github-actions[bot] commented on issue #14167: URL: https://github.com/apache/cloudstack/issues/14167#issuecomment-5681227561
## ๐ฏ Triage report This is a well-researched design proposal for per-bucket object storage credentials (Ceph RGW), replacing the current per-account shared credential model. It proposes RGW accounts, a two-slot key rotation scheme, and an explicit per-account/per-store migration path. The author states a PR is forthcoming. ### ๐ Assessment | Dimension | Value | Reasoning | |---|---|---| | **Type** | `type:new-feature` | Adds new capability (per-bucket credentials, rotation, migration) rather than fixing a defect. | | **Component** | `component:secondary-storage`, `component:ceph` | Object storage/bucket credentials are part of secondary/object storage; the proposal is Ceph RGW specific. | | **Severity** | n/a | Not a bug. | | **Labels** | type:new-feature, component:secondary-storage, component:ceph | See above. | | **Coding agent** | Not suitable | Requires architectural/design decisions (RGW accounts model, migration semantics, API/schema design) and community discussion (already raised on dev@) before implementation; not a self-contained, well-defined coding task yet. | ### ๐ Similar issues No similar or duplicate open issues found via search. <details><summary>๐ก Notes and suggestions</summary> - The author has already opened a `[DISCUSS]` thread on dev@; maintainers should confirm the design lands there before a PR is merged, since it introduces a new minimum Ceph version dependency (Squid/v19+) and backend-permanent migration semantics. - Key design decisions worth maintainer review: RGW-account-per-CloudStack-account mapping, the two-key-slot rotation model, and how bucket policies are generated/maintained for public vs private buckets. - Consider whether the migration path (per account, per store, irreversible at the backend) needs additional safeguards or dry-run/preview support before implementation. - Once a PR is submitted, request review from maintainers familiar with the object storage plugin framework (`org.apache.cloudstack.storage.object`). </details> > Generated by [Daily Issue Triage](https://github.com/apache/cloudstack/actions/runs/34975614423) ยท sonnet50 86.7K ยท [โท](https://github.com/search?q=repo%3Aapache%2Fcloudstack+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-issue-triage%22&type=issues) > <details> <summary>Add this agentic workflows to your repo</summary> To install this agentic workflow, run ``` gh aw add githubnext/agentics/workflows/daily-issue-triage.md@d7c1dc4b72b00607a67caaffdcc216cb64379cf9 ``` </details> <!-- gh-aw-agentic-workflow: Daily Issue Triage, engine: copilot, version: 1.0.52, model: claude-sonnet-5, id: 34975614423, workflow_id: daily-issue-triage, run: https://github.com/apache/cloudstack/actions/runs/34975614423 --> <!-- gh-aw-workflow-call-id: apache/cloudstack/daily-issue-triage --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
