[
https://issues.apache.org/jira/browse/HDDS-17529?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Devesh Kumar Singh updated HDDS-17529:
--------------------------------------
Description:
Trace storage-policy sources through bucket defaults, key open/allocate/commit,
copy/rewrite, multipart upload, metadata conversion and snapshots. Add version
gates only to paths that can create incompatible persisted state or activate
new semantics before finalization.
*Reason: *Bucket validators alone do not prove all policy propagation paths are
safe. *Acceptance criteria:* Complete path inventory; each path marked
gated/not needed with reasoning; before/after finalization tests for inherited
policy and MPU; clear existing-object behavior.
was:
Trace policy from bucket metadata and S3 class resolution through key
create/open, block allocation, commit, copy/rewrite, multipart
initiation/completion, link buckets and metadata serializers. Inventory actual
mutation paths that introduce, inherit, mutate or persist new policy fields.
Add server-side gates wherever an operation changes incompatible state or
activates unsupported allocation semantics; avoid blocking ordinary policy-free
reads and writes.
*Why:* Bucket validators alone do not prove no key/MPU path can bypass
finalization. An inherited policy can change allocation without an explicit
client policy field.
*Acceptance criteria:* Documented call-path inventory; each path has an
implemented gate or justified no-gate decision; policy-free operations work
pre-finalization; explicit/inherited new behavior respects readiness; tests for
MPU, copy and key operations.
Summary: Audit inherited key policy, MPU, copy, and OM metadata
mutation paths (was: Audit policy-bearing OM key, MPU and metadata mutations)
> Audit inherited key policy, MPU, copy, and OM metadata mutation paths
> ---------------------------------------------------------------------
>
> Key: HDDS-17529
> URL: https://issues.apache.org/jira/browse/HDDS-17529
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Devesh Kumar Singh
> Priority: Major
>
> Trace storage-policy sources through bucket defaults, key
> open/allocate/commit, copy/rewrite, multipart upload, metadata conversion and
> snapshots. Add version gates only to paths that can create incompatible
> persisted state or activate new semantics before finalization.
> *Reason: *Bucket validators alone do not prove all policy propagation paths
> are safe. *Acceptance criteria:* Complete path inventory; each path marked
> gated/not needed with reasoning; before/after finalization tests for
> inherited policy and MPU; clear existing-object behavior.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
