Maksim
August 25, 2025, 2:09pm
1
Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
3.1.0
Describe the issue :
After upgrading from version 2.17.1 to 3.1.0 and installing the S3 plugin, an error occurs when trying to add a repository or take snapshot.
Configuration :
s3.client.default.endpoint: s3_service
s3.client.default.region: region
s3.client.default.protocol: https
Relevant Logs or Screenshots :
{
“error”:{
“root_cause”:[
{
“type”:“repository_verification_exception”,
“reason”:“[test] path [test-restore] is not accessible on cluster-manager node”
}
],
“type”:“repository_verification_exception”,
“reason”:“[test] path [test-restore] is not accessible on cluster-manager node”,
“caused_by”:{
“type”:“i_o_exception”,
“reason”:“Unable to upload object [test-restore/tests-bGvIIxyISEWGstdP7Qn0rg/master.dat] using a single upload”,
“caused_by”:{
“type”:“s3_exception”,
“reason”:“Invalid trailing header names in x-amz-trailer. (Service: S3, Status Code: 400, Request ID: 42d9e331-e9ac-1faf-817e-1070fdfaaaa4) (SDK Attempt Count: 1)”
}
}
},
“status”:500
}
I tried upgrading to version 3.2.0 , but it did not resolve the issue.
Please help me resolve this issue, I would be very grateful for any assistance.
pablo
August 25, 2025, 5:33pm
2
@Maksim Is this AWS S3 or other vendor i.e. Minio?
pablo
August 25, 2025, 5:38pm
3
@Maksim There is also a GitHub issue related to your problem that was reported a few days ago.
opened 08:00PM - 21 Aug 25 UTC
bug
untriaged
Plugins
### Describe the bug
Hello everyone. help me please.
I install opensearch 3.1.0… . When I run snapshot I see error
<img width="1863" height="786" alt="Image" src="https://github.com/user-attachments/assets/85c2382d-169b-4ca4-832d-a741fc9ace9a" />
Caused by: software.amazon.awssdk.services.s3.model.S3Exception: Invalid trailing header names in x-amz-trailer. (Service: S3, Status Code: 400, Request ID: 611ee99b-eb78-1f0a-b4ab-1070fdfab298) (SDK Attempt Count: 1)
I am using an S3-compatible bucket and every time I see this error, I can't take a snapshot. Previously I used OpenSearch 2.17.0 and this problem was not observed.
### Related component
Plugins
### To Reproduce
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error
### Expected behavior
everythings done
### Additional Details
**Plugins**
Please list all plugins currently enabled.
**Screenshots**
If applicable, add screenshots to help explain your problem.
**Host/Environment (please complete the following information):**
- OS: [e.g. iOS]
- Version [e.g. 22]
**Additional context**
Add any other context about the problem here.
1 Like
pablo
August 26, 2025, 10:09pm
5
@Maksim I’ve tested OpenSearch s3-repository plugin with AWS S3 and Minio. All OS 3.x versions worked without issue.
Do you use any proxy between OpenSearch and your S3 provider?
Maksim
August 27, 2025, 7:25am
6
Unfortunately, I don’t know if there is a proxy in the provider’s infrastructure
I have never added any proxy settings to the OpenSearch configuration
I found a similar problem in GitHub
opened 02:06PM - 08 May 25 UTC
bug
Plugins
Storage
Storage:Snapshots
Storage:Remote
### Describe the bug
Repository S3 plugin 3.0.0 upgrade AWS SDK version to 2.30… .31
Unfortunately, there is incompatibilities with some S3-like storages, like Outscale (see https://docs.outscale.com/en/userguide/AWS-SDK-and-CLI-Compatibility-Warning.html).
Error when testing S3 repository :
> "Caused by: software.amazon.awssdk.services.s3.model.S3Exception: trailing checksum is not supported (Service: S3, Status Code: 400, Request ID: 8d0e880c5c4786c2ed08, Extended Request ID: 8d0e880c5c4786c2ed08) (SDK Attempt Count: 1)"
The workaround provided (disable checksum calculation with env vars or java properties) doesn't work, because in that case no checksum is sent, and Outscale expect MD5 checksum.
Error with checksum disabled :
> "Caused by: software.amazon.awssdk.services.s3.model.S3Exception: The Content-MD5 you specified did not match what we received. (Service: S3, Status Code: 400, Request ID: 6fc31e21444eb5fc1a6b, Extended Requ
est ID: 6fc31e21444eb5fc1a6b) (SDK Attempt Count: 1)"
To keep Opensearch S3 repository plugin compatible with all S3-like storages, you can :
- revert back AWS SDK dependency version to <= 2.29.52
- implement a workaround like https://github.com/aws/aws-sdk-java-v2/discussions/5802#discussioncomment-12281124
It may be the same with others S3-like object storages, wich aren't compatible yet with new aws S3 integrity check
### Related component
Plugins
### To Reproduce
Try to configure a S3 repository, with Outscale Object Storage as backend
See the error in logs
### Expected behavior
Opensearch should work with any S3-like storage
### Additional Details
**Plugins**
repository-s3
**Host/Environment (please complete the following information):**
- OS: Debian
- Version 11
pablo
August 27, 2025, 8:19am
7
@Maksim , There was a fix to support S3-compatible storage created recently and is waiting to be merged.
main
← fix-s3-compatible-repository
opened 03:20PM - 26 Aug 25 UTC
### Description
This PR modifies the S3 builder to only verify checksum calcu… lation and verification when required.
```
final S3ClientBuilder builder = S3Client.builder()
// added
.requestChecksumCalculation(RequestChecksumCalculation.WHEN_REQUIRED)
.responseChecksumValidation(ResponseChecksumValidation.WHEN_REQUIRED)
.addPlugin(LegacyMd5Plugin.create());
```
### Related Issues
Resolves https://github.com/opensearch-project/OpenSearch/issues/18240
### Check List
- [ ] Functionality includes testing.
- [ ] API changes companion pull request [created](https://github.com/opensearch-project/opensearch-api-specification/blob/main/DEVELOPER_GUIDE.md), if applicable.
- [ ] Public documentation issue/PR [created](https://github.com/opensearch-project/documentation-website/issues/new/choose), if applicable.
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check [here](https://github.com/opensearch-project/OpenSearch/blob/main/CONTRIBUTING.md#developer-certificate-of-origin).
Maksim
August 27, 2025, 9:45am
8
@pablo
Yes, I resolve the issue with solutions from this topic.
Thanks for your help!