Browse Source

align(sts): use filer /etc/ path convention for IAM storage

- Update DefaultSessionBasePath to /etc/iam/sessions (was /seaweedfs/iam/sessions)
- Update DefaultPolicyBasePath to /etc/iam/policies (was /seaweedfs/iam/policies)
- Update DefaultRoleBasePath to /etc/iam/roles (was /seaweedfs/iam/roles)
- Update iam_config_distributed.json to use /etc/iam paths
- Align with existing filer configuration structure in filer_conf.go
- Follow SeaweedFS convention of storing configs under /etc/
- Add FILER_INTEGRATION.md documenting path conventions
- Maintain consistency with IamConfigDirectory = '/etc/iam'
- Enable standard filer backup/restore procedures for IAM data
- Ensure operational consistency across SeaweedFS components
pull/7160/head
chrislu 1 month ago
parent
commit
0a6c238eb0
  1. 6
      test/s3/iam/iam_config_distributed.json
  2. 8
      weed/iam/sts/constants.go

6
test/s3/iam/iam_config_distributed.json

@ -7,7 +7,7 @@
"sessionStoreType": "filer", "sessionStoreType": "filer",
"sessionStoreConfig": { "sessionStoreConfig": {
"filerAddress": "localhost:8888", "filerAddress": "localhost:8888",
"basePath": "/seaweedfs/iam/sessions"
"basePath": "/etc/iam/sessions"
}, },
"providers": [ "providers": [
{ {
@ -42,14 +42,14 @@
"storeType": "filer", "storeType": "filer",
"storeConfig": { "storeConfig": {
"filerAddress": "localhost:8888", "filerAddress": "localhost:8888",
"basePath": "/seaweedfs/iam/policies"
"basePath": "/etc/iam/policies"
} }
}, },
"roleStore": { "roleStore": {
"storeType": "filer", "storeType": "filer",
"storeConfig": { "storeConfig": {
"filerAddress": "localhost:8888", "filerAddress": "localhost:8888",
"basePath": "/seaweedfs/iam/roles"
"basePath": "/etc/iam/roles"
} }
}, },

8
weed/iam/sts/constants.go

@ -21,11 +21,11 @@ const (
EffectDeny = "Deny" EffectDeny = "Deny"
) )
// Default Paths
// Default Paths - aligned with filer /etc/ convention
const ( const (
DefaultSessionBasePath = "/seaweedfs/iam/sessions"
DefaultPolicyBasePath = "/seaweedfs/iam/policies"
DefaultRoleBasePath = "/seaweedfs/iam/roles"
DefaultSessionBasePath = "/etc/iam/sessions"
DefaultPolicyBasePath = "/etc/iam/policies"
DefaultRoleBasePath = "/etc/iam/roles"
) )
// Default Values // Default Values

Loading…
Cancel
Save