mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5.5
d18feb9dae
Follow-up to the bucket-policy deny, closing holes two reviews found: - Scope: the policy was only applied during a consumer's own deploy, so a provider-only or partial deploy left other buckets without it. Every provider deploy now converges all existing consumer buckets, and a consumer's provisioning applies it right after creating the bucket. - Ownership: our statement is identified by Sid DenyAnonymousRead; a public bucket loses only that statement, operator statements survive. - Errors: only a 404 NoSuchBucketPolicy means "no policy"; any other status fails the read loudly. - Credentials: curl expands the admin credential itself via --variable instead of --user "$VAR", which put it on curl's argv and in the host's ps. - Curl runs through the repository's curl filter with timeouts, the read-only tasks run in check mode, and bucket names are parsed exactly instead of by substring. - README: corrected embedded-mode authentication and documented the convergence. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>