chrislu
9e7c7e926f
validation for the colon extraction in expectedAuth
1 week ago
没有小名的曲
6719b6e7ac
fix(s3api): simply comparing signatures
3 weeks ago
没有小名的曲
f0dedf1944
test(s3api): add unit tests for Signature V2 authentication fix
3 weeks ago
没有小名的曲
06b10b7e2b
fix(s3api): Skip space after "AWS" prefix (+1 offset)
3 weeks ago
没有小名的曲
0a4761269d
fix(s3api): fix AWS Signature V2 format and validation
3 weeks ago
chrislu
e154bfe163
minor
3 weeks ago
Konstantin Lebedev
4477edbcc4
fix: pass proxied query param ( #7477 )
* fix: pass proxied query param
* fix: use math/rand/v2
* Shuffle condition
---------
Co-authored-by: chrislu <chris.lu@gmail.com>
3 weeks ago
Lisandro Pin
0e69f7c916
Split logic for `volume.check.disk` into writable and read-only volume replicas. ( #7476 )
3 weeks ago
Chris Lu
4e73cc778c
S3: add context aware action resolution ( #7479 )
* add context aware action resolution
* isAnonymous
* add s3 action resolver
* refactor
* correct action name
* no need for action copy object
* Simplify by removing the method-action mismatch path
* use PUT instead of DELETE action
* refactor
* constants
* versionId vs versions
* address comments
* comment
* adjust messages
* ResolveS3Action
* address comments
* refactor
* simplify
* more checks
* not needed
* simplify
3 weeks ago
chrislu
5b9a526310
adjust comment
3 weeks ago
Chris Lu
2a9d4d1e23
Refactor data structure ( #7472 )
* refactor to avoids circular dependency
* converts a policy.PolicyDocument to policy_engine.PolicyDocument
* convert numeric types to strings
* Update weed/s3api/policy_conversion.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* refactoring
* not skipping numeric and boolean values in arrays
* avoid nil
* edge cases
* handling conversion failure
The handling of unsupported types in convertToString could lead to silent policy alterations.
The conversion of map-based principals in convertPrincipal is too generic and could misinterpret policies.
* concise
* fix doc
* adjust warning
* recursion
* return errors
* reject empty principals
* better error message
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
3 weeks ago
Chris Lu
508d06d9a5
S3: Enforce bucket policy ( #7471 )
* evaluate policies during authorization
* cache bucket policy
* refactor
* matching with regex special characters
* Case Sensitivity, pattern cache, Dead Code Removal
* Fixed Typo, Restored []string Case, Added Cache Size Limit
* hook up with policy engine
* remove old implementation
* action mapping
* validate
* if not specified, fall through to IAM checks
* fmt
* Fail-close on policy evaluation errors
* Explicit `Allow` bypasses IAM checks
* fix error message
* arn:seaweed => arn:aws
* remove legacy support
* fix tests
* Clean up bucket policy after this test
* fix for tests
* address comments
* security fixes
* fix tests
* temp comment out
3 weeks ago
Chris Lu
50f067bcfd
backup: handle volume not found when backing up ( #7465 )
* handle volume not found when backing up
* error handling on reading volume ttl and replication
* fix Inconsistent error handling: should continue to next location.
* adjust messages
* close volume
* refactor
* refactor
* proper v.Close()
3 weeks ago
Lisandro Pin
79fa87bad4
Rework parameters passing for functions within `ec.rebuild` ( #7445 )
* Rework parameters passing for functions within `ec.rebuild`
This simplifies the overall codebase and allows to cleanly handle parallelization via waitgroups.
* fix copy source
* add tests
* remove tests not useful
* fmt
* nil check
---------
Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
Co-authored-by: chrislu <chris.lu@gmail.com>
3 weeks ago
Chris Lu
bf8e4f40e6
S3: Perf related ( #7463 )
* reduce checks
* s3 object lookup optimization
* Only check versioning configuration if client requests
* Consolidate SSE Entry Lookups
* optimize
* revert optimization for versioned objects
* Removed: getObjectEntryForSSE() function
* refactor
* Refactoring: Added fetchObjectEntryRequired
* avoid refetching
* return early if not found
* reuse objects from conditional check
* clear cache when creating bucket
3 weeks ago
chrislu
6201cd099e
fix help messages
3 weeks ago
Lisandro Pin
9744382a18
Rework parameters passing for functions within `volume.check.disk`. ( #7448 )
* Rework parameters passing for functions within `volume.check.disk`.
We'll need to rework this logic to account for read-only volumes, and there're already way too many parameters shuffled around.
Grouping these into a single struct simplifies the overall codebase.
* similar fix
* Improved Error Handling in Tests
* propagate the errors
* edge cases
* edge case on modified time
* clean up
---------
Co-authored-by: chrislu <chris.lu@gmail.com>
3 weeks ago
dependabot[bot]
d8dd3e4c53
chore(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 ( #7459 )
* chore(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/sys/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.38.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* go mod tidy
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: chrislu <chris.lu@gmail.com>
3 weeks ago
dependabot[bot]
735516cf0a
chore(deps): bump github.com/shirou/gopsutil/v4 from 4.25.9 to 4.25.10 ( #7457 )
* chore(deps): bump github.com/shirou/gopsutil/v4 from 4.25.9 to 4.25.10
Bumps [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil ) from 4.25.9 to 4.25.10.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v4.25.9...v4.25.10 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v4
dependency-version: 4.25.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* go mod tidy
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: chrislu <chris.lu@gmail.com>
3 weeks ago
dependabot[bot]
ca8e7739be
chore(deps): bump helm/chart-testing-action from 2.7.0 to 2.8.0 ( #7454 )
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action ) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/helm/chart-testing-action/releases )
- [Commits](https://github.com/helm/chart-testing-action/compare/v2.7.0...v2.8.0 )
---
updated-dependencies:
- dependency-name: helm/chart-testing-action
dependency-version: 2.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
6b82a7cadc
chore(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 ( #7456 )
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](c1e51972af ...318604b99e75e41977312d83839a89be02ca4893)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
d6a77b639a
chore(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 ( #7455 )
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](29109295f8 ...c7c53464625b32c7a7e944ae62b3e17d2b600130)
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
d37396b420
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.1 to 1.20.0 ( #7458 )
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore
Bumps [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go ) from 1.19.1 to 1.20.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases )
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.19.1...sdk/azcore/v1.20.0 )
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
dependency-version: 1.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
c93bf8b29d
chore(deps): bump github.com/hashicorp/vault/api from 1.20.0 to 1.22.0 ( #7461 )
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.20.0 to 1.22.0.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.20.0...api/v1.22.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-version: 1.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
dependabot[bot]
4a34a2290f
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.2 to 1.6.3 ( #7460 )
chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
Bumps [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go ) from 1.6.2 to 1.6.3.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases )
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/storage/azblob/v1.6.2...sdk/storage/azblob/v1.6.3 )
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
dependency-version: 1.6.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
3 weeks ago
Lisandro Pin
76e4a51964
Unify the parameter to disable dry-run on weed shell commands to `-apply` (instead of `-force`). ( #7450 )
* Unify the parameter to disable dry-run on weed shell commands to --apply (instead of --force).
* lint
* refactor
* Execution Order Corrected
* handle deprecated force flag
* fix help messages
* Refactoring]: Using flag.FlagSet.Visit()
* consistent with other commands
* Checks for both flags
* fix toml files
---------
Co-authored-by: chrislu <chris.lu@gmail.com>
4 weeks ago
Chris Lu
2a05af2e14
docker: fix /data ownership and permission ( #7451 )
* docker: fix /data ownership and permission
* chown if not owned by seaweed user
* fix github tests
* comments
* fix the unquoted variables in the case pattern matching
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update entrypoint.sh
* Update entrypoint.sh
* Update docker/entrypoint.sh
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
4 weeks ago
Lisandro Pin
5fef4145a4
Fix date string parsing bug for the SQL Engine. ( #7446 )
`SQLEngine.valueToTime()` is parsing dates always as UTC (via `time.Parse()`),
regardless of TZ assumptions for different date formats.
4 weeks ago
Konstantin Lebedev
084b377f87
do delete expired entries on s3 list request ( #7426 )
* do delete expired entries on s3 list request
https://github.com/seaweedfs/seaweedfs/issues/6837
* disable delete expires s3 entry in filer
* pass opt allowDeleteObjectsByTTL to all servers
* delete on get and head
* add lifecycle expiration s3 tests
* fix opt allowDeleteObjectsByTTL for server
* fix test lifecycle expiration
* fix IsExpired
* fix locationPrefix for updateEntriesTTL
* fix s3tests
* resolv coderabbitai
* GetS3ExpireTime on filer
* go mod
* clear TtlSeconds for volume
* move s3 delete expired entry to filer
* filer delete meta and data
* del unusing func removeExpiredObject
* test s3 put
* test s3 put multipart
* allowDeleteObjectsByTTL by default
* fix pipline tests
* rm dublicate SeaweedFSExpiresS3
* revert expiration tests
* fix updateTTL
* rm log
* resolv comment
* fix delete version object
* fix S3Versioning
* fix delete on FindEntry
* fix delete chunks
* fix sqlite not support concurrent writes/reads
* move deletion out of listing transaction; delete entries and empty folders
* Revert "fix sqlite not support concurrent writes/reads"
This reverts commit 5d5da14e0e .
* clearer handling on recursive empty directory deletion
* handle listing errors
* strut copying
* reuse code to delete empty folders
* use iterative approach with a queue to avoid recursive WithFilerClient calls
* stop a gRPC stream from the client-side callback is to return a specific error, e.g., io.EOF
* still issue UpdateEntry when the flag must be added
* errors join
* join path
* cleaner
* add context, sort directories by depth (deepest first) to avoid redundant checks
* batched operation, refactoring
* prevent deleting bucket
* constant
* reuse code
* more logging
* refactoring
* s3 TTL time
* Safety check
---------
Co-authored-by: chrislu <chris.lu@gmail.com>
4 weeks ago
chrislu
cc444b1868
muted texts
4 weeks ago
chrislu
ca8cd631ff
Update admin.css
4 weeks ago
chrislu
82f2c3757f
muted admin UI color
4 weeks ago
Chris Lu
ecdbe572ca
master: fix negative active volumes ( #7440 )
* fix negative active volumes
* address comments
* simplify
4 weeks ago
Federico A. Corazza
17b23f61e1
Don't make nginx the default ingress controller ( #7436 )
4 weeks ago
Lisandro Pin
f466ff1412
Nit: use `time.Duration`s instead of constants in seconds. ( #7438 )
Nit: use `time.Durations` instead of constants in seconds. Makes for slightly more readable code.
4 weeks ago
chrislu
f4f2718ba0
adjust test
1 month ago
dependabot[bot]
ac5108c301
chore(deps): bump go.mongodb.org/mongo-driver from 1.17.4 to 1.17.6 ( #7430 )
Bumps [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver ) from 1.17.4 to 1.17.6.
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases )
- [Commits](https://github.com/mongodb/mongo-go-driver/compare/v1.17.4...v1.17.6 )
---
updated-dependencies:
- dependency-name: go.mongodb.org/mongo-driver
dependency-version: 1.17.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
1 month ago
dependabot[bot]
d592fcbe5c
chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.18.19 to 1.18.20 ( #7432 )
chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2 ) from 1.18.19 to 1.18.20.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.20/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.19...config/v1.18.20 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
dependency-version: 1.18.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
Chris Lu
498ac8903f
S3: prevent deleting buckets with object locking ( #7434 )
* prevent deleting buckets with object locking
* addressing comments
* Update s3api_bucket_handlers.go
* address comments
* early return
* refactor
* simplify
* constant
* go fmt
1 month ago
chrislu
a154ef9a0f
4.00
1 month ago
dependabot[bot]
6d00d84721
chore(deps): bump helm/kind-action from 1.12.0 to 1.13.0 ( #7428 )
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](https://github.com/helm/kind-action/compare/v1.12.0...v1.13.0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-version: 1.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
29255f286e
chore(deps): bump cloud.google.com/go/storage from 1.57.0 to 1.57.1 ( #7431 )
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go ) from 1.57.0 to 1.57.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.57.0...storage/v1.57.1 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
dependency-version: 1.57.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
499ab47eaa
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.3 to 1.89.1 ( #7433 )
chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3
Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2 ) from 1.88.3 to 1.89.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.88.3...service/s3/v1.89.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
dependency-version: 1.89.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
chrislu
43cdd22133
4.00
1 month ago
chrislu
20a2e672d2
4.00
1 month ago
Lisandro Pin
1668c1042b
Rework collection resultion for `ec.rebuild`, in preparation for parallelization. ( #7420 )
* Rework collection resultion for `ec.rebuild`, in preparation for parallelization.
See https://github.com/seaweedfs/seaweedfs/issues/7416 .
* simplify
* Update weed/shell/command_ec_rebuild.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---------
Co-authored-by: chrislu <chris.lu@gmail.com>
Co-authored-by: Chris Lu <chrislusf@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
1 month ago
Chris Lu
69c49859fa
fix go install ( #7425 )
fix https://github.com/seaweedfs/seaweedfs/issues/7424
1 month ago
Chris Lu
f234455b76
Filer: separate context for streaming ( #7423 )
* separate context for streaming
* Update weed/server/filer_server_handlers_read.go
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
1 month ago
chrislu
b2fd31c08b
fix volume utilization icon rendering
1 month ago
chrislu
c56a0a0ebd
fix: handle 'default' collection filter in cluster volumes page
- Update matchesCollection to recognize 'default' as filter for empty collection
- Remove incorrect conversion of 'default' to empty string in handlers
- Fixes issue where ?collection=default would show all collections instead of just default collection
1 month ago