Serve object-store.link: a signed link to one object, signed with the bucket's link key, for the consumer and its shares; retire the root-signed minio_presigned_url (issue 1516)

2026-10-21 14:52:14 +02:00
parent 5b3fd1008a
commit 06ca1b7fb9
11 changed files with 731 additions and 37 deletions
@@ -18,6 +18,18 @@
  "requires": [
    "route"
  ],
+  "claims": [
+    {
+      "name": "object-store",
+      "scope": "mesh",
+      "serves": [
+        "link"
+      ]
+    }
+  ],
+  "invokes": [
+    "seat:mesh-controller.seats"
+  ],
  "contributes": {
    "route": {
      "api": {
@@ -108,6 +120,13 @@
      "mode": "0600",
      "template": "files/root.env"
    },
+    {
+      "id": "object-store",
+      "type": "file",
+      "path": "${dir:state}/object-store.json",
+      "mode": "0600",
+      "template": "files/object-store.json"
+    },
    {
      "id": "data",
      "type": "directory",
@@ -179,6 +198,22 @@
          "MESH_RECEIVES": "${dir:grants}/mesh.json"
        }
      },
+      {
+        "name": "tools-go",
+        "kind": "bundle",
+        "language": "go",
+        "system": "arch",
+        "from": "cmd/object-store",
+        "binary": "object-store",
+        "loads": [
+          "object-store"
+        ],
+        "env": {
+          "OBJECT_STORE_CONFIG": "${dir:state}/object-store.json",
+          "MESH_MINIO_LINKS": "${dir:state}/links",
+          "MESH_RECEIVES": "${dir:grants}/mesh.json"
+        }
+      },
      {
        "name": "files",
        "kind": "archive",