Chris LuandClaude Opus 5.5 8e577b8685 s3tables: match legacy subject patterns in table bucket policy principals ...

A policy written before issuer scoping can name role sessions by a pattern
over their bare OIDC subjects. Match such a pattern against the caller's
subject claim once that subject resolves to the session's scoped principal
under the single configured issuer.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-13 04:17:13 -08:00

..

admin

admin: an arrow icon for vector buckets (#12602)

2026-11-12 22:11:13 -08:00

cluster

fix(mount): refuse stale whole-entry content flushes (#12594)

2026-11-12 16:15:08 -08:00

command

replication: keep a local sink path the source recreated after a delete (#12581)

2026-11-12 09:23:54 -08:00

credential

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

ec

shell: parallel moves and a per-run limit for volumeServer.evacuate (#12561)

2026-11-11 10:18:51 -08:00

filer

filer: gzip metadata log pieces before uploading them (#12580)

2026-11-12 09:13:50 -08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

sts: drop a token-supplied aws:userid when a session has no parent user

2026-11-13 03:10:09 -08:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

fix(mount): preserve appended chunks during stale attribute updates (#12593)

2026-11-12 16:28:47 -08:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

operation: probe octet-stream uploads for gzip like untyped ones (#12584)

2026-11-12 09:16:55 -08:00

pb

weed-vector: advertise its metrics port when registering (#12604)

2026-11-12 22:36:02 -08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

filer.remote.sync: bounded filer lookups, one chunk cache per process (#12441)

2026-11-06 09:35:16 -08:00

replication

replication: keep a local sink path the source recreated after a delete (#12581)

2026-11-12 09:23:54 -08:00

s3api

s3tables: match legacy subject patterns in table bucket policy principals

2026-11-13 04:17:13 -08:00

security

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

fix(mount): refuse stale whole-entry content flushes (#12594)

2026-11-12 16:15:08 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

shell: confirm trim survivors still serve the volume before deleting (#12590)

2026-11-12 09:32:37 -08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer: a full remote-deletion tombstone table keeps the lazy fetch off (#12440)

2026-11-06 13:28:47 -08:00

storage

volume: refuse a tier upload whose .dat was written during the copy (#12562)

2026-11-11 10:19:06 -08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: take dn.Lock when a heartbeat links a new disk type (#12535)

2026-11-10 12:17:21 -08:00

util

s3, filer: bound the wait for an upload slot (#12559)

2026-11-11 10:17:18 -08:00

wdclient

wdclient: keep a shared volume lookup alive when its first caller leaves (#12579)

2026-11-12 09:15:01 -08:00

worker

ec_balance: make the per-rack cap on global moves a worker setting (#12478)

2026-11-07 16:01:12 -08:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00