Details

    • Type: Sub-task
    • Status: Patch Available
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.2.0
    • Fix Version/s: 3.3.0
    • Component/s: fs/s3
    • Labels:
      None
    • Target Version/s:

      Description

      A seemingly recurrent problem with s3guard is "people who think S3Guard is turned on but really it isn't"

      It's not immediately obvious this is the case, and the fact S3Guard is off tends to surface after some intermittent failure has actually been detected.

      Propose: add a configuration parameter which chooses what to do when an S3A FS is instantiated without S3Guard

      • silent : today; do nothing.
      • status: give s3guard on/off status
      • inform: log FS is instantiated without s3guard
      • warn: Warn that data may be at risk in workflows
      • fail

      deployments could then choose which level of reaction they want. I'd make the default "inform" for now; any on-prem object store deployment should switch to silent, and if you really want strictness, fail is the ultimate option

        Attachments

          Activity

            People

            • Assignee:
              gabor.bota Gabor Bota
              Reporter:
              stevel@apache.org Steve Loughran
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: