Chris Lu 229ad84e2d s3tables: reject s3vectors resources in every ARN partition (#12215) ...

* s3tables: reject s3vectors resources in bucket policies

An arn:aws:s3vectors: Resource is as dead as an s3vectors action: the
evaluator compares against the generated s3tables ARN, so the rule the
writer believes enforced never matches.

* s3tables: reject s3vectors resources in every ARN partition

* s3tables: test wildcard-partition and mixed-list s3vectors resources

2026-10-29 13:38:53 -07:00

..

admin

admin: warn on dashboard when cluster nodes run mixed versions (#12196)

2026-10-29 00:13:51 -07:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

filer.sync: skip superseded replays before fetching any chunks (#12212)

2026-10-29 13:37:27 -07:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec.rebuild: remount shards the rebuild replaced, keep regenerated copies (#12193)

2026-10-29 00:58:30 -07:00

filer

remote: reuse one guarded remote storage client per configuration (#12189)

2026-10-29 00:57:37 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: keep the shared directory build out of the requester's context (#12206)

2026-10-29 11:32:57 -07:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

[Volume] Preserve request semantics in replica proxy reads (#12075)

2026-10-26 08:13:34 -07:00

pb

s3: evaluate multipart completion conditions under the object lock (#12209)

2026-10-29 11:46:25 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

admin: explain detection cooldowns and skipped scans (#12185)

2026-10-28 22:55:36 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote: reuse one guarded remote storage client per configuration (#12189)

2026-10-29 00:57:37 -07:00

replication

filer.sync: skip superseded replays before fetching any chunks (#12212)

2026-10-29 13:37:27 -07:00

s3api

s3tables: reject s3vectors resources in every ARN partition (#12215)

2026-10-29 13:38:53 -07:00

security

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

s3: evaluate all conditional write headers under the object lock (#12211)

2026-10-29 11:49:48 -07:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

vector: recheck master discovery quickly while no worker is cached (#12199)

2026-10-29 01:15:29 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

ec.rebuild: remount shards the rebuild replaced, keep regenerated copies (#12193)

2026-10-29 00:58:30 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

ec.rebuild: remount shards the rebuild replaced, keep regenerated copies (#12193)

2026-10-29 00:58:30 -07:00

util

util: do not bind outbound dials to a loopback -ip.bind (#12198)

2026-10-29 01:35:00 -07:00

wdclient

wdclient: regression test for the elapsed caller-deadline lookup path (#12154)

2026-10-28 01:08:04 -07:00

worker

iceberg maintenance: cache a remote-only file before reading it (#12191)

2026-10-29 11:13:23 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00