Chris Lu 55ac46f7a9 admin: authenticate worker and plugin gRPC streams ...

Worker registration previously ran unauthenticated on any interface the
listener bound. The stream now requires a verified mTLS client
certificate or a Bearer token signed by jwt.filer_signing.key, and falls
back to local clients only when no key is configured.

2026-10-12 02:55:50 -07:00

..

admin

admin: authenticate worker and plugin gRPC streams

2026-10-12 02:55:50 -07:00

cluster

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

command

filer.remote.sync: upload a rewrite that lands in the remote mtime's second (#11715)

2026-10-11 22:33:45 +08:00

credential

s3: gate internal LifecycleDelete gRPC behind admin Bearer auth (#11291)

2026-09-13 13:07:10 -07:00

ec

ecbalancer: cap total shards per rack in Plan (#11623)

2026-10-07 20:35:25 +08:00

filer

filer: keep sequential prefetch within prefetchCount chunks (#11674)

2026-10-12 17:41:01 +08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam: manage OIDC providers and roles over the filer IAM gRPC service (#11523)

2026-10-03 08:36:19 +08:00

iamapi

s3api: align S3/IAM error responses with AWS (#11632)

2026-10-07 21:02:38 +08:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: unwind metadata lookups on FUSE interrupt (#11717)

2026-10-12 09:42:52 +08:00

mq

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

notification

kafka: honor notification.kafka.event_types (#11601)

2026-10-05 21:15:06 +08:00

operation

s3api: resolve volume data encryption in CopyObject SSE flows (#11646) (#11683)

2026-10-10 10:59:36 +08:00

pb

filer: converge peer metadata replication on restart (#11698)

2026-10-12 17:39:34 +08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

ec: strict_placement option so encode only runs while guarantees hold (#11656)

2026-10-08 22:05:02 +08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

fix: return NoSuchKey and drop stale entries when a remote-mounted object is gone from the remote (#11680)

2026-10-10 11:00:04 +08:00

replication

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

s3api

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

security

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

filer: converge peer metadata replication on restart (#11698)

2026-10-12 17:39:34 +08:00

sftpd

sftp: terminate the missing-ancestor permission walk at the root

2026-10-12 02:41:28 -07:00

shell

ec: strict_placement option so encode only runs while guarantees hold (#11656)

2026-10-08 22:05:02 +08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

storage

storage: unify needle-map counters across index loaders and warn on copy-count drift (#11701)

2026-10-10 22:31:46 +08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

vacuum: bound master vacuum RPCs with phase deadlines (#11579)

2026-10-03 12:32:42 +08:00

util

filer: bound metadata log flush retries during shutdown (#11596)

2026-10-06 09:51:02 +08:00

wdclient

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

worker

iceberg maintenance: v3 row lineage so v3 tables compact and rewrite manifests (#11653)

2026-10-12 09:29:02 +08:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00