anonymous" access to the bucket contents. In more recent versions of ceph (luminous/master), this works fine. This problem manifests when using keystone and rgw_swift_account_in_url. From the logs, it appears that the tenant from the URL is being ignored.
luminous/master have very different code for this functionality, so this isn't a simple backport. However, the fix appears to be easy: just a few lines in rgw_rest_swift.cc to set the tenant seems to suffice.
- Subject changed from rgw: swift anonymous access doesn't work in jewel to jewel: rgw: swift anonymous access doesn't work in jewel
- Status changed from Fix Under Review to In Progress
- Status changed from In Progress to Resolved
- Target version set to v10.2.11
Also available in: Atom
PDF