Skip to content

[pull] master from cube-js:master#601

Merged
pull[bot] merged 2 commits into
code:masterfrom
cube-js:master
Jul 17, 2026
Merged

[pull] master from cube-js:master#601
pull[bot] merged 2 commits into
code:masterfrom
cube-js:master

Conversation

@pull

@pull pull Bot commented Jul 17, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

bsod90 and others added 2 commits July 16, 2026 13:56
…on S3 requests (CUBESTORE_S3_SSE) (#11276)

When CUBESTORE_S3_SSE is set (AES256, aws:kms, or aws:kms:dsse), the S3
remote FS adds the x-amz-server-side-encryption header to every request
via rust-s3 extra_headers. Some AWS Organizations SCPs deny s3:PutObject
requests that lack this header, even when the bucket has default
encryption enabled — without it, all CubeStore uploads (chunks,
metastore, cachestore) fail with HTTP 403.

The header is applied both at initial bucket construction and on every
credentials-refresh bucket rebuild, so it survives credential rotation.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
…1261)

Signed-off-by: Alex Qyoun-ae <4062971+MazterQyou@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jul 17, 2026
@pull pull Bot added the ⤵️ pull label Jul 17, 2026
@pull
pull Bot merged commit 760a645 into code:master Jul 17, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants