mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2026-11-07 20:47:46 +01:00
* lance catalog: in-process DescribeTable for trusted callers DescribeTable and DescribeTableInternal resolve a table's location and storage options without the HTTP layer; the internal form runs the lookup through a trusted manager so the caller's catalog grants do not gate a resolution its own permission already authorized. Same code as the Enterprise repository. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * vector.proto: Table carries its location and storage options The gateway resolves the table it addresses, so the engine can open it without a describe round trip of its own. Both fields are optional; an empty location means the engine looks the table up as before. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * lance catalog: test the in-process describe Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3vectors: resolve the table before calling the engine The gateway describes the table in process, through the trusted catalog manager, and sends its location and storage options with every engine call. Storage options are vended for the caller's principal, as the Enterprise router does for queries. A catalog failure answers with the code the engine would have given. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: open a table at the location the gateway sent A request whose table carries a location is opened there, with the storage options the gateway vended over the engine's fallback; the catalog is described only for a table that comes without one, as from an older gateway. dataset::open_at and dataset::drop_at take a description the caller already holds. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3vectors e2e: run the engine without a catalog VECTOR_ENGINE_NO_CATALOG=1 gives the engine an unreachable catalog URL; every CI leg sets it, so the suite proves the gateway resolves each table it sends. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * lance catalog: an internal describe may write a vector index With credential vending on, the options vended to the engine followed the caller's s3tables grants, which never allow writing the vector namespace, so every write the gateway sent would have run with read-only credentials and reads would have lost their version lease. The engine is that namespace's writer and the caller's vector permission authorized the operation, so an internal describe of a vector table vends write-capable options; other namespaces keep the UpdateTable check. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3: resolve tables for the engine only while the catalog runs With -port.lance=0 the gateway has no catalog to resolve through; the engine then keeps looking tables up itself, as before. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * lance catalog: a deregistered table describes as NoSuchTable So the gateway answers NotFoundException for it, not InternalFailure. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: trust a sent location only for a colocated vector index A caller that reaches the engine could otherwise name any storage the engine's credentials cover. A location is taken from the request only when the id names a vector index and the location is its colocated path, which the engine writes already; anything else is described through the catalog as before. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: scope the read cache by storage endpoint The cache was keyed by bucket and path alone, so the same path reached through another endpoint would have shared entries. Each open wraps the store with the cache scoped to the endpoint its options name. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: keep a configured endpoint over one a request names A caller that reaches the engine could otherwise send its fallback credentials to an endpoint of the caller's choosing. When the engine's --storage-option names an aws_endpoint, a table whose request names another one is described through the catalog instead. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: use request options only where credentials cannot leave A request's storage options are taken only when they hold the keys a gateway's describe produces, so a proxy or an endpoint alias cannot route the engine's credentials elsewhere, and an endpoint only when it is the configured one or the engine holds no credentials to send. Anything else sends the table to the catalog. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3vectors e2e: give the engine its endpoint with its credentials Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: a drop checks the request's options like an open Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: an unpinned endpoint needs the request to sign for itself Without configured credentials the S3 store still signs with the AWS default chain, so an endpoint from a request is taken only when the request skips signing or brings its own credentials. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: a trailing slash does not unpin the endpoint, and say so A configured aws_endpoint written with a trailing slash matched nothing the gateway sends, so every table fell back to the catalog in silence. The comparison ignores the slash, and a fallback for a resolved table is logged at debug. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: resolved by the gateway, or refused The engine no longer has a catalog: --namespace and --filer-signing-key are gone, a request whose table names no location is InvalidArgument, and one whose location is not the index's own or whose storage options the engine's credentials must not be used with is PermissionDenied. A drop removes the colocated path it was given. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3: the catalog resolves vector tables whether or not its port is served newLanceServer builds the Lance catalog for the S3 Vectors API; the listener on -port.lance is optional. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3vectors tests: start the engine without a catalog Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * s3: the aux listener test builds the catalog before serving it Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK * weed-vector: an unpinned endpoint takes only credentials the request signs with alone Lance fills an option a request leaves out from the engine's environment, under any of object_store's names for it (TOKEN, SESSION_TOKEN, ...), and asks the AWS default chain when the key pair is incomplete. A request that named its own endpoint with only an access key id, or a key pair while the engine's environment held a session token, would have sent the engine's credentials there. Such a request now needs a full key pair, and its own session token whenever the environment would supply one. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * weed-vector: accept --namespace and --filer-signing-key, ignored Both flags shipped in 4.52 and are documented, so dropping them made an existing command line exit at startup with an unexpected-argument error. They are kept hidden and ignored, with a warning. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * s3vectors design: the engine is started without a catalog Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * weed-vector: the trust check takes the environment it reads The options test read the process environment through signs_alone, so a host exporting AWS_SESSION_TOKEN or TOKEN failed it. The caller now passes the variable names in; describe passes the engine's own. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * weed-vector: log both endpoints when a request's options are refused The gateway turns the PermissionDenied into a bare AccessDenied and logs nothing, so a pinned aws_endpoint written in another form than the one the gateway sends (host case, a default port, an IP for a name) failed every call with no trace of which value differed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * s3: the Lance catalog sets the credential role whether or not Iceberg runs -iceberg.credentialRole reached the S3 server only while the Iceberg listener started, so with -port.iceberg=0 the Lance catalog installed its vendor but vending stayed off, and the vector engine got no credentials for the tables the gateway resolves. Both catalogs now set the role through one helper. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * s3: set the credential role once, before either catalog serves Both catalogs wrote the role as they were built; the second write landed while the first was already serving requests that read it. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011UpvafvK8JpagF94MHWqwK --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
139 lines
3.6 KiB
Protocol Buffer
139 lines
3.6 KiB
Protocol Buffer
syntax = "proto3";
|
|
|
|
package vector_pb;
|
|
|
|
option go_package = "github.com/seaweedfs/seaweedfs/weed/pb/vector_pb";
|
|
|
|
import "google/protobuf/struct.proto";
|
|
|
|
// The shared contract between the Go S3 gateway and the vector query engine.
|
|
// The public S3 Vectors API stays an AWS contract; this RPC is the internal
|
|
// boundary the design doc gives both editions.
|
|
service VectorService {
|
|
rpc CreateIndex(CreateIndexRequest) returns (CreateIndexResponse);
|
|
rpc DropIndex(DropIndexRequest) returns (DropIndexResponse);
|
|
rpc PutVectors(PutVectorsRequest) returns (PutVectorsResponse);
|
|
rpc GetVectors(GetVectorsRequest) returns (GetVectorsResponse);
|
|
rpc DeleteVectors(DeleteVectorsRequest) returns (DeleteVectorsResponse);
|
|
rpc ListVectors(ListVectorsRequest) returns (ListVectorsResponse);
|
|
rpc QueryVectors(QueryVectorsRequest) returns (QueryVectorsResponse);
|
|
}
|
|
|
|
enum DistanceMetric {
|
|
DISTANCE_METRIC_UNSPECIFIED = 0;
|
|
L2 = 1;
|
|
COSINE = 2;
|
|
DOT_PRODUCT = 3;
|
|
}
|
|
|
|
// Table addresses a Lance table through the namespace: the id parts as the
|
|
// namespace catalog joins them. The gateway resolves the table before it
|
|
// calls, so the engine opens it without a catalog round trip of its own.
|
|
message Table {
|
|
repeated string id = 1;
|
|
// Dataset version to pin reads to; 0 means latest.
|
|
uint64 version = 2;
|
|
// The table's Lance location, as the catalog describes it.
|
|
string location = 3;
|
|
// object_store options from describe_table (vended creds / endpoint).
|
|
map<string, string> storage_options = 4;
|
|
}
|
|
|
|
message CreateIndexRequest {
|
|
Table table = 1;
|
|
uint32 dimension = 2;
|
|
DistanceMetric distance_metric = 3;
|
|
repeated string non_filterable_metadata_keys = 4;
|
|
}
|
|
|
|
message CreateIndexResponse {
|
|
uint64 version = 1;
|
|
}
|
|
|
|
message DropIndexRequest {
|
|
Table table = 1;
|
|
}
|
|
|
|
message DropIndexResponse {}
|
|
|
|
message Vector {
|
|
string key = 1;
|
|
repeated float data = 2;
|
|
// JSON-typed metadata: numbers carry double precision, as on the wire.
|
|
google.protobuf.Struct metadata = 3;
|
|
}
|
|
|
|
message PutVectorsRequest {
|
|
Table table = 1;
|
|
repeated Vector vectors = 2;
|
|
}
|
|
|
|
message PutVectorsResponse {
|
|
uint64 version = 1;
|
|
}
|
|
|
|
message GetVectorsRequest {
|
|
Table table = 1;
|
|
repeated string keys = 2;
|
|
bool return_data = 3;
|
|
bool return_metadata = 4;
|
|
}
|
|
|
|
message GetVectorsResponse {
|
|
repeated Vector vectors = 1;
|
|
}
|
|
|
|
message DeleteVectorsRequest {
|
|
Table table = 1;
|
|
repeated string keys = 2;
|
|
}
|
|
|
|
message DeleteVectorsResponse {
|
|
uint64 version = 1;
|
|
}
|
|
|
|
message ListVectorsRequest {
|
|
Table table = 1;
|
|
uint32 max_results = 2;
|
|
string next_token = 3;
|
|
bool return_data = 4;
|
|
bool return_metadata = 5;
|
|
// A nonzero segment_count lists only the rows whose position modulo
|
|
// segment_count is segment_index; next_token stays a row position.
|
|
uint32 segment_count = 6;
|
|
uint32 segment_index = 7;
|
|
}
|
|
|
|
message ListVectorsResponse {
|
|
repeated Vector vectors = 1;
|
|
string next_token = 2;
|
|
// Set when segment_count was applied; an older engine ignores it.
|
|
bool segmented = 3;
|
|
}
|
|
|
|
message QueryVectorsRequest {
|
|
Table table = 1;
|
|
repeated float query_vector = 2;
|
|
uint32 top_k = 3;
|
|
// Lance SQL filter; empty means unfiltered. Metadata is one JSON
|
|
// `metadata` column, so the gateway translates S3 Vectors filter
|
|
// expressions onto it before they land here.
|
|
string filter = 4;
|
|
// Lance's post-filter escape hatch; off prefilters, matching S3 Vectors.
|
|
bool postfilter = 5;
|
|
bool return_metadata = 6;
|
|
bool return_distance = 7;
|
|
bool return_data = 8;
|
|
}
|
|
|
|
message QueryResult {
|
|
string key = 1;
|
|
float distance = 2;
|
|
google.protobuf.Struct metadata = 3;
|
|
repeated float data = 4;
|
|
}
|
|
|
|
message QueryVectorsResponse {
|
|
repeated QueryResult vectors = 1;
|
|
}
|