Project

General

Profile

Bug #53671

rgw: can't create a bucket for a user after its S3 credentials deletion/adding

Added by Stanislav Datskevych over 2 years ago. Updated about 2 years ago.

Status:
New
Priority:
Normal
Assignee:
Target version:
% Done:

0%

Source:
Community (user)
Tags:
admin api
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
rgw
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Hello Ceph team,

Ceph version 16.2.7.

When an RGW user gets its S3 credentials removed and generated again, it seems to be impossible to create buckets belonging to this user anymore.

Steps to reproduce (I performed them using Dashboard, and not the radosgw-admin):
1. Create an RGW user testtenant$testuser using dashboard.
2. Create a bucket testtenant$testbucket using dashboard.
3. Edit the testtenant$testuser user in the dashboard, and remove its S3 credentials. Save.
4. Edit the user again, and generate new S3 credentials to it. Save.
5. Create a bucket testbucket2 belonging to testtenant$testuser using dashboard. It will fail with HTTP error 403 (InvalidAccessKeyId)

The things that I've noticed:
- If a user had no buckets before the S3 credentials remove/add operation, it will not fail during the bucket creation
- The issue is seemed to be bound to the RGW daemon instance where the remove/add operation occurred. If I try creating a bucket while having an another RGW instance selected, it will not fail.

Feel free to ask for more details or to perform some tests on my setup.

History

#1 Updated by Casey Bodley about 2 years ago

  • Assignee set to Ali Maredia
  • Tags set to admin api

Also available in: Atom PDF