rich7420 opened a new pull request, #11385: URL: https://github.com/apache/ozone/pull/11385
## What changes were proposed in this pull request? Add `OzoneManagerVersion.S3_DERIVED_KEY` and gate derived-key requests on the negotiated OM version for key and multipart writes. In secure mode, S3 Gateway rejects signed chunk uploads against older OMs with `NotImplemented` before opening the key, instead of failing later with `InternalError` when the derived key is missing. A missing key from a supporting OM remains an error. UploadPart failures also update the failure metrics and audit log. ## What is the link to the Apache JIRA https://issues.apache.org/jira/browse/HDDS-16358 ## How was this patch tested? Added coverage in `TestRpcClient`, `TestEndpointBase`, `TestObjectPut`, and `TestPartUpload` for OM version gating and signed upload rejection. - [Full fork CI](https://github.com/rich7420/ozone/actions/runs/36997830086) passed. - [TestRpcClient 10×10](https://github.com/rich7420/ozone/actions/runs/37022794291) passed. - [TestEndpointBase, TestObjectPut, and TestPartUpload 10×10](https://github.com/rich7420/ozone/actions/runs/37022800247) is in progress. Generated-by: Codex (GPT-6) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
