[chef] Re: http_request head on S3 pre-signed URL gets 403 error

[Daniel DeLeo < >]

On Wednesday, June 19, 2013 at 11:49 AM, Jorge Bianquetti wrote:

Ohai!

I've been reading

http://docs.opscode.com/chef/resources.html#remote-file, and

implemented something like this:

local = "some_local_file"

remote = "pre-signed_S3_url"

remote_file local do

source remote

action :nothing

end

http_request "HEAD #{remote}" do

message ""

url remote

action :head

if File.exists?(local)

headers "If-Modified-Since" => File.mtime(local).httpdate

end

notifies :create, "remote_file[local]", :immediately

end

I get this response from chef-client:

FATAL: Net::HTTPServerException:

http_request[HEAD

https://mybucket.s3.amazonaws.com/develop/some.war?AWSAccessKeyId=AKIXXXXXXXXXXX&Expires=1543242415&Signature=8234962346239423949ygf89w]

(some::backend line 140) had an error: Net::HTTPServerException: 403

"Forbidden"

I supposed this an Chef issue, because all it's fine when I run:

wget -S https://mybucket.s3.amazonaws.com/develop/some.war?AWSAccessKeyId=AKIXXXXXXXXXXX&Expires=1543242415&Signature=8234962346239423949ygf89w

Chef's versions on servers are 10.26.0 (soon, migration to chef11)

Thanks!

Not sure what your current issue is, but Chef 11.6 will be adding automatic conditional GET for remote_file resources. I hope you can give the beta a spin when released (hopefully soon, we'll announce it here).

-- 

Daniel DeLeo