Alessandro ZanattaandChris Lu 5f77a0b67e admin: allow insecurely binding to any IP if -allowInsecureNoAuth is set (#11228) ...

* admin: allow insecurely binding to any IP if -allowInsecureNoAuth is set

* admin: rename -allowInsecureNoAuth to -allowInsecureBind

The new flag name is shorter and clearer: it describes what is being
allowed (an insecure bind to a non-loopback address) without the
redundant "NoAuth" suffix.

---------

Co-authored-by: Chris Lu <chris.lu@gmail.com>

2026-09-08 16:57:44 -07:00

..

admin

admin: reject IAM policy deletion while still attached to a user/group (#11230)

2026-09-08 16:16:01 -07:00

cluster

filer: keep a moved key on its prior owner while the ring settles (#11108)

2026-09-02 19:40:53 -07:00

command

admin: allow insecurely binding to any IP if -allowInsecureNoAuth is set (#11228)

2026-09-08 16:57:44 -07:00

credential

s3: gate IAM-cache gRPC RPCs behind admin Bearer auth (#11190)

2026-09-06 12:21:51 -07:00

ec

shell: parse every collection filter the same way (#10955)

2026-08-25 18:03:52 -07:00

filer

filer/postgres: create filemeta table on startup via createTable config (#11229)

2026-09-08 16:17:02 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

sts: session duration no longer clamped to the web identity token exp (#11048)

2026-08-31 10:22:06 -07:00

iamapi

iam: authorize IAM management actions as IAM actions (#10593)

2026-08-05 17:08:21 -07:00

images

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

kms

kms: cache decrypted data keys so cache_enabled/cache_ttl take effect (#10173)

2026-06-30 21:23:53 -07:00

mount

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

mq

filer: authorize the chunk proxy and the root listing like the rest of the filer port (#11152)

2026-09-04 16:39:36 -07:00

notification

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

operation

volume: avoid read-only replica write targets (#11195)

2026-09-07 09:23:56 -07:00

pb

volume: avoid read-only replica write targets (#11195)

2026-09-07 09:23:56 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

shell: reset noLock in the admin script dispatcher too (#11059)

2026-08-31 23:14:37 -07:00

query

s3: invalidate stale reader cache locations on chunk read failure (#10156)

2026-06-30 13:27:49 -07:00

remote_storage

make the remote-mount cache wait configurable per mount (#11168)

2026-09-04 23:50:11 -07:00

replication

filer: authorize the chunk proxy and the root listing like the rest of the filer port (#11152)

2026-09-04 16:39:36 -07:00

s3api

fix(s3api): evaluate aws:SourceIp from the direct TCP peer, not forwarded headers (#11231)

2026-09-08 15:09:31 -07:00

security

grpc: optional client_cert/client_key for outgoing mTLS connections (#10747)

2026-08-13 13:15:20 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

admin: allow setting volume read-only and read/write modes (#11217)

2026-09-07 18:40:37 -07:00

sftpd

sftp: reject an empty password (#11095)

2026-09-02 11:33:25 -07:00

shell

shell: volume.check.disk — actionable verdict for diverged vacuumed replicas (#11197)

2026-09-06 23:25:28 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer.sync: export replication lag, event counters, and in-flight jobs (#11069)

2026-09-01 10:10:30 -07:00

storage

admin: allow setting volume read-only and read/write modes (#11217)

2026-09-07 18:40:37 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: fix fatal concurrent map read/write on VolumeLayout.crowded (#11216)

2026-09-07 13:47:22 -07:00

util

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

wdclient

volume: avoid read-only replica write targets (#11195)

2026-09-07 09:23:56 -07:00

worker

build(deps): bump github.com/twmb/avro from 1.7.2 to 1.8.0 (#11210)

2026-09-07 15:58:24 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00