Chris Lu 65f2f1488a iam: test that groups and roles claims reach request-time policy evaluation ...

Drives the full path: AssumeRoleWithWebIdentity embeds the claims in the
session JWT, AuthenticateJWT restores them, and AuthorizeAction evaluates
ForAnyValue:StringEquals on jwt:groups / jwt:roles per bucket. The mock
OIDC provider now carries token claims through and surfaces roles,
matching the real provider.

2026-07-08 01:53:37 -07:00

..

admin

admin: browse Iceberg table data (#10227)

2026-07-03 14:02:44 -07:00

cluster

s3: route object reads to the key's owner filer (#9806)

2026-06-03 00:12:28 -07:00

command

admin: respect filerGroup for cluster discovery (#10170)

2026-07-01 10:56:58 -07:00

credential

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

filer

filer: keep the internal .system folder out of the per-bucket store path (#10248)

2026-07-06 11:25:50 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam: test that groups and roles claims reach request-time policy evaluation

2026-07-08 01:53:37 -07:00

iamapi

fix(iam): return a valid user ARN from CreateUser and GetUser (#9794)

2026-06-02 22:01:57 -07:00

images

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

kms

kms: cache decrypted data keys so cache_enabled/cache_ttl take effect (#10173)

2026-06-30 21:23:53 -07:00

mount

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

mq

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

notification

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

operation

mount: re-assign to a live volume when a write can't land (#10239)

2026-07-06 11:41:26 -07:00

pb

filer: stream offloaded metadata-log entries to fix concurrent-write OOM (#10203)

2026-07-02 12:34:03 -07:00

plugin/worker

Treat co-located volume servers as one fault domain when balancing and allocating (#9854)

2026-06-07 14:14:45 -07:00

query

s3: invalidate stale reader cache locations on chunk read failure (#10156)

2026-06-30 13:27:49 -07:00

remote_storage

fix(remote/gcs): tolerate already-deleted object in DeleteFile (#10151)

2026-06-30 07:52:25 -07:00

replication

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

s3api

iam: test that groups and roles claims reach request-time policy evaluation

2026-07-08 01:53:37 -07:00

security

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

volume: clear remote flag when tiering a volume back to local (#10262)

2026-07-07 23:03:17 -07:00

sftpd

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

shell

feat(shell): add -delete option to remote.copy.local (#10228)

2026-07-04 10:50:32 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

feat(metrics): Add EC rebuild/reconstruct Prometheus metrics (#10124)

2026-06-27 22:01:36 -07:00

storage

volume: reload a remote-tiered volume without re-entering the data lock (#10266)

2026-07-08 01:27:10 -07:00

telemetry

Prevent split-brain: Persistent ClusterID and Join Validation (#8022)

2026-01-18 14:02:34 -08:00

topology

master: repair the lookup index after a vacuum that raced a disconnect (#10226)

2026-07-03 14:42:33 -07:00

util

filer: share one log-buffer window snapshot across all subscriber reads (#10267)

2026-07-08 01:50:51 -07:00

wdclient

Fix stale cache fallback for empty volume locations in wdclient (#10081)

2026-06-24 16:31:32 -07:00

worker

worker: project the moved volume when gating on disk fullness (#10171)

2026-06-30 20:08:19 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00