Commit Graph

  • 1046bd009a
    feat: Optional path-prefix and method scoping for Filer HTTP JWT (#8014) master Chris Lu 2026-01-12 13:21:48 -0800
  • e0028303b1 Use URL.Path in logs to avoid leaking query params #8014 Chris Lu 2026-01-12 12:57:17 -0800
  • 7e958978ee Address PR feedback: replace debug logging and improve tests Chris Lu 2026-01-12 12:55:34 -0800
  • d554cdeb64 Fix security vulnerability and improve test error handling Chris Lu 2026-01-12 12:52:19 -0800
  • 53d054258a Implement optional path-prefix and method scoping for Filer HTTP JWT Chris Lu 2026-01-12 12:47:48 -0800
  • 60f7dbec4d
    chore(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 (#8012) dependabot[bot] 2026-01-12 12:40:42 -0800
  • 269092c8c3
    fix(gcs): resolve credential conflict in remote storage mount (#8013) Chris Lu 2026-01-12 12:22:42 -0800
  • 64a34ff69b
    chore(deps): bump github.com/shirou/gopsutil/v4 from 4.25.11 to 4.25.12 (#8011) dependabot[bot] 2026-01-12 12:20:52 -0800
  • 9ccc844df0
    chore(deps): bump github.com/klauspost/reedsolomon from 1.12.6 to 1.13.0 (#8010) dependabot[bot] 2026-01-12 12:20:23 -0800
  • 138371ce4a
    chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#8009) dependabot[bot] 2026-01-12 12:20:10 -0800
  • 7ddaf9667d fix(gcs): use %w for error wrapping in gcs_storage_client.go #8013 Chris Lu 2026-01-12 12:12:09 -0800
  • ac404e714e fix(gcs): resolve credential conflict in remote storage mount Chris Lu 2026-01-12 12:09:06 -0800
  • 4bb1f15c6b
    chore(deps): bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33 #8012 dependabot[bot] 2026-01-12 20:04:30 +0000
  • d6417c9167
    chore(deps): bump github.com/parquet-go/parquet-go from 0.26.3 to 0.26.4 (#8008) dependabot[bot] 2026-01-12 11:56:56 -0800
  • e39cadb971
    chore(deps): bump github.com/shirou/gopsutil/v4 from 4.25.11 to 4.25.12 #8011 dependabot[bot] 2026-01-12 19:29:48 +0000
  • 114eb11673
    chore(deps): bump github.com/klauspost/reedsolomon from 1.12.6 to 1.13.0 #8010 dependabot[bot] 2026-01-12 19:29:40 +0000
  • 2acf49bbdb
    chore(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 #8009 dependabot[bot] 2026-01-12 19:29:36 +0000
  • f7d4078d27
    chore(deps): bump github.com/parquet-go/parquet-go from 0.26.3 to 0.26.4 #8008 dependabot[bot] 2026-01-12 19:29:24 +0000
  • 6b0eade6d4 storage: upgrade protobuf API in store_state.go Chris Lu 2026-01-12 10:49:27 -0800
  • 587e782feb storage: use non-blocking send to StateUpdateChan Chris Lu 2026-01-12 10:49:26 -0800
  • 2af293ce60
    Boostrap persistent state for volume servers. (#7984) Lisandro Pin 2026-01-12 19:49:59 +0100
  • ccda91cac0 storage: upgrade protobuf API in store_state.go pr/7984 Chris Lu 2026-01-12 10:49:27 -0800
  • 8bcf08aecf storage: use non-blocking send to StateUpdateChan Chris Lu 2026-01-12 10:49:26 -0800
  • 06391701ed
    Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003) Chris Lu 2026-01-12 10:45:24 -0800
  • 7b79e1d7c6 fix(sts): encapsulate TokenGenerator in STSService and add getter #8003 Chris Lu 2026-01-12 10:32:59 -0800
  • 08f00dfb1f fix(sts): use STSErrSTSNotReady when LDAP provider is missing Chris Lu 2026-01-12 10:30:29 -0800
  • 624fb923dd
    Update weed/s3api/s3api_sts.go Chris Lu 2026-01-12 10:29:13 -0800
  • 6559daeac5
    Update weed/iam/ldap/ldap_provider.go Chris Lu 2026-01-12 10:28:09 -0800
  • 92429d2d91
    Boostrap persistent state for volume servers. #7984 Lisandro Pin 2026-01-06 17:57:20 +0100
  • ee391069d7
    Merge aeb12f4617 into d7c30fdb2b #8006 Lisandro Pin 2026-01-12 10:22:35 -0300
  • aeb12f4617
    Implement a `VolumeEcStatus()` RPC for volume servers. #8006 Lisandro Pin 2026-01-12 11:45:08 +0100
  • da4c048166 feat(sts): add support for LDAPProviderName parameter Chris Lu 2026-01-12 01:59:45 -0800
  • 252e0abb72 chore(iam): improved error wrapping and test parameterization Chris Lu 2026-01-12 01:47:48 -0800
  • 8bd6530c98 fix(iam): fix ldap connection leaks and add insecure warning Chris Lu 2026-01-12 01:47:43 -0800
  • d787b3a45f fix(sts): use crypto/rand for secure credentials and extract constants Chris Lu 2026-01-12 01:47:37 -0800
  • e978195186 fix(s3api): ensure IAM matcher checks query string on ParseForm error Chris Lu 2026-01-12 01:47:33 -0800
  • fbf318a3ba test(s3api): implement ValidateTrustPolicyForPrincipal in MockIAMIntegration Chris Lu 2026-01-12 01:41:27 -0800
  • 4b8dc318b0 test(iam): refactor STS tests to use AWS SDK signer Chris Lu 2026-01-12 01:35:09 -0800
  • 5dcc2f8642 feat(sts): implement strict trust policy validation for AssumeRole Chris Lu 2026-01-12 01:35:04 -0800
  • c838a66f0c refactor(iam): use mapstructure for LDAP config parsing Chris Lu 2026-01-12 01:34:58 -0800
  • b963b31a19 chore(iam): cleanup debug prints and fix test config port Chris Lu 2026-01-12 01:34:53 -0800
  • 22e76a5dc9 debug Chris Lu 2026-01-12 00:52:41 -0800
  • b48cbfc708 update tests Chris Lu 2026-01-12 00:40:20 -0800
  • c1e7a89312 feat(iam/ldap): make pool size configurable and add audience support Chris Lu 2026-01-12 00:17:34 -0800
  • 678aeeff0d refactor(s3api): extract shared STS credential generation logic Chris Lu 2026-01-12 00:17:28 -0800
  • b0f63c0a69 fix(s3api): include account ID in STS AssumedRoleUser ARN Chris Lu 2026-01-12 00:07:34 -0800
  • 113ccbfe4a fix(iam/ldap): populate standard TokenClaims fields in ValidateToken Chris Lu 2026-01-12 00:07:24 -0800
  • ccedf7c32e fix(iam/ldap): fix connection pool race and rebind corruption Chris Lu 2026-01-12 00:07:11 -0800
  • c7f466a5ab fix: ensure iam_config.json exists in setup target for CI Chris Lu 2026-01-11 21:14:56 -0800
  • ea68ee021d fix: update distributed tests to use valid Keycloak users Chris Lu 2026-01-11 21:12:30 -0800
  • 58bba419e7 fix: update tests to use public TokenGenerator field Chris Lu 2026-01-11 21:03:01 -0800
  • 52e121bbba fix: correct TokenGenerator access in STS handlers Chris Lu 2026-01-11 20:58:27 -0800
  • a5dd98ee8d feat: implement LDAP connection pooling to prevent resource exhaustion Chris Lu 2026-01-11 20:47:31 -0800
  • 31df6b1ac4 fix: address PR feedback (Round 5) - JWT tokens, ARN formatting, PrincipalArn Chris Lu 2026-01-11 20:46:10 -0800
  • 207e031811 fix: address PR feedback (Round 4) - LDAP hardening, Authz check & Routing fix Chris Lu 2026-01-11 20:31:49 -0800
  • 4236e141f2 fix: address PR feedback (Round 3) - LDAP connection improvements & build fix Chris Lu 2026-01-11 19:55:05 -0800
  • 8275ab917e fix: address PR feedback (Round 2) - config validation & provider improvements Chris Lu 2026-01-11 19:53:26 -0800
  • e34ea6b54a fix: address PR review security issues for STS handlers Chris Lu 2026-01-11 19:40:35 -0800
  • 38d1576158
    Merge 4e580b322f into d7c30fdb2b #7934 lif 2026-01-12 11:33:17 +0900
  • ce9431e50b
    Merge 0e16c4aaa6 into d7c30fdb2b #7998 Walnuts 2026-01-12 09:23:44 +0900
  • e214c055f0 fix: update IAM matcher to exclude STS actions from interception Chris Lu 2026-01-11 14:20:04 -0800
  • 13efe555e8 feat: implement AssumeRole and AssumeRoleWithLDAPIdentity STS actions Chris Lu 2026-01-11 14:09:47 -0800
  • a487284d60 test: add integration tests for AssumeRole and AssumeRoleWithLDAPIdentity STS actions Chris Lu 2026-01-11 14:09:29 -0800
  • d7c30fdb2b
    fix: admin does not show all master servers #7999 (#8002) Chris Lu 2026-01-11 12:31:46 -0800
  • bdb6844a9e fix: admin does not show all master servers #7999 #8002 Chris Lu 2026-01-11 12:17:33 -0800
  • 844859de7f
    fix: add filer fallback after consecutive connection failures (#8000) Sheya Bernstein 2026-01-11 20:14:27 +0000
  • 8740a087b9
    fix: apply tpl function to all component extraEnvironmentVars (#8001) Sheya Bernstein 2026-01-11 20:14:16 +0000
  • 2b5e951390 use context.WithoutCancel to avoid context cancellation when the client connection is closed Chris Lu 2026-01-11 11:59:44 -0800
  • c78c75585f
    Merge 09d1b0922d into ce6e9be66b #4975 zehweh 2026-01-11 20:37:53 +0100
  • 70e8c63794
    Merge edbb237e7a into ce6e9be66b #7183 Chris Lu 2026-01-11 17:13:27 +0100
  • 29c24e482f fix: apply tpl function to all component extraEnvironmentVars #8001 Sheya Bernstein 2026-01-11 00:30:42 +0000
  • aad8cc9bb7 fix: add filer fallback after consecutive connection failures #8000 Sheya Bernstein 2026-01-11 00:15:16 +0000
  • e953e4e37f Publish seaweedfs-4.0.406.tgz gh-pages chrislusf 2026-01-10 22:18:48 +0000
  • ce6e9be66b 4.06 4.06 Chris Lu 2026-01-10 12:08:16 -0800
  • 0e16c4aaa6
    Align the setting field names with gocql's SSLOpts. #7998 walnuts1018 2026-01-11 00:28:49 +0900
  • 8682b3cd9f
    fix: use 9142 port in tls connection walnuts1018 2026-01-10 18:50:07 +0900
  • 379c032868
    Fix chown Input/output error on large file sets (#7996) Chris Lu 2026-01-09 18:02:59 -0800
  • 35977e119f Fix: Disable retry logic inside transactions #7996 Chris Lu 2026-01-09 15:18:35 -0800
  • 04202c6303 Refactor: Use %w for error wrapping and errors.As for extraction Chris Lu 2026-01-09 13:30:07 -0800
  • 8f5baa8bcf Fix syntax error: missing closing brace Chris Lu 2026-01-09 13:05:08 -0800
  • 736c60fdaa Fix chown Input/output error on large file sets (Fixes #7911) Chris Lu 2026-01-09 13:02:40 -0800
  • 88e9e2c471
    fix: Invalid volume mount conditional in filer template (#7992) Nicholas Boyd Isacsson 2026-01-09 21:10:40 +0100
  • ad76487e9d
    Fix special characters in admin-generated secret keys (#7994) Chris Lu 2026-01-09 11:55:17 -0800
  • 9a4e3f3ef3 Fix special characters in admin-generated secret keys #7994 Chris Lu 2026-01-09 11:49:53 -0800
  • 82b76fc9eb
    feat: add TLS configuration options for Cassandra2 store walnuts1018 2026-01-09 23:41:00 +0900
  • d666b621bf
    fix: Set cipher for filerS3Options in filer.go #7993 Eliah Rusin 2026-01-09 12:11:30 +0300
  • 2473c7ceff
    fix: Invalid volume mount conditional in filer template #7992 Nicholas Boyd Isacsson 2026-01-09 09:29:39 +0100
  • 1ea6b0c0d9 cleanup: deduplicate environment variable credential loading Chris Lu 2026-01-08 20:35:37 -0800
  • 7f1182472a fix: enable dual loading of static and dynamic IAM configuration Chris Lu 2026-01-08 20:22:04 -0800
  • 451b897d56 fix: support loading static config from IamConfig option for mini mode Chris Lu 2026-01-08 20:17:33 -0800
  • 48ded6b965 fix: allow environment variable fallback when filer config is empty Chris Lu 2026-01-08 20:11:57 -0800
  • 4e835a1d81
    fix(s3api): ensure S3 configuration persistence and refactor authorization tests (#7989) Chris Lu 2026-01-08 19:29:54 -0800
  • f4d1c5729f fix: prevent duplicates and race conditions in merge logic #7989 Chris Lu 2026-01-08 19:17:15 -0800
  • 448d927ece fix: address PR review comments for static config merge logic Chris Lu 2026-01-08 19:05:28 -0800
  • b04c93f9a9 refactor(s3api): implement merge-based static config with immutable identities Chris Lu 2026-01-08 18:58:34 -0800
  • 596c8b8f0c fix(s3api): ensure static config file takes precedence over dynamic updates Chris Lu 2026-01-08 18:51:10 -0800
  • 6bf0c16862 fix admin copy text functions Chris Lu 2026-01-08 18:44:36 -0800
  • abfa64456b
    Fix STS authorization in streaming/chunked uploads (#7988) Chris Lu 2026-01-08 17:06:56 -0800
  • a3ee803491 fix(s3api): ensure static config file takes precedence and refactor tests #7988 Chris Lu 2026-01-08 16:32:11 -0800
  • 0acd5205ce Refactor tests to use VerifyActionPermission directly Chris Lu 2026-01-08 15:29:56 -0800