Skip to content

Cannot upload data to GCS buckets that are using uniform bucket-level access  #935

@AnatoliyNelyubin

Description

@AnatoliyNelyubin

KAPE version
1.3.0.2

Describe the bug
I am trying to upload data to a Google Cloud Storage bucket, using aws credentials. The "aws" CLI works perfectly well, but when I try using kape for uploading data, I receive an error: "Cannot insert legacy ACL for an object when uniform bucket-level access is enabled".
The command line: --tsource C:\Users\USERNAME\Downloads --tdest C:\temp --tflush --target !BasicCollection --s3r europe-west1 --s3p spGoogleStorage --s3b storage-bucket-1 --s3k XXXXXXXXX --s3s XXXXXXXXX --zip downloads --gui

Full text of the error message:

Using Target operations
  Validating connectivity to S3: europe-west1/storage-bucket-1...
Error validating S3 information! Exiting!! Error: InvalidArgument: Invalid argument. (Details: Cannot insert legacy ACL for an object when uniform bucket-level access is enabled. Read more at https://cloud.google.com/storage/docs/uniform-bucket-level-access)

To Reproduce
Steps to reproduce the behavior:

  1. Configure GCS bucket with enforced UBLA access, generate HMAC credentials.
  2. Try uploading data to the GCS bucket

Expected behavior
KAPE should be able to upload data without any issues.

Additional context
Uniform bucket-level access is a recommended option in GCS now and some organizations are using guardrails, disabling usage of ACL and enforcing using UBLA.

I presume that you might not have a GCS bucket at hand. Please let me know and I will be happy to help you troubleshooting the issue in my environment.

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions