]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/logging: use bucket policy for logging
authorYuval Lifshitz <ylifshit@ibm.com>
Thu, 13 Mar 2025 17:34:48 +0000 (17:34 +0000)
committerYuval Lifshitz <ylifshit@ibm.com>
Thu, 27 Mar 2025 14:01:40 +0000 (14:01 +0000)
commitb633b6e5a41c0844d61c3a7cd76af3288872d523
treebbd7d45d12da3ea72a123dfe11bd57422c970124
parent7869df8cfdfe38af90fcefd4b87e37eb980b94e3
rgw/logging: use bucket policy for logging

verifying that there is policy in place to allow the source bucket
to log to the target bucket. following:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html

additional changes:
* verify that:
  * only the bucket owner can enable/disable bucket logging on the bucket
  * src and log bucket are in the same zonegroup
  * log bucket does not have "requester_pays"
  * restricted log bucket definitions don't change
* add owner's display name to the commited object
* unify bucket names in debug logs

Signed-off-by: Yuval Lifshitz <ylifshit@ibm.com>
src/rgw/driver/rados/rgw_sal_rados.cc
src/rgw/rgw_bucket_logging.cc
src/rgw/rgw_bucket_logging.h
src/rgw/rgw_rest_bucket_logging.cc