Chris LuandDevin 78893d274a filer.sync: sign proxied chunk I/O from the per-side security file ...

The -a.security / -b.security files were used for gRPC TLS and the
HTTPS client but not for jwt.filer_signing, so filer-proxied chunk
reads and writes carried a token signed with the process-wide key and
failed authorization whenever the two clusters' keys differ.

LoadFilerJwtFromFile returns a FilerJwtProvider for each side's file,
which FilerSource and FilerSink now accept for proxied chunk reads and
writes. With no keys in the file or no flag, both fall back to the
process-wide jwt.filer_signing configuration as before.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-07 07:28:17 -07:00

..

scaffold

filer: option to store system metadata logs in their own collection (#11551)

2026-10-02 08:50:24 +08:00

admin.go

admin: default to 0.0.0.0 for authenticated HTTP, keep worker gRPC on loopback (#11314)

2026-09-14 14:04:35 -07:00

autocomplete.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

backends.go

storage: register tier backends at the binary composition root (#9989)

2026-06-16 11:47:32 -07:00

backup.go

shell: let volume.deleteEmpty drop volumes with no live needles (#11437)

2026-09-26 15:53:39 +08:00

benchmark.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

command.go

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

compact.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

download.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

export.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_backup_offset_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_backup_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_backup.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_cat.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_copy.go

filer: guard FoundationDB 100KB value limit and pack earlier (#11161)

2026-09-04 23:12:27 -07:00

filer_meta_backup.go

fix: handle meta backup offset errors safely (#9818)

2026-06-04 10:53:23 -07:00

filer_meta_scan_test.go

filer: add filer.meta.scan to audit one directory's change history (#10645)

2026-08-08 09:24:58 -07:00

filer_meta_scan.go

filer: add filer.meta.scan to audit one directory's change history (#10645)

2026-08-08 09:24:58 -07:00

filer_meta_tail_elastic.go

fix(filer.meta.tail): include extended metadata in Elasticsearch docs (#9200)

2026-04-23 11:54:08 -07:00

filer_meta_tail_non_elastic.go

fix(filer.meta.tail): fail fast when -es is used without elastic build tag (#9191)

2026-04-22 09:44:43 -07:00

filer_meta_tail.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_remote_gateway_buckets.go

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

filer_remote_gateway.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

filer_remote_sync_dir_test.go

filer.remote.sync: do not pin the sync offset on completed work (#11569)

2026-10-03 12:34:52 +08:00

filer_remote_sync_dir.go

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

filer_remote_sync.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_replication.go

Added loadSecurityConfigOnce (#5792)

2024-07-16 09:15:55 -07:00

filer_shutdown_test.go

filer: join shutdown paths before closing metadata store (#11363)

2026-09-16 16:20:39 -07:00

filer_sync_jobs_test.go

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

filer_sync_jobs.go

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

filer_sync_offset_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_sync_process_test.go

filer.backup, filer.sync: stop sharing resume checkpoints across destinations (#10934)

2026-08-24 19:30:20 -07:00

filer_sync_subscription_test.go

filer.sync: pipelined subscription with adaptive batching for faster catch-up (#8791)

2026-03-26 23:55:42 -07:00

filer_sync_verify_test.go

feat(filer.sync.verify): reclassify chunk-slice-order ETag diffs as CHUNK_REORDER (#10177)

2026-07-01 10:38:21 -07:00

filer_sync_verify.go

feat(filer.sync.verify): reclassify chunk-slice-order ETag diffs as CHUNK_REORDER (#10177)

2026-07-01 10:38:21 -07:00

filer_sync.go

filer.sync: sign proxied chunk I/O from the per-side security file

2026-10-07 07:28:17 -07:00

filer.go

iam: manage OIDC providers and roles over the filer IAM gRPC service (#11523)

2026-10-03 08:36:19 +08:00

fix_ecx_test.go

ec: uniform shard block layout (#10932)

2026-08-28 20:46:59 -07:00

fix_test.go

fix(volume): stop flipping volumes read-only on a non-append-ordered .idx (#9726)

2026-05-28 18:04:31 -07:00

fix.go

ec: uniform shard block layout (#10932)

2026-08-28 20:46:59 -07:00

fuse_notsupported.go

go fix

2026-02-20 18:42:00 -08:00

fuse_std_test.go

mount: add -volumeName to name the disk explicitly (#11165)

2026-09-04 23:14:57 -07:00

fuse_std.go

mount: add -volumeName to name the disk explicitly (#11165)

2026-09-04 23:14:57 -07:00

fuse.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00

iam.go

Embed IAM API into S3 server (#7740)

2025-12-14 16:02:06 -08:00

image.go

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

imports.go

migrate IAM policies to multi-file storage (#8114)

2026-01-26 11:28:23 -08:00

maintenance_capabilities.go

Refactor plugin system and migrate worker runtime (#8369)

2026-02-18 13:42:41 -08:00

master_follower.go

vacuum: let the sweep release volumes that stay empty and quiet (#11477)

2026-09-27 07:05:22 +08:00

master_test.go

master: align default volume size with EC rows (#10761)

2026-08-15 21:37:20 -07:00

master.go

vacuum: let the sweep release volumes that stay empty and quiet (#11477)

2026-09-27 07:05:22 +08:00

metadata_event_scope_test.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

metadata_event_scope.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

mini_admin_auth_test.go

mini: resolve admin credentials from security.toml and env vars (#10021)

2026-06-19 13:04:04 -07:00

mini_bucket_test.go

mini: state the format of a -tableBucket, do not infer it (#10851)

2026-08-20 23:46:32 -07:00

mini_plugin_test.go

refactor(s3api): strip back-stamp from PutBucketLifecycleConfiguration (Phase 4) (#9367)

2026-05-08 11:03:03 -07:00

mini.go

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

mount_common_test.go

mount/shell: bucket allow-empty-folders toggle, mount keeps explicit false (#11370)

2026-09-17 20:30:53 -07:00

mount_common.go

mount/shell: bucket allow-empty-folders toggle, mount keeps explicit false (#11370)

2026-09-17 20:30:53 -07:00

mount_darwin.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_freebsd.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_linux.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_memory_test.go

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

mount_notsupported.go

mount: support mounting on Windows through WinFsp (#10536)

2026-08-03 21:20:26 -07:00

mount_std_test.go

go fix

2026-02-20 18:42:00 -08:00

mount_std.go

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

mount_windows.go

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

mount.go

fix(mount): bound reader cache memory across open files (#11220)

2026-09-08 10:51:28 -07:00

mq_agent.go

fix(weed/command) address unhandled errors (#9208)

2026-04-23 22:15:05 -07:00

mq_broker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

mq_kafka_gateway.go

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

plugin_worker_test.go

refactor(worker): co-locate plugin handlers with their task packages (#9301)

2026-05-02 18:03:13 -07:00

s3_iceberg_endpoint_test.go

fix(iceberg): route catalog clients to the right bucket and vend S3 endpoint (#9109)

2026-04-16 15:51:43 -07:00

s3.go

lance: authenticate the catalog with Bearer tokens and x-api-key (#11431)

2026-09-24 07:02:59 +08:00

scaffold_test.go

fix test

2019-11-28 18:44:27 -08:00

scaffold.go

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

server_test.go

server: add filer-specific disableHttp flag (#11360)

2026-09-16 14:18:57 -07:00

server.go

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

sftp.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

shell.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00

update_full.go

go fix

2026-02-20 18:42:00 -08:00

update.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

upload.go

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

version.go

Refine enterprise edition feature blurb in version output and docs

2026-05-30 09:29:06 -07:00

volume_test.go

move to https://github.com/seaweedfs/seaweedfs

2022-07-29 00:17:28 -07:00

volume.go

volume: resolve the disk IO slow-latency threshold per disk (#10976)

2026-08-27 10:01:05 -07:00

webdav.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

worker_runtime.go

plugin worker: support job type categories (all, default, heavy) (#8547)

2026-03-07 18:30:58 -08:00

worker_test.go

fix(s3tests): wire lifecycle worker for expiration suite (#9374)

2026-05-08 17:29:47 -07:00

worker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00