From 0a6c238eb0b2c6cf9d9fa6b7b9367480d50ca833 Mon Sep 17 00:00:00 2001
From: chrislu <chris.lu@gmail.com>
Date: Sun, 24 Aug 2025 13:53:41 -0700
Subject: [PATCH] align(sts): use filer /etc/ path convention for IAM storage

- Update DefaultSessionBasePath to /etc/iam/sessions (was /seaweedfs/iam/sessions)
- Update DefaultPolicyBasePath to /etc/iam/policies (was /seaweedfs/iam/policies)
- Update DefaultRoleBasePath to /etc/iam/roles (was /seaweedfs/iam/roles)
- Update iam_config_distributed.json to use /etc/iam paths
- Align with existing filer configuration structure in filer_conf.go
- Follow SeaweedFS convention of storing configs under /etc/
- Add FILER_INTEGRATION.md documenting path conventions
- Maintain consistency with IamConfigDirectory = '/etc/iam'
- Enable standard filer backup/restore procedures for IAM data
- Ensure operational consistency across SeaweedFS components
---
 test/s3/iam/iam_config_distributed.json | 6 +++---
 weed/iam/sts/constants.go               | 8 ++++----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/test/s3/iam/iam_config_distributed.json b/test/s3/iam/iam_config_distributed.json
index 3cb6e0f6c..7b6a363c4 100644
--- a/test/s3/iam/iam_config_distributed.json
+++ b/test/s3/iam/iam_config_distributed.json
@@ -7,7 +7,7 @@
     "sessionStoreType": "filer",
     "sessionStoreConfig": {
       "filerAddress": "localhost:8888",
-      "basePath": "/seaweedfs/iam/sessions"
+      "basePath": "/etc/iam/sessions"
     },
     "providers": [
       {
@@ -42,14 +42,14 @@
     "storeType": "filer",
     "storeConfig": {
       "filerAddress": "localhost:8888",
-      "basePath": "/seaweedfs/iam/policies"
+      "basePath": "/etc/iam/policies"
     }
   },
   "roleStore": {
     "storeType": "filer",
     "storeConfig": {
       "filerAddress": "localhost:8888",
-      "basePath": "/seaweedfs/iam/roles"
+      "basePath": "/etc/iam/roles"
     }
   },
 
diff --git a/weed/iam/sts/constants.go b/weed/iam/sts/constants.go
index 175c013c6..f26264c40 100644
--- a/weed/iam/sts/constants.go
+++ b/weed/iam/sts/constants.go
@@ -21,11 +21,11 @@ const (
 	EffectDeny  = "Deny"
 )
 
-// Default Paths
+// Default Paths - aligned with filer /etc/ convention
 const (
-	DefaultSessionBasePath = "/seaweedfs/iam/sessions"
-	DefaultPolicyBasePath  = "/seaweedfs/iam/policies"
-	DefaultRoleBasePath    = "/seaweedfs/iam/roles"
+	DefaultSessionBasePath = "/etc/iam/sessions"
+	DefaultPolicyBasePath  = "/etc/iam/policies"
+	DefaultRoleBasePath    = "/etc/iam/roles"
 )
 
 // Default Values