Sign requests with configurable site region

Shipped

July 1, 2026 at 8:08 AM UTC

Author

Kamo

Commit

5f00e9b

MinIO now enforces MINIO_SITE_REGION (us-west-ca-s-1) in the SigV4 authorization scope since site replication was enabled. The client was built without a region, so it signed with the default us-east-1 and the server rejected every authenticated op with 'the authorization header is malformed; the region is wrong'. Add kamo.minio.region (default us-west-ca-s-1, blank = client default) and apply it when building the client, fixing uploads/downloads/lists across all services.