photoncloud-monorepo/docs/por/T059-audit-fix/task.yaml
centra 07b3320436 feat(lightningstor): Add multi-credential S3 auth support
Implement Option B (enhanced env var) for T058.S2:
- Support multiple S3 credentials via S3_CREDENTIALS env var
- Format: "key1:secret1,key2:secret2,..."
- Backward compatible with S3_ACCESS_KEY_ID/S3_SECRET_KEY
- Add tests for both multi and single credential formats

This unblocks T039 production deployment while proper IAM
credential service (T060) is implemented separately.

Tests: 10/10 auth tests pass (added 2 new credential tests)

Refs: T058.S2 Option B (approved), T060 (proper IAM integration)
2025-12-12 06:41:09 +09:00

34 lines
1.2 KiB
YAML

id: T059
name: Critical Audit Fix
goal: Fix 3 critical failures blocking MVP-Alpha (creditservice compile, chainfire tests, iam tests)
status: active
priority: P0
assigned: peerB
steps:
- id: S1
name: Fix creditservice chainfire_storage.rs
done: creditservice compiles (cargo check passes)
status: complete
notes: |
PeerB fixed: Replaced txn() calls with compare_and_swap() and put().
Verified: creditservice-api compiles with warnings only.
- id: S2
name: Fix chainfire DELETE operation
done: chainfire integration tests pass (3/3)
status: complete
notes: |
Fixed: PeerB implemented Option A pre-check (~20L).
Result: 2/3 tests pass. Remaining failure is test_string_convenience_methods
race condition (NotLeader timing issue), not DELETE bug.
DELETE functionality verified working.
- id: S3
name: Fix iam module visibility
done: iam tests pass (tenant_path_integration)
status: pending
notes: |
iam_service module is private but tests import it at tenant_path_integration.rs:12.
Fix: Change `mod iam_service;` to `pub mod iam_service;` in lib.rs.
- id: S4
name: Full test suite verification
done: All 11 workspaces compile AND tests pass
status: pending