Chris Lu f40687b34e s3: tighten STS session token handling (#11383) ...

* s3api: test that a session token must not reveal its credential

* sts: derive secret access key with HMAC keyed on the signing key

* s3api: stop accepting STS session tokens as bearer credentials

* security: reject STS session tokens on filer and admin gRPC auth

* test: sign s3/iam framework requests with the session credential

* s3api: exercise the real auth pipeline in the end-to-end harness

2026-09-17 23:50:16 -07:00

..

certreload

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

guard_signing_key_test.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

guard_whitelist_test.go

Revert #9440 — volume admin fail-closed gate breaks multi-host clusters (#9472)

2026-05-12 16:00:44 -07:00

guard.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

jwt.go

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

tls_client_cert_test.go

grpc: optional client_cert/client_key for outgoing mTLS connections (#10747)

2026-08-13 13:15:20 -07:00

tls_reload.go

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tls_sni_test.go

fix: port in SNI address when using domainName instead of IP for master (#8500)

2026-03-04 07:05:45 -08:00

tls.go

grpc: optional client_cert/client_key for outgoing mTLS connections (#10747)

2026-08-13 13:15:20 -07:00