-
Notifications
You must be signed in to change notification settings - Fork 271
Open
Description
I am having an issue when doing a multipart copy to an Azure backend with the azureblob-sdk. If I copy the files with e.g. the Minio CLI it works for small files, but if I do a larger file (and thus use multipart) I get the following exception
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>
Error 500 com.azure.storage.blob.models.BlobStorageException: If you are using a StorageSharedKeyCredential,
and the server returned an error message that says 'Signature did not match', you can compare the
string to sign with the one generated by the SDK. To log the string to sign, pass in the context key value pair
'Azure-Storage-Log-String-To-Sign': true to the appropriate method call.
If you are using a SAS token, and the server returned an error message that says 'Signature did not
match', you can compare the string to sign with the one generated by the SDK. To log the string to sign,
pass in the context key value pair 'Azure-Storage-Log-String-To-Sign': true to the appropriate
generateSas method call.
Please remember to disable 'Azure-Storage-Log-String-To-Sign' before going to production as this
string can potentially contain PII.
Status code 403, "?<?x...I do not know what is going wrong, but it seems to be tied to multipart. If I disable multiplart for the large file, it works again.
mcli cp --disable-multipart random.bin s3proxy/bucket
I have given the managed identity the Storage Blob Data Contributor RBAC role. Is that not enough?
I am using v3.0.0 of s3proxy, but I have also tried the master tag for the docker image.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels