Overwriting a secret resets permissions? about berglas

[sethvargo]

Hi @dancmeyers

Do you have versioning enabled on the bucket?

[maroux]

@dancmeyers Ah, that's an interesting bug. I believe GCS is designed to completely overwrite existing objects rather than updating the data. I ran into this with #40 (had to set metadata again even though I only wanted to modify the object data). I'll add a fix for this in #48 or a follow-up PR.

[dancmeyers]

Hi @sethvargo,

Initially I didn't, but I wondered if that was part of the problem so I turned it on and tried again. The behaviour was the same.

[sethvargo]

@maroux FWIW, I had to make some changes to your implementation. IAM is eventually consistent, so I needed to add some retry logic or else risk getting a 412 half the time.