feat(oci): support conditional object uploads

[felix0102]

What this changes

Adds conditional write support to the OCI object storage provider:

• expose object ETags through Attributes
• support WithIfMatch
• support WithIfNotExists
• recognize OCI precondition failures
• add tests for conditional request headers and errors

Why

OCI Object Storage supports If-Match and If-None-Match: *,
but the objstore OCI provider does not currently expose these through
ObjectUploadOption. This prevents consumers from safely performing
optimistic-concurrency updates.

Notes

IfNotMatch is not advertised because OCI PutObject only accepts *
for If-None-Match.

[felix0102]

I found and fixed an OCI multipart-specific issue while running the acceptance test against a real OCI Object Storage bucket.

OCI SDK's UploadStream always uses multipart uploads for non-empty streams. Passing If-Match through that path caused the condition to be applied to UploadPart, resulting in a 412 IfMatchFailed even when the destination object's ETag was correct.

Conditional uploads now use a single PutObject request, while unconditional uploads continue to use UploadStream/multipart.

Verified against a real OCI bucket:

go test -v -count=1 ./objtesting
-run '^TestObjStore_AcceptanceTest_e2e$/^oci$'

Result:
PASS
--- PASS: TestObjStore_AcceptanceTest_e2e/oci

This verifies IfNotExists, invalid IfMatch, valid IfMatch, content preservation after failed conditions, and successful conditional replacement.

[felix0102]

Hi @alsenz, this PR adds OCI support for the conditional upload API introduced in #178. Since you designed and implemented that API, would you be willing to take a look and provide technical feedback on the OCI implementation when available? Thank you!

[felix0102]

Hi maintainers — a gentle follow-up on this PR.

I have now confirmed that this change also addresses the OCI connection leak previously reported in grafana/loki#17818.

I reproduced the issue against a real OCI Object Storage bucket using Instance Principal authentication. With the existing GetObject-based Attributes() implementation and the HTTP transport limited to five connections per host:

• requests 1–5 completed quickly;
• request 6 was blocked for approximately 6.7 seconds, waiting for a connection to become available.

After changing OCI metadata operations to use HeadObject, all ten requests completed in approximately 6–31 ms, with request 6 completing in 9.3 ms. This confirms that the HeadObject change prevents the response-body leak and connection-pool starvation.

The OCI provider unit tests and the full acceptance test against a real OCI Object Storage bucket also pass.

This PR is now needed by grafana/loki#23710 for two reasons:

1. OCI conditional uploads are required to support Loki's GetAndReplace workflow safely.
2. The HeadObject changes resolve the OCI metadata connection leak that previously blocked feat: Add support for Oracle OCI object storage grafana/loki#17818.

Could a maintainer please review this PR and let me know if any further changes are required for approval? I am available to address feedback promptly. If the implementation is ready, merging it would unblock the corresponding Grafana Objstore synchronization and the Loki OCI backend PR.

Thank you!

[alsenz]

Hey @felix0102, I'm not a maintainer (or at least I haven't noticed being made one!) but I will give this a review for you this evening when my work finishes, might expedite being accepted.

[alsenz]

Full disclosure - I'm not super familiar with the OCI libary and can't integration test this but with some very minor comments looks good to me.

Once thing I noticed - I think the README would also need an update to flag that objstore supports OCI now!

[felix0102]

Hi @fpetkovski — this PR adds OCI support for the conditional-upload API and already has an approval from @alsenz. Would you be able to review it when you have time? I’d appreciate any feedback. Thank you!

[felix0102]

Hi @GiedriusS, this PR has been rebased onto the latest main and updated based on the previous feedback.

The latest version:

• supports OCI If-Match and If-None-Match conditional uploads
• uses a seekable temporary file so SDK retries preserve the complete body
• enforces OCI PutObject's 50 GiB limit
• adds retry, size-limit, error, and ETag tests
• updates the conditional-write documentation

All checks are now passing. When you have time, could you please take another look? Thanks!

[felix0102]

Hi @petkovski, hope you’re doing well. @GiedriusS kindly provided the initial review, and I’ve addressed the feedback and updated the PR accordingly. All CI checks are now passing.
Since this change is also needed to unblock grafana/loki#23710, would you be willing to help with a follow-up review when you have time? Any additional feedback would be greatly appreciated.
Thank you both for your time and help!