Chris LuandGitHub c0f33d599b rust volume: mirror Go volume server logic to gate the admin RPCs (#10748) ...

rust volume: gate the remaining admin RPCs behind check_grpc_admin_auth

The Go volume server gates 29 destructive VolumeServer RPCs on the
-whiteList admin check; the Rust port only gated 14. Add the gate to the
other 15 -- batch_delete, read_all_needles, fetch_and_write_needle, the
EC-shard generate/rebuild/copy/unmount/to-volume RPCs, both tier-move RPCs,
volume_copy, volume_tail_receiver, set_state, scrub_ec_volume and
volume_needle_status -- so a configured whitelist restricts them the same
way it already does on the Go side.

check_grpc_admin_auth also required peer info before checking whether any
control was configured, unlike Go's `if vs.guard == nil { return nil }`.
Short-circuit when no whitelist and no signing key are set, so in-process
callers keep working with security inactive and only the gate ordering
changes for configured servers.

tests/admin_auth_coverage.rs mirrors the Go coverage test: every handler
must either gate or be listed as intentionally open with a reason, so the
two implementations can't silently drift apart again.

2026-08-13 13:17:23 -07:00

..

admin_auth_coverage.rs

rust volume: mirror Go volume server logic to gate the admin RPCs (#10748)

2026-08-13 13:17:23 -07:00

http_integration.rs

fix(ec): read chunk-manifest chunks stored on EC volumes (rust volume server) (#10187)

2026-07-01 13:38:34 -07:00