Chris Lu
|
f9311a3422
|
s3api: fix static IAM policy enforcement after reload (#8532)
* s3api: honor attached IAM policies over legacy actions
* s3api: hydrate IAM policy docs during config reload
* s3api: use policy-aware auth when listing buckets
* credential: propagate context through filer_etc policy reads
* credential: make legacy policy deletes durable
* s3api: exercise managed policy runtime loader
* s3api: allow static IAM users without session tokens
* iam: deny unmatched attached policies under default allow
* iam: load embedded policy files from filer store
* s3api: require session tokens for IAM presigning
* s3api: sync runtime policies into zero-config IAM
* credential: respect context in policy file loads
* credential: serialize legacy policy deletes
* iam: align filer policy store naming
* s3api: use authenticated principals for presigning
* iam: deep copy policy conditions
* s3api: require request creation in policy tests
* filer: keep ReadInsideFiler as the context-aware API
* iam: harden filer policy store writes
* credential: strengthen legacy policy serialization test
* credential: forward runtime policy loaders through wrapper
* s3api: harden runtime policy merging
* iam: require typed already-exists errors
|
2026-03-06 12:35:08 -08:00 |
|
Aleksey Kosov
|
165af32d6b
|
added context to filer_client method calls (#6808)
Co-authored-by: akosov <a.kosov@kryptonite.ru>
|
2025-05-22 09:46:49 -07:00 |
|
chrislu
|
70a4c98b00
|
refactor filer_pb.Entry and filer.Entry to use GetChunks()
for later locking on reading chunks
|
2022-11-15 06:33:36 -08:00 |
|
chrislu
|
26dbc6c905
|
move to https://github.com/seaweedfs/seaweedfs
|
2022-07-29 00:17:28 -07:00 |
|
guosj
|
5469efa336
|
close SkipCheckParentDirectory flag
|
2022-07-11 09:44:48 +08:00 |
|
chrislu
|
4fd5f96598
|
filer: remove replication, collection, disk_type info from entry metadata
these metadata can change and are not used
|
2022-06-06 00:39:35 -07:00 |
|
chrislu
|
6886167d5f
|
minor optimization
|
2022-03-17 00:03:28 -07:00 |
|
chrislu
|
85c1615b43
|
filer read empty file may cause OOM in some cases
fix https://github.com/chrislusf/seaweedfs/issues/2641
|
2022-02-07 23:08:54 -08:00 |
|
Chris Lu
|
ecce300964
|
s3 config read via grpc
|
2021-07-09 02:48:03 -07:00 |
|
Chris Lu
|
ac71117ee6
|
revert PR #1903 avoid http error: superfluous response.WriteHeader
|
2021-05-05 15:11:39 -07:00 |
|
Konstantin Lebedev
|
011e6e90ee
|
Merge branch 'upstreamMaster' into iamapipr
|
2021-04-06 13:50:33 +05:00 |
|
Konstantin Lebedev
|
9f26f2815c
|
SaveAs S3 Configuration
|
2021-03-25 12:34:11 +05:00 |
|
Konstantin Lebedev
|
eb54993a4e
|
Merge branch 'upstreamMaster' into check_chunkviews_mr
# Conflicts:
# weed/filer/filechunk_manifest.go
# weed/filer/stream.go
# weed/replication/repl_util/replication_util.go
# weed/util/fasthttp_util.go
|
2021-03-16 15:29:49 +05:00 |
|
Konstantin Lebedev
|
06da02739d
|
CheckAllChunkViews() for HEAD requests only
|
2021-03-16 14:15:17 +05:00 |
|
Chris Lu
|
4b1ed227d1
|
revert fasthttp changes
related to https://github.com/chrislusf/seaweedfs/issues/1907
|
2021-03-16 00:33:14 -07:00 |
|
Chris Lu
|
7d9dc3c6a2
|
use fasthttp lib to read
|
2021-02-12 05:59:52 -08:00 |
|
Chris Lu
|
4f31c1bb94
|
go fmt
|
2020-12-22 02:34:08 -08:00 |
|
Chris Lu
|
765b3ef1be
|
save /etc/iam/identity.json inside filer store
|
2020-12-10 00:15:22 -08:00 |
|
Chris Lu
|
a9c619c270
|
added error handling for saving
|
2020-12-09 01:34:24 -08:00 |
|
Chris Lu
|
01e2da5782
|
refactoring
|
2020-12-06 23:16:20 -08:00 |
|