test(s3): cover anonymous admin signing

[overtrue]

Related issue(s)

None. Automation found a recent test gap.

Background

Recent mTLS and anonymous alias support added an admin client branch that skips SigV4 signing when an alias is anonymous. Existing admin route tests used credentialed aliases, so they did not prove anonymous admin requests omit the Authorization header.

Solution

Add a focused rc-s3 admin regression test that sends an anonymous heal status request through the local admin test server and asserts the request has no Authorization header.

Validation

• cargo test -p rc-s3 anonymous_admin_requests_skip_authorization_header --lib
• cargo fmt --all --check
• git diff --check
• make pre-commit

[Copilot]

Pull request overview

Adds a regression test in the rc-s3 admin client test suite to ensure that when an alias is marked anonymous, admin requests are sent without SigV4 Authorization headers (covering a previously untested branch introduced by anonymous alias support).

Changes:

• Extend the admin test server request capture to include raw request headers.
• Add a helper to construct an anonymous AdminClient for a given endpoint.
• Add a #[tokio::test] asserting anonymous heal_status() requests do not include an Authorization header.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.