[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2341: incorrect S3 bucket permissions can lead to hard-to-diagnose failures

[Tahoe-LAFS]

#2341: incorrect S3 bucket permissions can lead to hard-to-diagnose failures
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:
  cloud_trouble          |     Status:  new
         Type:  defect   |  Milestone:  undecided
     Priority:  minor    |    Version:  1.10.0
    Component:  code-    |   Keywords:  permissions LeastAuthority.com
  storage                |  error cloud
   Resolution:           |
Launchpad Bug:           |
-------------------------+-------------------------------------------------

Comment (by cloud_trouble):

 tahoe get URI returns the following error:

 Error during GET: 410 Gone
 NoSharesError: no shares could be found. Zero shares usually indicates a
 corrupt URI, or that no servers were connected, but it might also indicate
 severe corruption. You should perform a filecheck on this object to learn
 more.

 The storage node has an incident report with failures like this:

 INFREQUENT try 1 failed: GET object
 ('shares/vs/vsucnfjdwfgcsd2xn66b37odjy/0',) {} <class
 'txaws.s3.exception.S3Error'> ('403', '403 Forbidden', '<?xml
 version="1.0"
 encoding="UTF-8"?>\n<Error><Code>AccessDenied</Code><Message>Access
 Denied</Message><RequestId>CB12300BA22D757E</RequestId><HostId>2Xd03pkhv080a3lVXCMSh+EevVAhGrVbjwYOU8EGydzTDNYhkIFwQCzNkYTVFCKp</HostId></Error>')
 21:26:12.728 [4110]: Giving up, no retry for ("try 1 failed: GET object
 ('shares/vs/vsucnfjdwfgcsd2xn66b37odjy/0',) {}", '403', '403 Forbidden',
 '<?xml version="1.0"
 encoding="UTF-8"?>\n<Error><Code>AccessDenied</Code><Message>Access
 Denied</Message><RequestId>CB12300BA22D757E</RequestId><HostId>2Xd03pkhv080a3lVXCMSh+EevVAhGrVbjwYOU8EGydzTDNYhkIFwQCzNkYTVFCKp</HostId></Error>')
 21:26:12.729 [4111]: WEIRD share SI=vsucnfjdwfgcsd2xn66b37odjy shnum=0
 unexpectedly disappeared [INCIDENT-TRIGGER]

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2341#comment:3>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage