Chris LuandClaude Opus 5.5 a0f30afe5f s3: keep service account keys when a pushed identity replaces its parent (#12394) ...

* s3: keep service account keys when a pushed identity replaces its parent

Service account changes push the parent user, whose proto carries only
the user's own keys. The merge replaced the cached parent with that
proto and dropped every service account key until a restart. Read the
parent's service accounts from the credential store so the push
rebuilds them, deleted and disabled ones included.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3: test that a parent identity push keeps its service account keys

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3: test a sibling service account survives a deletion push

Also check the restored secret and status, not just the key.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-04 05:26:07 -08:00

..

admin

admin: credit an unitemized slot to a pending job only after a later heartbeat (#12385)

2026-11-03 20:45:39 -08:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

weed-vector: gRPC TLS to the masters and for the gateway (#12368)

2026-11-03 11:42:49 -08:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec.balance: spread concurrent shard moves over target nodes (#12283)

2026-10-31 15:05:32 -07:00

filer

filer: clear a dead test replica's reachability record before closing it (#12387)

2026-11-03 20:47:43 -08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: refuse to attach opens to a draining file handle (#12219)

2026-10-29 16:06:57 -07:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

master: tell a warming-up Assign or LookupVolume client when warm-up ends (#12386)

2026-11-03 20:46:58 -08:00

pb

vector: keep ListVectors pages and segments flat as an index grows; read only keys in GetVectors (#12300)

2026-11-01 11:57:44 -08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

admin: explain detection cooldowns and skipped scans (#12185)

2026-10-28 22:55:36 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote: reuse one guarded remote storage client per configuration (#12189)

2026-10-29 00:57:37 -07:00

replication

filer.sync: stop chunk retries with the same supersession check the skip uses (#12367)

2026-11-03 10:43:22 -08:00

s3api

s3: keep service account keys when a pushed identity replaces its parent (#12394)

2026-11-04 05:26:07 -08:00

security

s3vectors: vend write credentials to index data only to the vector engine and Lance worker (#12316)

2026-11-01 18:49:01 -08:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

master: tell a warming-up Assign or LookupVolume client when warm-up ends (#12386)

2026-11-03 20:46:58 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

remote.uncache, remote.meta.sync, remote.cache: keep local writes that land while they run (#12382)

2026-11-03 14:53:42 -08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

fix(storage): update deletion metrics in SortedFileNeedleMap.Delete (#12363) (#12364)

2026-11-03 08:05:45 -08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: refresh EC file and delete counts from heartbeats (#12378)

2026-11-03 12:48:16 -08:00

util

master: tell a warming-up Assign or LookupVolume client when warm-up ends (#12386)

2026-11-03 20:46:58 -08:00

wdclient

s3: drop retired volume servers from the gateway location cache (#12281)

2026-10-31 15:05:00 -07:00

worker

iceberg maintenance: cache a remote-only file before reading it (#12191)

2026-10-29 11:13:23 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00