MediaStoreOciBackend
OCI Object Storage, uploaded natively (not via the S3-compatibility layer),
so OCI instance principals work. The canonical object URLs advertised to
TAMS readers are https://objectstorage.<region>.<realm>/n/<namespace>/b/<bucket>/o/<key>;
namespace and region may be given to pin them, otherwise Norsk discovers
them (namespace via GET /n/; region from the config-file profile or, for
instance principals, the instance metadata). Empty string fields mean
"unset".
Field |
Type |
Repeated |
Description |
bucket |
|||
namespace |
The tenancy’s Object Storage namespace ( |
||
region |
Region identifier, e.g. "uk-london-1"; empty = from the config-file
profile / instance metadata (required with apiKey auth unless |
||
key_prefix |
|||
endpoint |
scheme://host[:port] override of the regional endpoint (a shim / proxy). |
||
realm_domain_component |
Realm domain; empty = oraclecloud.com (set for government realms). |
||
auth |
How to authenticate; unset = instance principal. |
||
presign |
When true, TAMS get_urls for replicated segments are time-limited read
URLs through a bucket-level Pre-Authenticated Request (minted on demand
when a listing opts in via ?presigned=true; cached and re-minted by Norsk)
rather than the canonical object URL. Needs PAR_MANAGE ( |
||
presign_expiry_seconds |
Minimum validity of a presigned URL (seconds); defaults to 900 when 0. |