New Features in 5.3.4

LIFECYCLE RULES
- Tag-Based Lifecycle Rules
- Deletions per Lifecycle Rules in VAST Audit Log
AUTHENTICATION AND AUTHORIZATION
- LDAP Netgroup Base DN

Tag-Based Lifecycle Rules

You can configure a lifecycle rule so that it applies only to objects that have certain tags on them.

A tag is a key-value pair subject to restrictions and limitations for S3 object tagging. For each tag, the key is required but the value is optional. For a lifecycle rule to be applied to an object, all tags in the rule must match the tags of the object. If the tag in the rule has a value, the value must match as well. If the tag in the rule doesn't have a value, the object tag must have an empty value for the lifecycle rule to be triggered.

Each lifecycle rule may have up to 40 tags.

The following user controls have been added for this purpose:

The Tags field in the lifecycle rule settings (Element Store -> Lifecycle Rules -> choose to create or edit a lifecycle rule) with a link to open a dialog where you can manage the tags.
The --tags option on the lifecyclerule create and lifecyclerule modify commands

The following limitation applies:

ORION-287739: Tag-based lifecycle rules cannot be used to abort incomplete multipart uploads even when the uploads have a matching tag on them.

The following known issue may be encountered:

ORION-285683: When you modify a tag-based lifecycle rule in VAST Web UI, deletion of a tag may cause unintended deletion of other tags in the rule.

Deletions per Lifecycle Rules in VAST Audit Log

VAST Audit Log features a new type of records to help track deletions that were made automatically based on the configured lifecycle rules. These records have DELETE_BY_LIFECYCLE_RULE as the RPC type and S3 BUCKET as the Protocol.

To enable audit logging of deletions per lifecycle rules, specify the cluster's global auditing settings (in VAST Web UI: Settings -> Auditing -> General tab -> Global Baseline Audit Settings) as follows:

Select the S3 protocol as the protocol being logged (under Select protocols to assign operations).
Select Create/Delete Files/Directories/Objects as the operations being logged (under Operations to audit).

Note that although the protocol is S3, DELETE_BY_LIFECYCLE_RULE log entries are also created for lifecycle rule-based deletions of files written through NFS or SMB.

LDAP Netgroup Base DN

VAST Cluster 5.3.4 provides an ability to configure a search base DN to be used specifically for LDAP netgroup queries. To do so:

In VAST Web UI, use the Netgroup base DN field in LDAP settings (User Management -> LDAP -> choose to create or edit a LDAP configuration -> Advanced tab)
In VAST CLI, run the ldap create or ldap modify command with the --netgroup-basedn option specified.

If no netgroup base DN is specified, netgroup queries are performed using the base DN set in the Base DN field in LDAP settings.