ONTAP S3のプル要求がエラー403 forbiddenで失敗する
環境
- ONTAP 9
- S3
- レッドハットキー
問題
- RedHat Quayツール(PodmanまたはDocker)がONTAP S3バケットからイメージをプルできず、エラー 403が表示される
"Error: parsing image configuration: fetching blob: StatusCode: 403, "<?xml version=\"1.0\" encoding=\"UTF-8\"?><Error><Code..."
- HTTPのパケットトレースにONTAP replying403 forbiddenエラーが表示される
Client_IP ONTAP_IP HTTP GET /openshift-quay/datastorage/registry/sha256/12/12b345f-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=123456789%123456789%2ar-east-1%2Fs3%2Faws4_request&X-Amz-Date=YYYYMMDDTTTTZ&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=123f1f123e1234b12345678e12dd12 HTTP/1.1
Packet Details:
Host: cluster-system-1234-S301.netapp.domain\r\n
ONTAP_IP Client_IP HTTP/XML HTTP/1.1 403 Forbidden
Packet Details:
<Error>
<Code>
SignatureDoesNotMatch
</Code>
<Message>
The request signature we calculated does not match the signature you provided. Check your key and signing method.