Project

General

Profile

Actions

Bug #58473

closed

PutBucketEncryption default policy does not apply to multipart uploads

Added by adam madsen over 1 year ago. Updated about 1 year ago.

Status:
Duplicate
Priority:
Normal
Assignee:
Target version:
-
% Done:

0%

Source:
Tags:
sse
Backport:
quincy
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

When applying a default encryption policy through PutBucketEncryption, it appears to only affect simple PutObject uploads and not uploads started with CreateMultipartUpload. Glancing through rgw_rest_s3.cc suggests the default encryption policy isn't looked up at the start of multipart uploads as it is for PutObject. Applying a similar lookup to the start of RGWInitMultipart_ObjStore_S3::get_params appears to fix the issue.


Related issues 1 (1 open0 closed)

Is duplicate of rgw - Bug #59218: sse: multipart uploads aren't using default encryption policyPending BackportMarcus Watts

Actions
Actions #1

Updated by Casey Bodley over 1 year ago

  • Assignee set to Marcus Watts
  • Tags set to sse
  • Backport set to quincy
Actions #2

Updated by Casey Bodley about 1 year ago

the s3tests case test_sse_s3_default_multipart_upload seems to cover this, and has been passing consistently:

https://github.com/ceph/s3-tests/blob/c12216d/s3tests_boto3/functional/test_s3.py#L14725

Actions #3

Updated by Casey Bodley about 1 year ago

  • Status changed from New to Need More Info

@Adam DC949, can you share a reproducer for this one?

Actions #4

Updated by Casey Bodley about 1 year ago

  • Is duplicate of Bug #59218: sse: multipart uploads aren't using default encryption policy added
Actions #5

Updated by Casey Bodley about 1 year ago

  • Status changed from Need More Info to Duplicate
Actions

Also available in: Atom PDF