Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-26626

S3 bucket get emptied by the platform

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Duplicate
    • Affects Version/s: 10.10-SNAPSHOT
    • Fix Version/s: 10.10
    • Component/s: S3

      Description

      The nuxeo application deletes blob in S3. After some time (~10min) objects get deleted even if it is not orphan binaries. I activated the trail and can see the delete commands coming from the EC2 instance.

      S3 direct upload is not activated.

      Below is an example of a delete command sent by the nuxeo application:

      {
       "Records": [{
       "eventVersion": "1.05",
       "userIdentity": {
       "type": "AssumedRole",
       "principalId": "AROAJW5CKKL2GWPJDGDVA:i-0313772b212e1f0b2",
       "arn": "arn:aws:sts::311032021612:assumed-role/hakuhodo-dam-demo-InstanceRole-16KTFKQ5ZOQ4J/i-0313772b212e1f0b2",
       "accountId": "311032021612",
       "accessKeyId": "ASIAUQ2XUAJWE3YMIOPU",
       "sessionContext": {
       "sessionIssuer": {
       "type": "Role",
       "principalId": "AROAJW5CKKL2GWPJDGDVA",
       "arn": "arn:aws:iam::311032021612:role/hakuhodo-dam-demo-InstanceRole-16KTFKQ5ZOQ4J",
       "accountId": "311032021612",
       "userName": "hakuhodo-dam-demo-InstanceRole-16KTFKQ5ZOQ4J"
       },
       "attributes": {
       "creationDate": "2019-01-09T22:59:02Z",
       "mfaAuthenticated": "false"
       }
       }
       },
       "eventTime": "2019-01-10T00:15:00Z",
       "eventSource": "s3.amazonaws.com",
       "eventName": "DeleteObject",
       "awsRegion": "ap-northeast-1",
       "sourceIPAddress": "18.182.15.166",
       "userAgent": "[aws-sdk-java/1.11.475 Linux/4.4.0-1020-aws OpenJDK_64-Bit_Server_VM/25.191-b12 java/1.8.0_191 groovy/2.4.12]",
       "requestParameters": {
       "bucketName": "hakuhodo-dam-demo-bucket",
       "key": "1b5d7047718b8bc8dfba1732617df59d"
       },
       "responseElements": {
       "x-amz-delete-marker": "true",
       "x-amz-version-id": "HHvqbekJwSYWEDSpxmOKtpzNJ07aNmJt"
       },
       "additionalEventData": {
       "x-amz-id-2": "/2rrH9B3lpIjNx4UOv1IHMa8TrDUpIPE+FYduV2YNsLaWZe72SMqV6q4zxZ8FQsdY4Aqrqt/VJQ="
       },
       "requestID": "C09A4F6E76ADCCA7",
       "eventID": "78f0b26c-d78c-47b9-a8b4-06e10488974a",
       "readOnly": false,
       "resources": [{
       "type": "AWS::S3::Object",
       "ARN": "arn:aws:s3:::hakuhodo-dam-demo-bucket/1b5d7047718b8bc8dfba1732617df59d"
       }, {
       "accountId": "311032021612",
       "type": "AWS::S3::Bucket",
       "ARN": "arn:aws:s3:::hakuhodo-dam-demo-bucket"
       }],
       "eventType": "AwsApiCall",
       "recipientAccountId": "311032021612"
       }
      

      S3 config in nuxeo.conf

      in the config only these variables are set:
      nuxeo.s3storage.bucket=hakuhodo-dam-demo-bucket
      nuxeo.s3storage.directdownload=true
      nuxeo.s3storage.directdownload.expire=3600
      nuxeo.s3storage.region=ap-northeast-1
      

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 hour
                  1h