Commit Graph

  • cec96c02ea s3: reject requests carrying more than one routed subresource (#11942) master
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 22:45:53 -07:00
  • ee2718b14c filer: reduce forwarded lock log noise (#11933) 2026-10-22 05:46:23 +02:00
  • 7ff77a4f3b s3api: skip error response body when http forbids it (#11931)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:43:32 -07:00
  • 0b197867a1 filer leveldb2: tunable cache, buffer, block and table sizes (#11927)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:39:06 -07:00
  • 1451096c17 volume.fsck: delete missing filer entries through a worker pool (#11924)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:37:57 -07:00
  • 4854c6a0f4 s3: skip the local filer socket on Windows (#11921) Junker der ProvinzandGitHub 2026-10-22 05:35:19 +02:00
  • 74da88fc29 s3, iceberg: record the access key a request was signed with (#11901)
    Javier de la TorreGitHubJavier de la TorreDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 23:33:08 -04:00
  • 744ab586c5 fix: volume.fsck purges live chunks of files renamed during its filer walk (SQL stores) (#11883) 2026-10-22 12:31:42 +09:00
  • 364e19a493 remote_storage/s3: use the AWS default credential chain when a source is configured (#11881)
    Daniel GarcíaGitHubChris LuDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 22:30:28 -05:00
  • df33e81915 volume: report the needle read error with a failed read (#11934)
    Junker der ProvinzGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>BruceDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Chris Lu
    2026-10-22 05:24:48 +02:00
  • 867a537802 volume.configure: keep the superblock in sync with the .vif (#11930)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:18:56 -07:00
  • 85c1b990b1 shell: bound the initial master connection wait behind -connectTimeout (#11922)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:17:51 -07:00
  • 2015b10c47 iam/oidc: consume replay entries only on the single-use exchange path feature/oidc-token-replay-protection-rebased Chris Lu 2026-10-21 20:16:03 -07:00
  • ac319fe318 volume: never compact a volume tiered to remote storage (#11895) 2026-10-21 23:16:02 -04:00
  • 164a7d8b56 upload: upload -dir files concurrently behind a new -c flag (#11918)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:08:57 -07:00
  • 113931d85d volume: flush the .idx before acknowledging a durable write fix-fsync-durability-11940 Chris Lu 2026-10-21 20:08:21 -07:00
  • ebac199611 filer: sync leveldb entry writes when the path rule asks for fsync Chris Lu 2026-10-21 20:08:21 -07:00
  • d35f4c1c6b Missing data read in super block extra parsing (#8392) 2026-10-22 11:07:52 +08:00
  • 1aad4cfe70 iam: optionally require an iam: grant for self-service access-key actions (#11937) 2026-10-21 23:06:30 -04:00
  • 48b047034f iam/integration: reuse providers across refreshes for unchanged records Chris Lu 2026-10-21 20:04:50 -07:00
  • 2d22136a3c iam/sts: shut down providers dropped by the managed-provider swap Chris Lu 2026-10-21 20:04:45 -07:00
  • 6ca4cde93d iam/oidc: enforce the jti replay cache bound for every token Chris Lu 2026-10-21 20:04:41 -07:00
  • ea859a0844 sftp: reject empty passwords in PasswordAuthenticator (#11938)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:03:14 -07:00
  • c960cb50d3 iam/oidc: keep consumed jtis and stop the cleanup worker across re-init Chris Lu 2026-10-21 20:03:07 -07:00
  • 49d9d0c1cd iam: test legacy identity.json write racing the migration rename fix/iam-legacy-migration-race Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 20:02:49 -07:00
  • 6ec6cce3fe iam: migrate legacy identity.json writes stranded by the migration rename Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 20:02:47 -07:00
  • c9f6867774 iam/sts: pass jti replay settings through convertToOIDCConfig Chris Lu 2026-10-21 20:02:17 -07:00
  • c0152e6be1 s3: keep '\' a literal object-key character behind -s3.allowBackslashInKey (#11911)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 20:02:04 -07:00
  • af089ce47d vacuum worker: filter tiered replicas instead of skipping the volume Chris Lu 2026-10-21 20:00:15 -07:00
  • e057244b0a storage: read the super block extra before unmarshaling it (#11932) 2026-10-22 04:55:27 +02:00
  • 763e2a2090 iceberg: record geometry bounds on the data files compaction writes (#11898) 2026-10-21 22:28:26 -04:00
  • 917b6f4afd iceberg: authorize a commit before staging its metadata file (#11891) 2026-10-21 22:13:02 -04:00
  • 16379fd935 s3: encode POST policy conditions as JSON in the acl-gate test fix/s3-post-policy-acl-gate chrislusf 2026-10-21 19:09:07 -07:00
  • f540c5fa67 s3: cover x-amz-grant-* POST fields and the no-ACL case chrislusf 2026-10-21 18:57:56 -07:00
  • 2bdb203756 s3: cover the POST Object acl gate Chris Lu 2026-10-21 17:52:46 -07:00
  • 8811b07ac2 s3: gate POST Object acl fields behind PutObjectAcl Chris Lu 2026-10-21 17:52:46 -07:00
  • 28b5687314 master: key the rack vacuum quota by rack node identity feat/vacuum-per-rack Chris Lu 2026-10-21 17:48:44 -07:00
  • db9aca4d75 master.follower: register -maxParallelVacuumPerRack as a flag DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 17:41:44 -07:00
  • 00036f596f master: reserve vacuum quota per needed copy count, not per copy DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 17:41:38 -07:00
  • e7696ec141 master: resolve a data node's rack key once per vacuum sweep DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 17:41:33 -07:00
  • 106fd31af1 s3: resolve versionId ACL and attributes requests to the version-scoped actions (#11916)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 16:50:34 -07:00
  • 137f23a229 ec distribution: implement the documented shard distribution API (#11915)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 16:50:01 -07:00
  • dcc4a3611c iam/oidc: reject reused jti claims with a bounded replay cache Chris Lu 2026-10-21 16:12:45 -07:00
  • 4462115bdc filer: re-check the delete precondition on the delete's own read fix-issue-11339 Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 16:11:39 -07:00
  • 3f0e59b491 master: cap parallel vacuums per rack via -maxParallelVacuumPerRack Devin 2026-10-21 16:02:59 -07:00
  • c551bea9ce shell: nfs.enable / nfs.disable nfs-enable-inode-index Chris Lu 2026-10-21 16:01:48 -07:00
  • ff5433e63b filer: maintain an inode->path index for filer.conf inode_index locations Chris Lu 2026-10-21 16:01:33 -07:00
  • 30981f4665 filer.conf: add inode_index path option Chris Lu 2026-10-21 16:00:29 -07:00
  • 9d84ecca2f upload -dir: finish every file before reporting a failed upload upload-parallel-submit Devin 2026-10-21 15:20:40 -07:00
  • ec62b51454 worker/ec: read the retried copy's expiry from its own file status fix/ec-copy-compaction-retry Devin 2026-10-21 15:17:40 -07:00
  • d9aa956d49 ci: add posix-compliance workflow improve-fuse-mount2 DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 15:15:12 -07:00
  • 5fa30f6d4e fuse integration: add POSIX compliance test suite DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 15:15:12 -07:00
  • a1d2ebbb9b operation: warm lazy log fds in the file-part leak test Devin 2026-10-21 15:15:01 -07:00
  • 0074f38fde worker/ec: retry the pinned volume copy after a mid-copy compaction Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 15:14:28 -07:00
  • 371d320854 operation: close open file parts when a batch fails to build Devin 2026-10-21 15:14:12 -07:00
  • e645449872 fix(storage): count preallocated space when auto-sizing max volumes (#11919) 2026-10-22 00:11:06 +02:00
  • 84cc179b80 upload -dir: fetch file ids in batches instead of per file Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 15:10:30 -07:00
  • c8002d63bb upload: submit batched files concurrently Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 15:10:30 -07:00
  • dbb24e3bd4 notification: assert delivery in the named targets test feat/webhook-named-targets Devin 2026-10-21 15:08:57 -07:00
  • cff6fd1f4c notification: name the webhook target in failure and dead letter logs Devin 2026-10-21 15:08:26 -07:00
  • c872298c8b notification: isolate webhook targets behind per-target queues Devin 2026-10-21 15:08:04 -07:00
  • 9b642d4636 volume: use FALLOC_FL_KEEP_SIZE and log preallocation failures (#11920) Junker der ProvinzandGitHub 2026-10-22 00:07:55 +02:00
  • 3f26cb4475 notification: cancel the webhook queue only after all workers stop Devin 2026-10-21 15:07:36 -07:00
  • 1c62e30393 notification: resolve named target enabled flags through config Devin 2026-10-21 15:07:21 -07:00
  • 39fbcbc59e notification: require enabled for the flat webhook target Devin 2026-10-21 15:07:05 -07:00
  • 33c78574d6 test: cover a same-second rewrite in the delete precondition
    DevinChris LuDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 12:09:00 -07:00
  • f107388ab8 volume.fsck: delete empty directories under the entry's exact version
    DevinChris LuDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 11:57:59 -07:00
  • 1e94f39108 fs.verify: prune under the entry's exact version
    DevinChris LuDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 11:57:59 -07:00
  • dcfe12f0cb filer: accept a write condition on DeleteEntry
    DevinChris LuDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 11:57:59 -07:00
  • 7a8beb781b notification: support named webhook targets under [notification.webhook.<name>] DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:55:57 -07:00
  • fe41bda7d0 master: describe -maxWritableVolumes as a per-layout cap max-writable-volumes Chris Lu 2026-10-21 14:53:07 -07:00
  • c44ed16b43 master: assert the capped candidate set instead of random pick outcomes Chris Lu 2026-10-21 14:52:46 -07:00
  • 3302af2aca master: pick the capped volumes without sorting the writable list Chris Lu 2026-10-21 14:52:38 -07:00
  • ab5e38b1bd notification: honor the config prefix in the multi-queue guard DevinandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:52:34 -07:00
  • 235a799895 master: cap writable volumes inside the requested location Chris Lu 2026-10-21 14:52:33 -07:00
  • a565acb449 master: give master.follower a maxWritableVolumes default Chris Lu 2026-10-21 14:52:18 -07:00
  • a882565cd7 iceberg: keep a default-CRS geometry column without a CRS after compaction (#11899) 2026-10-21 17:50:45 -04:00
  • de2fc03c7d s3tables: accept the external-volume verification object at a table bucket's root (#11900) 2026-10-21 17:49:36 -04:00
  • 21add33b6e s3 backend: optional HTTP client settings for the cloud tier (#11897) 2026-10-21 17:44:39 -04:00
  • 1d3d811b6a master: cap writable volumes per collection via -maxWritableVolumes Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:28:52 -07:00
  • 9a03c09396 s3api: cover the inline-content UploadPartCopy route at handler level (#11914)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 14:15:04 -07:00
  • f40267db44 s3: answer InvalidBucketName to a denied request on a malformed bucket name (#11893) 2026-10-21 17:08:33 -04:00
  • 63c218c399 credential: cover encrypted store round trips and passthrough credential-encrypt-secrets Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:07:03 -07:00
  • 3b4690d1b7 credential: enable secret encryption via [credential.encryption] Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:07:03 -07:00
  • 9a7f033d7f credential: KMS-encrypt secret keys in a wrapping credential store Chris LuandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 2026-10-21 14:07:03 -07:00
  • 6ee7c4c5c7 s3: no empty-directory marker in a "<dir>/" self-prefix listing (#11906)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 14:03:02 -07:00
  • 9c427b265f volume tier: accept deletes on a volume as soon as it is tiered (#11894)
    Javier de la TorreGitHubJavier de la TorrechrislusfDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 17:01:10 -04:00
  • 97f8ca13ff s3tables, iceberg: log client refusals at V(1), not ERROR (#11896) 2026-10-21 17:00:33 -04:00
  • 98a045824a volume: cover the leader tracking with a fake master (rust) pr-11888-leader-tests Chris Lu 2026-10-21 13:49:27 -07:00
  • 780760fccc s3: report the copied bytes' MD5 in UploadPartCopy ETags (#11884)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 13:46:11 -07:00
  • a3e97ec709 s3: apply Range to HeadObject (#11856) 2026-10-22 02:07:00 +05:30
  • 23d8c62844 volume: route lookups to the leader master only (#11888)
    Lisandro PinGitHubClaude Opus 5.5Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Chris Lu
    2026-10-21 22:36:05 +02:00
  • 4bdbfbaaa8 s3tables: judge an absent tag target by its canonical ARN (#11912)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 13:31:04 -07:00
  • 8059c67458 volume: fail replicated writes and deletes when no leader is known (rust) Chris Lu 2026-10-21 13:23:37 -07:00
  • 039ee7a2fb volume: keep the announced master port forms, not just http (rust) Chris Lu 2026-10-21 13:23:37 -07:00
  • 84ba1840d8 s3tables: let resource-policy denies veto the learn-absence answer fix/s3tables-read-before-authz Chris Lu 2026-10-21 13:11:32 -07:00
  • e73c23a4ee fix(s3): set Access-Control-Allow-Credentials on CORS responses (#11886) 2026-10-22 01:40:49 +05:30
  • 8c3d8fcea0 s3tables: keep absent-target answers identical to denied ones (#11905)
    Chris LuGitHubDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
    2026-10-21 13:07:47 -07:00
  • 0e256276e0 volume: ask the confirmed leader for copy prealloc options (rust) Chris Lu 2026-10-21 13:04:32 -07:00
  • 20764e1a82 volume: mark volumes readonly on the leader, retrying the named one (rust) Chris Lu 2026-10-21 13:04:23 -07:00