fix(obsbucket): the kernel manifest identity may write pkg/linux-snapshots #2058

Merged

pipeline-bot merged 1 commit from fix/pkg-snapshot-policy into trunk 2026-08-16 08:59:20 +00:00

Conversation 0 Commits 1 Files changed 1 +5

sean commented 2026-08-16 08:58:20 +00:00

Owner

Copy link

1d3670ee shipped the gating pkg MANIFEST copy without the policy half; linux-ship-4cfd7 (seanfarm34) failed at exactly that PUT. Adds object read/write scoped to pkg/linux-snapshots/* only, no delete (write-once preserved).

1d3670ee shipped the gating pkg MANIFEST copy without the policy half; linux-ship-4cfd7 (seanfarm34) failed at exactly that PUT. Adds object read/write scoped to pkg/linux-snapshots/* only, no delete (write-once preserved).

sean added 1 commit 2026-08-16 08:58:21 +00:00

fix(obsbucket): the kernel manifest identity may write pkg/linux-snapshots ... c9235607ad

1d3670ee made the durable pkg MANIFEST copy GATE the kernel release,
but shipped only the template half: olly-platform-policy grants s3:*
on platform-*/workflows and bucket-admin actions on pkg — no object
writes. The gating mc cp could never succeed; the first exercise
(seanfarm34, linux-ship-4cfd7) failed exactly there.

Adds PutObject/GetObject/GetObjectAttributes scoped to
pkg/linux-snapshots/* only. No DeleteObject — write-once stays a
property of the store, not just the template's collision refusal.

pipeline-bot merged commit c9235607ad into trunk 2026-08-16 08:59:20 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/pipelines!2058

No description provided.