Chris LuandClaude Opus 5.5 6f10339dd2 credential: migrate the legacy IAM file without overwriting newer entries ...

The migration wrote every identity, service account and group from the
snapshot the load read, over whatever the per-entry files held by then, so
a revoke or delete landing in between was undone for good. It now migrates
only the legacy file's own entries, creates each per-entry file only when
none exists, and waits for the next load when the legacy file changed
after the snapshot.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-13 02:52:41 -08:00

..

admin

admin: an arrow icon for vector buckets (#12602)

2026-11-12 22:11:13 -08:00

cluster

fix(mount): refuse stale whole-entry content flushes (#12594)

2026-11-12 16:15:08 -08:00

command

replication: keep a local sink path the source recreated after a delete (#12581)

2026-11-12 09:23:54 -08:00

credential

credential: migrate the legacy IAM file without overwriting newer entries

2026-11-13 02:52:41 -08:00

ec

shell: parallel moves and a per-run limit for volumeServer.evacuate (#12561)

2026-11-11 10:18:51 -08:00

filer

filer: gzip metadata log pieces before uploading them (#12580)

2026-11-12 09:13:50 -08:00

filer_client

…

glog

…

iam

s3: resolve a role session's aws:username from its user, not its session name (#12572)

2026-11-11 15:32:13 -08:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

fix(mount): preserve appended chunks during stale attribute updates (#12593)

2026-11-12 16:28:47 -08:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

operation: probe octet-stream uploads for gzip like untyped ones (#12584)

2026-11-12 09:16:55 -08:00

pb

weed-vector: advertise its metrics port when registering (#12604)

2026-11-12 22:36:02 -08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

filer.remote.sync: bounded filer lookups, one chunk cache per process (#12441)

2026-11-06 09:35:16 -08:00

replication

replication: keep a local sink path the source recreated after a delete (#12581)

2026-11-12 09:23:54 -08:00

s3api

s3api: sign every operation subresource in signature V2 (#12575)

2026-11-12 17:22:59 -08:00

security

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

sequence

…

server

fix(mount): refuse stale whole-entry content flushes (#12594)

2026-11-12 16:15:08 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

shell: confirm trim survivors still serve the volume before deleting (#12590)

2026-11-12 09:32:37 -08:00

static

…

stats

filer: a full remote-deletion tombstone table keeps the lazy fetch off (#12440)

2026-11-06 13:28:47 -08:00

storage

volume: refuse a tier upload whose .dat was written during the copy (#12562)

2026-11-11 10:19:06 -08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: take dn.Lock when a heartbeat links a new disk type (#12535)

2026-11-10 12:17:21 -08:00

util

s3, filer: bound the wait for an upload slot (#12559)

2026-11-11 10:17:18 -08:00

wdclient

wdclient: keep a shared volume lookup alive when its first caller leaves (#12579)

2026-11-12 09:15:01 -08:00

worker

ec_balance: make the per-rack cap on global moves a worker setting (#12478)

2026-11-07 16:01:12 -08:00

Makefile

…

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00