diagnose_retention_gaps
Identify WORM/retention gaps in MinIO buckets: lock without retention, retention exceeding lifecycle expiry, versioning disabled. Failed probes are reported separately.
Instructions
[READ][risk=low] WORM/retention gaps across every bucket, worst-first.
Finds the contradictions rather than a house style: lock enabled with no default retention (protects nothing), a lifecycle expiry that retention outlives (the rule can never delete and the capacity never returns — both day counts reported), object lock on a bucket whose versioning is not active, and the mode choice with its consequence spelled out.
Buckets whose probes fail are listed in bucketErrors rather than skipped: a clean findings list does not mean those buckets are clean.
Args: limit: Maximum findings to return (envelope reports truncation). target: MinIO target name from config; omit for the default.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| target | No |