Commit Graph
1115 Commits
Author SHA1 Message Date
安正超andGitHub 4728abcff1 fix(security): document unsafe and TLS overrides (#2835) 2026-05-06 15:09:02 +00:00
9e93d3f47a fix(object-lock): materialize default retention metadata (#2824)
Signed-off-by: houseme <[email protected]>
Co-authored-by: cxymds <[email protected]>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: houseme <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
2026-05-06 13:48:12 +00:00
9f07029373 fix: reload bucket metadata after lifecycle updates (#2822)
Co-authored-by: houseme <[email protected]>
2026-05-06 13:01:44 +00:00
housemeandGitHub 41ba34a145 fix(rpc): add issue 2815 regression and docker validation (#2828) 2026-05-06 12:22:13 +00:00
3898d524fe security: same-origin console CORS, fail-closed helm creds, deny.toml, sample-config hardening (#2769)
Signed-off-by: Michael Graff <[email protected]>
Signed-off-by: 安正超 <[email protected]>
Co-authored-by: 安正超 <[email protected]>
Co-authored-by: loverustfs <[email protected]>
2026-05-06 07:34:44 +00:00
3dd0692917 refactor: unify credential env constants and deploy env usage (#2821)
Co-authored-by: Henry Guo <[email protected]>
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: 安正超 <[email protected]>
2026-05-06 04:30:29 +00:00
GatewayJandGitHub 090d60e00a fix(auth): authorize DeleteObjects per key (#2814) 2026-05-06 00:47:36 +00:00
安正超andGitHub c228fabfdb test(admin): cover orphan resync status cleanup (#2816) 2026-05-06 00:47:11 +00:00
安正超andGitHub bde569d055 test(getobject): cover buffer threshold edge cases (#2817) 2026-05-06 00:47:02 +00:00
housemeandGitHub e19b0dd997 fix(notify): improve webhook target diagnostics for env setup (#2810) 2026-05-06 00:28:46 +00:00
安正超andGitHub bf893bcb55 fix(admin): clear removed site resync status (#2803) 2026-05-05 13:42:12 +00:00
housemeandGitHub 565cbdffed fix(getobject): prevent large-download memory buffering (#2809) 2026-05-05 12:58:26 +00:00
housemeandGitHub 743b87014b fix(notify): validate bucket notification filter rules (#2806) 2026-05-05 10:35:36 +00:00
安正超andGitHub 3208f930c5 fix(s3): advertise byte ranges on head object (#2802) 2026-05-05 04:29:25 +00:00
935bb8a8e2 fix(admin): allow site replication removal with offline peers (#2739)
Co-authored-by: loverustfs <[email protected]>
2026-05-05 03:54:32 +00:00
0153710791 fix(server): avoid logging default credential values (#2800)
Co-authored-by: houseme <[email protected]>
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: 安正超 <[email protected]>
2026-05-05 03:44:07 +00:00
995e26f5ee fix(rpc): use map-encoded msgpack for all internode RPC responses (#2771)
Co-authored-by: 安正超 <[email protected]>
Co-authored-by: houseme <[email protected]>
2026-05-05 03:42:29 +00:00
安正超andGitHub f016673416 test: cover license verifier success path (#2798) 2026-05-05 02:55:56 +00:00
安正超andGitHub 42ff6b4d80 test(admin): cover legacy profile auth guards (#2799) 2026-05-05 02:55:45 +00:00
安正超andGitHub 3ced40f221 test(license): cover public key validation (#2793) 2026-05-04 15:12:59 +00:00
Joey ShiandGitHub 52f121ab2a Ensure CreationDate is always present in ListBuckets response (#2783) 2026-05-04 08:20:30 +00:00
安正超andGitHub eb8868397e fix: address security review follow-ups (#2781) 2026-05-03 13:53:36 +00:00
66c38b629d Harden admin and RPC security checks (#2773)
Signed-off-by: 安正超 <[email protected]>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
2026-05-03 11:55:09 +00:00
安正超andGitHub eb23710d2e fix(security): harden CORS and license handling (#2774) 2026-05-03 11:39:27 +00:00
安正超andGitHub fe59eb4952 test(admin): cover site identity merge gaps (#2767) 2026-05-02 08:43:47 +00:00
安正超andGitHub 08fab34804 test(admin): cover peer identity scheme dedupe (#2764) 2026-05-01 04:11:46 +00:00
安正超andGitHub dcfbc2612a test(admin): cover site replication scheme normalization (#2757) 2026-05-01 02:48:20 +00:00
e34d75dfdf test(admin): cover site replication absolute URI endpoint (#2745)
Co-authored-by: houseme <[email protected]>
2026-04-30 06:11:00 +00:00
housemeandGitHub c9622611ed fix(admin): harden site-replication identity handling and local verification for issue 2723 (#2730) 2026-04-29 03:27:55 +00:00
Ramakrishna ChilakaandGitHub 8e1bd560d8 test(get): reject range with part number (#2725) 2026-04-28 23:15:59 +00:00
cxymdsandGitHub c698a0f2b6 fix(policy): allow AssumeRole in system policies (#2718) 2026-04-28 11:01:46 +00:00
housemeandGitHub 2953558f41 fix(lifecycle): prevent eager date-expiry deletion on config update (#2708) 2026-04-28 10:26:14 +00:00
159ddd5bac fix: honor bucket-scoped ListBucket policies with s3:prefix (#2707)
Co-authored-by: houseme <[email protected]>
2026-04-27 14:13:22 +00:00
weisdandGitHub 334184b005 fix(replication): prevent target state loss across buckets (#2704) 2026-04-27 09:27:33 +00:00
GatewayJGitHubGatewayJ <8352692332qq.com>loverustfshouseme
cfbd094bc4 fix(iam): propagate cache miss load failures (#2692)
Co-authored-by: GatewayJ <8352692332qq.com>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: houseme <[email protected]>
2026-04-27 09:21:22 +00:00
安正超andGitHub 4dafb64d58 test(server): cover default module switch source (#2697) 2026-04-27 02:41:38 +00:00
housemeandGitHub 50d03ef021 perf(memory): add reclaim signals and cache controls (#2689) 2026-04-26 16:42:35 +00:00
housemeandGitHub 438913b84a feat: add console-managed audit and notify module switches (#2690) 2026-04-26 16:10:41 +00:00
GatewayJGitHubGatewayJ <8352692332qq.com>
37a3cbc497 fix(admin): map IAM not found errors to 404 (#2685)
Co-authored-by: GatewayJ <8352692332qq.com>
2026-04-26 14:13:14 +00:00
housemeandGitHub 59f41eb86a feat(obs): improve metrics coverage and dashboard performance (#2682) 2026-04-25 18:51:29 +00:00
c717195de2 fix(admin): harden STS and KMS authorization checks (#2653)
Co-authored-by: houseme <[email protected]>
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
Co-authored-by: loverustfs <[email protected]>
2026-04-25 01:34:18 +00:00
cxymdsandGitHub 94f64acc87 fix(site-replication): sync IAM and bucket replication (#2671) 2026-04-25 01:33:43 +00:00
d949d4e794 fix: avoid sending HEAD bodies over TLS HTTP/2 (#2648)
Signed-off-by: 唐小鸭 <[email protected]>
Signed-off-by: houseme <[email protected]>
Co-authored-by: Copilot Autofix powered by AI <[email protected]>
Co-authored-by: houseme <[email protected]>
Co-authored-by: loverustfs <[email protected]>
2026-04-25 01:33:08 +00:00
f833cd9cbe fix(metrics): keep S3 op counts when chains are disabled (#2675)
Co-authored-by: houseme <[email protected]>
2026-04-25 01:24:53 +00:00
13b4500212 feat(obs): improve telemetry stack, replication metrics, and Grafana alignment (#2672)
Co-authored-by: Filipe Monteiro <[email protected]>
Co-authored-by: cxymds <[email protected]>
Co-authored-by: weisd <[email protected]>
Co-authored-by: loverustfs <[email protected]>
Co-authored-by: 安正超 <[email protected]>
2026-04-24 13:50:17 +00:00
housemeandGitHub 92f812fc80 feat(rustfs): gate audit/notify by global env switches (#2669) 2026-04-24 09:14:19 +00:00
8d4caeacad fix(oidc): add federated logout flow (#2667)
Co-authored-by: GatewayJ <[email protected]>
2026-04-24 06:51:31 +00:00
安正超andGitHub 2860c82e3c fix(console): block disabled health probes from SPA fallback (#2665) 2026-04-24 03:34:57 +00:00
housemeandGitHub 572dd1264e fix(admin): harden health readiness and add health response controls (#2662) 2026-04-23 17:37:42 +00:00
39f7de4450 test(admin): cover list service account authorization (#2650)
Co-authored-by: houseme <[email protected]>
2026-04-23 13:40:59 +00:00