Chris Lu f40687b34e s3: tighten STS session token handling (#11383) ...

* s3api: test that a session token must not reveal its credential

* sts: derive secret access key with HMAC keyed on the signing key

* s3api: stop accepting STS session tokens as bearer credentials

* security: reject STS session tokens on filer and admin gRPC auth

* test: sign s3/iam framework requests with the session credential

* s3api: exercise the real auth pipeline in the end-to-end harness

2026-09-17 23:50:16 -07:00

..

benchmark/fuse_db

test: add FUSE database load/durability/perf benchmark (#9980)

2026-06-15 13:25:27 -07:00

data

volume: large_volume version has bug when using in memory index

2021-06-28 15:48:07 -07:00

erasure_coding

test/ec: pin rack in seedAndSpread volume.grow to stop silent no-ops (#11299)

2026-09-13 21:05:55 -07:00

foundationdb

go 1.26 (#10797)

2026-08-17 15:39:20 -07:00

fuse_dlm

test: keep per-test log directories in the FUSE DLM harness (#10893)

2026-08-23 01:19:22 -07:00

fuse_failover

test(fuse_failover): dump chunk list and hex on append corruption (#11285)

2026-09-11 23:08:39 -07:00

fuse_integration

test: metadata operations on unlinked open files and removed open directories (#11075)

2026-09-01 14:13:16 -07:00

fuse_p2p

test: wait for volume server registration in the FUSE p2p harness (#10897)

2026-08-23 02:14:50 -07:00

java/spark

build(deps): bump io.netty:netty-codec-http from 4.2.15.Final to 4.2.16.Final in /test/java/spark (#10408)

2026-07-24 09:19:24 -07:00

kafka

security: require go 1.26.6 and bump vulnerable deps (#11374)

2026-09-17 15:09:55 -07:00

kms

fix: serialize SSE-KMS metadata when bucket default encryption applies KMS (#8780)

2026-03-26 14:07:01 -07:00

master_cold_start

fix(master): let the growth initiator wait instead of shedding itself (#10202)

2026-07-02 15:13:46 -07:00

metadata_subscribe

filer: rebuild peer metadata subscriptions after a master reconnect (#10648)

2026-08-08 10:28:25 -07:00

mount_bench

windows mount: cache file data, resolved paths and attributes (#10703)

2026-08-10 18:46:18 -07:00

mq

fix: add missing backslash for volume extraArgs in helm chart (#7676)

2025-12-08 23:21:02 -08:00

multi_master

master: never re-seed a raft cluster over committed state under -raftBootstrap (#10883)

2026-08-23 11:10:20 -07:00

perf

Perf CI: benchmark the Rust volume server and report memory usage (#10111)

2026-06-25 10:52:23 -07:00

pjdfstest

ci: fall through to another Ubuntu mirror when one is unreachable (#10828)

2026-08-19 00:03:04 -07:00

plugin_workers

ec: uniform shard block layout (#10932)

2026-08-28 20:46:59 -07:00

postgres

go 1.26 (#10797)

2026-08-17 15:39:20 -07:00

random_access

Java 3.59

2023-11-13 08:23:53 -08:00

s3

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

s3tables

iceberg: fix OAuth token expiry handling (401 + token-exchange + configurable TTL) (#11242)

2026-09-09 10:54:39 -07:00

samba

ci: fall through to another Ubuntu mirror when one is unreachable (#10828)

2026-08-19 00:03:04 -07:00

sftp

security: require go 1.26.6 and bump vulnerable deps (#11374)

2026-09-17 15:09:55 -07:00

testutil

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

tls_rotation

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tus

filer: stop TUS uploads from turning into garbage (#10945)

2026-08-25 09:24:51 -07:00

vacuum

test: let the vacuum shell session outlive the vacuum (#10682)

2026-08-09 21:59:25 -07:00

volume_server

rust volume: stop a VolumeCopy whose caller has gone (#11188)

2026-09-06 10:47:18 -07:00

winfsp

mount: stop a replaced rename destination from flushing over the rename (#10965)

2026-08-26 08:51:37 -07:00

winfsp-conformance

mount: mark windows files archived and ignore a zero timestamp (#10559)

2026-08-04 16:42:33 -07:00