Ceph

10/23/2020

04:09 AM rgw Bug #47871: radosgw does not properly handle a roleArn when executing assume-role operation

Pritha Srivastava wrote:
> Hi Chris,
>
> Are you saying that for role1, even with incorrect paths in the arn, sts...

10/15/2020

04:00 PM rgw Bug #47871 (In Progress): radosgw does not properly handle a roleArn when executing assume-role o...

Using 15.2.4 on centos8.1
1. I have a role defined with a path, such that the roleArn is arn:aws:iam:::/role/p1/...

06/22/2020

04:13 PM rgw Bug #46078: invalid principal arn in bucket policy grants access to all

Chris Durham wrote:
> Pritha Srivastava wrote:
> > I tried the following steps on both master and 15.2.2, but faile...

04:03 PM rgw Bug #46078: invalid principal arn in bucket policy grants access to all

Pritha Srivastava wrote:
> I tried the following steps on both master and 15.2.2, but failed to reproduce the error:...

06/19/2020

03:23 PM rgw Bug #46078: invalid principal arn in bucket policy grants access to all

Chris Durham wrote:
> if I have an invalid principal in a bucket policy, access is granted to all users according to...

06/18/2020

03:32 PM rgw Bug #46078 (Resolved): invalid principal arn in bucket policy grants access to all

if I have an invalid principal in a bucket policy, access is granted to all users according to the action specified.
...

06/08/2020

03:11 PM rgw Bug #45911: Cannot address buckets in different tenant

Pritha Srivastava wrote:
> Hi Chris,
>
> Bucket name validation can be supressed in boto3 using the following als...

02:52 PM rgw Bug #45912: role policies allow access to all buckets when using bucket arns with tenants

Pritha Srivastava wrote:
> The issue does reproduce on 15.2.2, and the bucket belonging to TESTER1 tester1-my-bucket...

06/05/2020

10:51 PM rgw Bug #45912 (Pending Backport): role policies allow access to all buckets when using bucket arns w...

Using 15.2.2 on CentOS 8.1
If I specify a bucket ARN with a tenant name in a role policy, then, any user who assum...

10:10 PM rgw Bug #45911 (Triaged): Cannot address buckets in different tenant

Using release 15.2.2 on CentOS 8.1
At: https://docs.ceph.com/docs/mimic/radosgw/multitenancy/
There is a sugges...