René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Compatible S3 backup doesn't have a vaild SHA","articleBody":"When trying to store the backups on an Netapp using compatible s3 we get the following error\n\n`InvalidArgument; message: x-amz-content-sha256 must be UNSIGNED-PAYLOAD, STREAMING-AWS4-HMAC-SHA256-PAYLOAD or a valid sha256 value.`\n\nLog output\n\n```\nexternalbackups/plugins/s3/common: 2025/11/12 12:00:00.000329 s3common.go:165: Info: Starting S3 compatible backup\npg_dump: last built-in OID is 16383\npg_dump: reading extensions\npg_dump: identifying extension members\npg_dump: reading schemas\npg_dump: reading user-defined tables\npg_dump: reading user-defined functions\npg_dump: reading user-defined types\npg_dump: reading procedural languages\npg_dump: reading user-defined aggregate functions\npg_dump: reading user-defined operators\npg_dump: reading user-defined access methods\npg_dump: reading user-defined operator classes\npg_dump: reading user-defined operator families\npg_dump: reading user-defined text search parsers\npg_dump: reading user-defined text search templates\npg_dump: reading user-defined text search dictionaries\npg_dump: reading user-defined text search configurations\npg_dump: reading user-defined foreign-data wrappers\npg_dump: reading user-defined foreign servers\npg_dump: reading default privileges\npg_dump: reading user-defined collations\npg_dump: reading user-defined conversions\npg_dump: reading type casts\npg_dump: reading transforms\npg_dump: reading table inheritance information\npg_dump: reading event triggers\npg_dump: finding extension tables\npg_dump: finding inheritance relationships\npg_dump: reading column info for interesting tables\npg_dump: finding table default expressions\npg_dump: flagging inherited columns in subtables\npg_dump: reading partitioning data\npg_dump: reading indexes\npg_dump: flagging indexes in partitioned tables\npg_dump: reading extended statistics\npg_dump: reading constraints\npg_dump: reading triggers\npg_dump: reading rewrite rules\npg_dump: reading policies\npg_dump: reading row-level security policies\npg_dump: reading publications\npg_dump: reading publication membership of tables\npg_dump: reading publication membership of schemas\npg_dump: reading subscriptions\npg_dump: reading large objects\npg_dump: reading dependency data\npg_dump: saving encoding = UTF8\npg_dump: saving standard_conforming_strings = on\npg_dump: saving search_path = \npg_dump: saving database definition\npg_dump: dumping contents of table \"public.active_components\"\npg_dump: dumping contents of table \"public.active_components_active_contexts_slices\"\npg_dump: dumping contents of table \"public.administration_events\"\npg_dump: dumping contents of table \"public.alerts\"\nexternalbackups/plugins/s3/common: 2025/11/12 12:00:03.581102 s3common.go:221: Error: S3 compatible backup: creating backup in bucket \"eng-mgmt-acs\" with key \"backup_2025-11-12T12:00:00.zip\" (code: InvalidArgument; message: x-amz-content-sha256 must be UNSIGNED-PAYLOAD, STREAMING-AWS4-HMAC-SHA256-PAYLOAD or a valid sha256 value.) {\"backup\": \"S3-Backup\", \"error\": \"upload multipart failed, upload id: MjE1MDMwMTY0NV8xMzU5XzEyMTY4N18yNjgwMjQ4NTc0, cause: operation error S3: UploadPart, https response error StatusCode: 400, RequestID: , HostID: , api error InvalidArgument: x-amz-content-sha256 must be UNSIGNED-PAYLOAD, STREAMING-AWS4-HMAC-SHA256-PAYLOAD or a valid sha256 value.\", \"err_code\": \"s3compatible\", \"bucket\": \"eng-mgmt-acs\"}\nexternalbackups/scheduler: 2025/11/12 12:00:03.581334 schedule.go:108: Error: failed to send backup to *s3common.s3Common: S3 compatible backup: creating backup in bucket \"eng-mgmt-acs\" with key \"backup_2025-11-12T12:00:00.zip\" (code: InvalidArgument; message: x-amz-content-sha256 must be UNSIGNED-PAYLOAD, STREAMING-AWS4-HMAC-SHA256-PAYLOAD or a valid sha256 value.)\npkg/postgres/pgadmin: 2025/11/12 12:00:03.583388 postgres_command_utils.go:26: Error: Failure executing \"/usr/bin/pg_dump -d central_active -Fc -v -U postgres -h central-db.stackrox.svc -p 5432\" with signal: broken pipe\nexternalbackups/scheduler: 2025/11/12 12:00:03.599690 schedule.go:55: Error: Failed to write backup to io.writer: backing up postgres: unable to write postgres.dump to zip: signal: broken pipe\n```\n\nWe are deploying using the operator on an Openshift cluster, and have set the addtional env vars to attempt to force the generation of the sha.\n\nOpenshift RHACS Deployment resource\n\n```\n---\napiVersion: platform.stackrox.io/v1alpha1\nkind: Central\nmetadata:\n  name: stackrox-central-services\n  namespace: stackrox\nspec:\n  customize:\n    envVars:\n      - name: AWS_REQUEST_CHECKSUM_CALCULATION\n        value: WHEN_REQUIRED\n      - name: AWS_RESPONSE_CHECKSUM_VALIDATION\n        value: WHEN_REQUIRED\n  central:\n    db:\n      connectionPoolSize:\n        maxConnections: 90\n        minConnections: 10\n      isEnabled: Default\n      persistence:\n        persistentVolumeClaim:\n          claimName: central-db\n    exposure:\n      loadBalancer:\n        enabled: false\n        port: 443\n      nodePort:\n        enabled: false\n      route:\n        enabled: true\n    notifierSecretsEncryption:\n      enabled: false\n    defaultTLSSecret:\n      name: central-stackrox      \n    persistence:\n      persistentVolumeClaim:\n        claimName: stackrox-db\n    telemetry:\n      enabled: false\n  configAsCode:\n    configAsCodeComponent: Enabled\n  egress:\n    connectivityPolicy: Online\n  monitoring:\n    openshift:\n      enabled: true\n  network:\n    policies: Enabled\n  scanner:\n    analyzer:\n      scaling:\n        autoScaling: Enabled\n        maxReplicas: 5\n        minReplicas: 2\n        replicas: 3\n  scannerV4:\n    db:\n      persistence:\n        persistentVolumeClaim:\n          claimName: scanner-v4-db\n    indexer:\n      scaling:\n        autoScaling: Enabled\n        maxReplicas: 5\n        minReplicas: 2\n        replicas: 3\n    matcher:\n      scaling:\n        autoScaling: Enabled\n        maxReplicas: 5\n        minReplicas: 2\n        replicas: 3\n    scannerComponent: Default\n```","author":{"url":"https://github.com/budgester","@type":"Person","name":"budgester"},"datePublished":"2025-11-12T12:49:11.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":3},"url":"https://github.com/17783/stackrox/issues/17783"}