Mount authorized S3 blobs with bounded independent copies

sean commented

2026-09-11 04:27:20 +00:00

Owner

Promotion falls back to downloading and reuploading a blob when the dedupe cache cannot resolve it. Add an optional explicit-source S3 copy for existing repositories, preserving complete independent blobs and dedupe=false. Require source read and destination creation authority; unsupported settings and saturated work retain ordinary uploads. Bound active copies to two and share only identical authorized requests.

Support complete explicit static credentials or the production AWS environment pair without mutating the logged configuration, combining sources, or invoking metadata/default-chain providers. Preserve optional session-token handling, S3 retry behavior and immutable storage representation.

Validation: pinned Go1.25 image vet/race gate; API/storage fault and credential precedence tests; disposable RustFS multipart copy, concurrent requests, full digest reads and source deletion. Twenty matched storage-component pairs measured 703 to197ms median, without a whole-publication claim. Initial imagev2 supports explicit credentials only and remains undeployed. Corrected source991a5a1f is published by builder PR329 as imagev3. Full runtime qualification, exact external image copy and GitOps rollout are separate gates.

Promotion falls back to downloading and reuploading a blob when the dedupe cache cannot resolve it. Add an optional explicit-source S3 copy for existing repositories, preserving complete independent blobs and dedupe=false. Require source read and destination creation authority; unsupported settings and saturated work retain ordinary uploads. Bound active copies to two and share only identical authorized requests. Support complete explicit static credentials or the production AWS environment pair without mutating the logged configuration, combining sources, or invoking metadata/default-chain providers. Preserve optional session-token handling, S3 retry behavior and immutable storage representation. Validation: pinned Go1.25 image vet/race gate; API/storage fault and credential precedence tests; disposable RustFS multipart copy, concurrent requests, full digest reads and source deletion. Twenty matched storage-component pairs measured 703 to197ms median, without a whole-publication claim. Initial imagev2 supports explicit credentials only and remains undeployed. Corrected source991a5a1f is published by builder PR329 as imagev3. Full runtime qualification, exact external image copy and GitOps rollout are separate gates.

sean added 1 commit

2026-09-11 04:27:20 +00:00

Mount authorized S3 blobs with bounded independent copies 7326cef13a

sean added 1 commit

2026-09-11 04:49:51 +00:00

Support static environment credentials for independent blob mounts 991a5a1f41

sean closed this pull request

2026-09-12 22:59:05 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Rows
Columns

Mount authorized S3 blobs with bounded independent copies #2

Pull request closed