From 3d872a14161fd787b556a4ab1436bdae0ac05635 Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Mon, 18 May 2026 13:41:30 -0700 Subject: [PATCH] fix(filer): load -s3.config static identities into the filer's CredentialManager (#9537) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit When weed filer started its embedded S3 gateway with -s3 -s3.config, only the S3 server loaded the s3.json static identities — the filer's own CredentialManager stayed empty, so the IAM gRPC service backing the admin UI and weed shell returned only dynamic users. Mirror the wiring weed server already does and hand the same config path to the filer. --- weed/command/filer.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/weed/command/filer.go b/weed/command/filer.go index 877302065c..8412feaf48 100644 --- a/weed/command/filer.go +++ b/weed/command/filer.go @@ -236,6 +236,12 @@ func runFiler(cmd *Command, args []string) bool { filerSftpOptions.resolvePaths() util.LoadSecurityConfiguration() + // Share the S3 static identity config file with the filer regardless of + // whether the embedded S3 gateway runs on this node: the IAM gRPC service + // the admin UI and weed shell talk to is wired up unconditionally, and it + // needs the same identities the S3 server would load from -s3.config. + f.s3ConfigFile = filerS3Options.config + switch { case *f.metricsHttpIp != "": // noting to do, use f.metricsHttpIp