Chris LuandDevin c05a296ba1 s3api: answer IAM/STS failures in the query-protocol envelope ...

Embedded IAM and STS routes now report authentication, form-parse and
authorization failures with the IAM ErrorResponse body instead of the
S3 Error envelope, so IAM SDK clients can parse them. Requests signed
for s3 keep the S3 envelope, keyed off the credential scope.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-06 09:16:37 -07:00

..

admin

admin: stop leaking cancelled maintenance task files in -dataDir/tasks (#11597)

2026-10-05 12:02:53 +08:00

cluster

fix(filer): leave the lock ring before stopping gRPC on shutdown (#11604)

2026-10-06 09:53:40 +08:00

command

Secure Weed Mini Admin Listeners by Default (#11613)

2026-10-06 13:33:47 +08:00

credential

s3: gate internal LifecycleDelete gRPC behind admin Bearer auth (#11291)

2026-09-13 13:07:10 -07:00

ec

shell: let volume.deleteEmpty drop volumes with no live needles (#11437)

2026-09-26 15:53:39 +08:00

filer

filer: bound metadata log flush retries during shutdown (#11596)

2026-10-06 09:51:02 +08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam: manage OIDC providers and roles over the filer IAM gRPC service (#11523)

2026-10-03 08:36:19 +08:00

iamapi

iam: authorize IAM management actions as IAM actions (#10593)

2026-08-05 17:08:21 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms: cache decrypted data keys so cache_enabled/cache_ttl take effect (#10173)

2026-06-30 21:23:53 -07:00

mount

master,filer: fix lock ring poisoning after leader change (#11453)

2026-09-26 11:57:00 +08:00

mq

filer: authorize the chunk proxy and the root listing like the rest of the filer port (#11152)

2026-09-04 16:39:36 -07:00

notification

kafka: honor notification.kafka.event_types (#11601)

2026-10-05 21:15:06 +08:00

operation

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

pb

fix(filer): leave the lock ring before stopping gRPC on shutdown (#11604)

2026-10-06 09:53:40 +08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

shell: reset noLock in the admin script dispatcher too (#11059)

2026-08-31 23:14:37 -07:00

query

s3: invalidate stale reader cache locations on chunk read failure (#10156)

2026-06-30 13:27:49 -07:00

remote_storage

filer: keep lazy remote reads from resurrecting deleted paths (#11452)

2026-09-26 08:00:39 +08:00

replication

filer.sync: resubscribe the metadata stream when a failure pins the offset (#11581)

2026-10-04 00:06:55 +08:00

s3api

s3api: answer IAM/STS failures in the query-protocol envelope

2026-10-06 09:16:37 -07:00

security

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

fix(filer): leave the lock ring before stopping gRPC on shutdown (#11604)

2026-10-06 09:53:40 +08:00

sftpd

sftp: reject an empty password (#11095)

2026-09-02 11:33:25 -07:00

shell

shell: say which read-only volumes volume.vacuum leaves alone (#11525)

2026-10-01 01:08:48 +08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

storage

volume: return error instead of panicking when .dat open fails (#11619)

2026-10-06 14:24:42 +08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

vacuum: bound master vacuum RPCs with phase deadlines (#11579)

2026-10-03 12:32:42 +08:00

util

filer: bound metadata log flush retries during shutdown (#11596)

2026-10-06 09:51:02 +08:00

wdclient

fix(filer): leave the lock ring before stopping gRPC on shutdown (#11604)

2026-10-06 09:53:40 +08:00

worker

build(deps): bump github.com/apache/iceberg-go from 0.6.1-0.20260817192109-c2105090c9e2 to 0.7.0 (#11609)

2026-10-06 13:32:54 +08:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00