Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-23785

Update to RHOSO 18.0.15 - glance and s3 issue

XMLWordPrintable

    • 3
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • openstack-glance-26.1.1-18.0.20251217154751.c2ac316.el9osttrunk
    • rhos-storage-glance
    • None
    • Hide
      Image service correctly parses forward slashes in S3 secret keys during credential rotation::
      +
      --
      Before this update, credential rotation could produce corrupted URLs in the database when AWS secret access keys contained forward slashes (/). The URL parser misinterpreted forward slashes as path delimiters, causing S3 image downloads to fail with authentication errors. With this update, the Image service (glance) correctly parses these URLs.

      --
      Show
      Image service correctly parses forward slashes in S3 secret keys during credential rotation:: + -- Before this update, credential rotation could produce corrupted URLs in the database when AWS secret access keys contained forward slashes (/). The URL parser misinterpreted forward slashes as path delimiters, causing S3 image downloads to fail with authentication errors. With this update, the Image service (glance) correctly parses these URLs. --
    • Bug Fix
    • Done
    • Pending Verification (glance)
    • 1
    • Critical

      After the customer updated to RHOSO 18.0.15, he noticed quite critical issue - which has been already found and fixed by upstream [1].

      Glance is not expecting ‘/‘ character in SK for S3 bucket and it's trying to rewrite the image url. The customer has a ‘/‘ in their SK - so all the images from S3 stopped working and glance started to rewrite their url, corrupting the entries in database.

      This is critical for all customers who use S3 backend.

      [1]: https://bugs.launchpad.net/glance/+bug/2134325

              akekane@redhat.com Abhishek Kekane
              smsallem@redhat.com Soumaya Msallem
              Rajat Dhasmana
              rhos-storage-glance
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: