add debugging for InvalidAccessKeyId

weed/credential/filer_etc/filer_etc_policy.go

@@ -27,6 +27,9 @@ func (store *FilerEtcStore) GetPolicies(ctx context.Context) (map[string]policy_
 		return policiesCollection.Policies, nil
 	}
 
+	glog.V(2).Infof("Loading IAM policies from %s/%s (filer: %s)", 
+		filer.IamConfigDirectory, filer.IamPoliciesFile, store.filerGrpcAddress)
+
 	err := store.withFilerClient(func(client filer_pb.SeaweedFilerClient) error {
 		// Use ReadInsideFiler instead of ReadEntry since policies.json is small
 		// and stored inline. ReadEntry requires a master client for chunked files,
@@ -34,16 +37,32 @@ func (store *FilerEtcStore) GetPolicies(ctx context.Context) (map[string]policy_
 		content, err := filer.ReadInsideFiler(client, filer.IamConfigDirectory, filer.IamPoliciesFile)
 		if err != nil {
 			if err == filer_pb.ErrNotFound {
-				glog.V(1).Infof("Policies file not found at %s/%s, returning empty policies", filer.IamConfigDirectory, filer.IamPoliciesFile)
+				glog.V(1).Infof("Policies file not found at %s/%s, returning empty policies", 
+					filer.IamConfigDirectory, filer.IamPoliciesFile)
 				// If file doesn't exist, return empty collection
 				return nil
 			}
+			glog.Errorf("Failed to read IAM policies file from %s/%s: %v", 
+				filer.IamConfigDirectory, filer.IamPoliciesFile, err)
 			return err
 		}
 
-		if len(content) > 0 {
-			return json.Unmarshal(content, policiesCollection)
+		if len(content) == 0 {
+			glog.V(2).Infof("IAM policies file at %s/%s is empty", 
+				filer.IamConfigDirectory, filer.IamPoliciesFile)
+			return nil
 		}
+
+		glog.V(2).Infof("Read %d bytes from %s/%s", 
+			len(content), filer.IamConfigDirectory, filer.IamPoliciesFile)
+
+		if err := json.Unmarshal(content, policiesCollection); err != nil {
+			glog.Errorf("Failed to parse IAM policies from %s/%s: %v", 
+				filer.IamConfigDirectory, filer.IamPoliciesFile, err)
+			return err
+		}
+
+		glog.V(1).Infof("Successfully loaded %d IAM policies", len(policiesCollection.Policies))
 		return nil
 	})
 
@@ -51,6 +70,13 @@ func (store *FilerEtcStore) GetPolicies(ctx context.Context) (map[string]policy_
 		return nil, err
 	}
 
+	// Log policy names for debugging
+	if glog.V(2) && len(policiesCollection.Policies) > 0 {
+		for policyName := range policiesCollection.Policies {
+			glog.V(2).Infof("  Policy: %s", policyName)
+		}
+	}
+
 	return policiesCollection.Policies, nil
 }