fix(obsbucket): drop s3:GetObjectAttributes — outside the webhook lexicon #2059

Merged

pipeline-bot merged 1 commit from fix/pkg-snapshot-policy-action into trunk 2026-08-16 09:22:57 +00:00

Conversation 0 Commits 1 Files changed 1 +1 -1

sean commented 2026-08-16 09:22:08 +00:00

Owner

Copy link

vminiopolicy webhook refuses GetObjectAttributes; the 2058 statement could not apply. PutObject+GetObject suffices for the gating kernel MANIFEST copy.

vminiopolicy webhook refuses GetObjectAttributes; the 2058 statement could not apply. PutObject+GetObject suffices for the gating kernel MANIFEST copy.

sean added 1 commit 2026-08-16 09:22:08 +00:00

fix(obsbucket): drop s3:GetObjectAttributes — outside the webhook lexicon ... 1adc5bf45d

The vminiopolicy webhook validates actions against its known-s3-action
list and refuses GetObjectAttributes, so the 2058 policy could not
apply (ArgoCD SyncFailed). PutObject+GetObject is everything the
kernel manifest step needs.

pipeline-bot merged commit 1adc5bf45d into trunk 2026-08-16 09:22:57 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/pipelines!2059

No description provided.