Eliah RusinandClaude Opus 5.5 164c3db606 s3: return 403, not 500, when an over-quota bucket refuses a write (#11552) ...

* s3: return 403, not 500, when an over-quota bucket refuses a write

Filer AssignVolume flattened ErrReadOnly into the free-text
AssignVolumeResponse.Error string, so S3 PutObject / PutObjectPart via
UploadReaderInChunks could not match it with errors.Is and fell through
to 500 InternalError: retryable, and it hides the quota.

Add FilerError READ_ONLY and AssignVolumeResponse.error_code, set it
alongside the unchanged error text, and rebuild the sentinel with
filer_pb.AssignVolumeResponseError. weed_server.ErrReadOnly now aliases
filer_pb.ErrReadOnly so errors.Is matches on both sides, and
mapChunkedUploadErrorToS3Error maps it to ErrAccessDenied. There is no
"read only" substring matching, so a volume server's "volume N is read
only" stays retryable.

Carrying the verdict as a response code rather than a gRPC status keeps
clients from treating it as a transport failure: the S3 gateway does not
fail over across filers and the Java client does not retry it.

Wrap per-chunk copy errors with %w so CopyObject keeps the sentinel, and
map UploadPartCopy chunk errors through mapCopyErrorToS3Error instead of
always returning 500.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* ci: re-run integration tests (PyPI download timeout)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-01 22:21:03 +08:00

..

filer_client_bfs_test.go

filer_pb: walk the whole tree when the BFS start path ends in a slash (#11099)

2026-09-02 11:45:22 -07:00

filer_client_bfs.go

filer_pb: walk the whole tree when the BFS start path ends in a slash (#11099)

2026-09-02 11:45:22 -07:00

filer_client_snapshot_test.go

mount: make metadata cache rebuilds snapshot-consistent (#8531)

2026-03-07 09:19:40 -08:00

filer_client.go

s3: commit multipart upload and remove .uploads atomically; purge completed uploads metadata-only (#11375)

2026-09-17 21:09:21 -07:00

filer_grpc.pb.go

filer.remote.sync: stamp entries with IF_CHUNKS_EQUAL so a stale write-back cannot delete live chunks (#11435)

2026-09-25 09:02:34 +08:00

filer_pb_event_scan_bench_test.go

Cut per-subscriber replay decode and widen replay concurrency (#9917)

2026-06-10 13:08:34 -07:00

filer_pb_event_scan_test.go

Cut per-subscriber replay decode and widen replay concurrency (#9917)

2026-06-10 13:08:34 -07:00

filer_pb_event_scan.go

Cut per-subscriber replay decode and widen replay concurrency (#9917)

2026-06-10 13:08:34 -07:00

filer_pb_helper_test.go

s3: return 403, not 500, when an over-quota bucket refuses a write (#11552)

2026-10-01 22:21:03 +08:00

filer_pb_helper.go

s3: return 403, not 500, when an over-quota bucket refuses a write (#11552)

2026-10-01 22:21:03 +08:00

filer_vtproto_test.go

mount: version open file handles by filer log position (#10403)

2026-07-23 17:44:02 -07:00

filer_vtproto.pb.go

s3: return 403, not 500, when an over-quota bucket refuses a write (#11552)

2026-10-01 22:21:03 +08:00

filer.pb.go

s3: return 403, not 500, when an over-quota bucket refuses a write (#11552)

2026-10-01 22:21:03 +08:00

listing_options.go

filer: list directories without decoding chunk lists (#10616)

2026-08-07 12:03:18 -07:00