ceph-cosi icon indicating copy to clipboard operation
ceph-cosi copied to clipboard

Some clients (WinSCP, android mp3 player) do not work correctly

Open BlaineEXE opened this issue 2 years ago • 1 comments

A user has reported this:

trying to use other apps like android s3 music player won't work because it tries to "list buckets" within the single bucket connection =( context: if I connect to the store without specifying a /bucket-name string after the subdomain.domain I get an error saying "Specify Target Bucket" at the WinSCP client (when trying to upload something) at the same time there's no list of available buckets (even the 1 created with bucketClaim+bucketAccess combo) so I rather connect using /bucket-name at the url (using folders settings in WinSCP) or the connection is credential-valid but not usable finally more basic apps like the android mp3 player for s3 buckets will throw an error because it will stay in the same situation: trying to list buckets

This is the default set of allowed policy actions, which don't seem to be allowing clients to list their own buckets despite the ListAllMyBuckets permission being set: https://github.com/ceph/ceph-cosi/blob/fed3305df395e4a3d65c2d34426b220ce43f2fe4/pkg/util/s3client/policy.go#L79-L112

It's unclear to me exactly what the issue is. This could be a permissions issue from COSI, or perhaps these clients require vhost-style access. We are working on that in Rook here: https://github.com/rook/rook/pull/13022

BlaineEXE avatar Dec 07 '23 15:12 BlaineEXE

Can provide more details like URL they are trying to access, RGW pod logs preferably in debug level 20?

thotz avatar Dec 08 '23 10:12 thotz