Chris LuandGitHub f5f1dcbd8c s3: keep verifying the request host when externalUrl is set (#10970) ...

* s3: keep verifying the request host when externalUrl is set

externalUrl was the only host candidate once set, so a client that dialed
the gateway directly instead of through the proxy always got
SignatureDoesNotMatch. Make it lead the candidate walk instead: every
candidate still needs a valid signature, and the request-derived hosts are
already trusted when the flag is unset, so a mixed proxy plus in-cluster
topology can now advertise a public endpoint and verify both planes.

* s3: cover virtual-hosted addressing behind externalUrl

The old pin also rejected an external client that signed
bucket.api.example.com, since only the bare externalUrl host was ever
tried. The candidate walk covers it; pin the case down.

2026-08-26 10:09:05 -07:00

..

acl

s3: report the effective ownership when a bucket has none stored (#10591)

2026-08-05 13:15:28 -07:00

basic

fix parsing s3 tag (#7069)

2025-08-01 15:45:23 -07:00

benchmark

Add performance CI (profiling, throughput, S3 read/write) (#10105)

2026-06-24 22:44:03 -07:00

checksum

[s3]: preserve multipart copy checksums (#9948)

2026-06-14 00:16:14 -07:00

compatibility

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

copying

S3: let a key that is a prefix of other keys be an object (#10912)

2026-08-24 15:10:34 -07:00

cors

test(s3): force-drop collection after deleteBucket in tagging/versioning/cors/copying (#9270)

2026-04-28 22:13:42 -07:00

delete

ci: add S3 mutation regression coverage (#8804)

2026-03-28 20:17:20 -07:00

distributed_lock

Lance catalog, and a Rust plugin worker to maintain it (#10841)

2026-08-19 22:59:56 -07:00

etag

fix: multipart upload ETag calculation (#8238)

2026-02-06 21:54:43 -08:00

filer_group

Refactor S3 integration tests to use weed mini (#7877)

2025-12-25 11:00:54 -08:00

iam

go 1.26 (#10797)

2026-08-17 15:39:20 -07:00

lifecycle

s3 lifecycle: bound the daily-replay pass so a quiet cluster stops wedging the job (#10578)

2026-08-05 08:41:37 -07:00

multipart

Migrate from deprecated azure-storage-blob-go to modern Azure SDK (#7310)

2025-10-08 23:12:03 -07:00

normal

S3: let a key that is a prefix of other keys be an object (#10912)

2026-08-24 15:10:34 -07:00

parquet

Refactor S3 integration tests to use weed mini (#7877)

2025-12-25 11:00:54 -08:00

policy

fix(test/s3/policy): allocate fresh admin port per subtest (#9332)

2026-05-05 11:24:43 -07:00

proxy_signature

s3: keep verifying the request host when externalUrl is set (#10970)

2026-08-26 10:09:05 -07:00

remote_cache

volume: gate FetchAndWriteNeedle behind admin auth and refuse internal endpoints (#9441)

2026-05-12 10:11:20 -07:00

retention

test(s3-retention): purge stale buckets before each create to avoid volume exhaustion

2026-04-27 22:14:20 -07:00

s3client

fix(tests): 32-bit build of EC e2e tests, type-check linux/386 in CI (#9922)

2026-06-11 09:05:54 -07:00

sdk_v2_routing

fix(s3): stop S3 Tables routes from swallowing buckets named "buckets" or "get-table" (#9566)

2026-05-19 14:24:25 -07:00

spark

test: consolidate port allocation into shared test/testutil package (#8982)

2026-04-08 11:30:02 -07:00

sse

fix(s3api): re-encrypt UploadPartCopy bytes for the destination's SSE config (#8908) (#9280)

2026-04-29 09:46:44 -07:00

tagging

test(s3): aim collection force-delete at the master the suite actually runs (#10404)

2026-07-22 21:37:59 -07:00

versioning

test(s3/versioning): read the whole version body instead of one Read (#10815)

2026-08-18 18:34:01 -07:00

SDK_COMPATIBILITY.md

s3: fix PutObject ETag format for multi-chunk uploads (#7771)

2025-12-15 12:43:33 -08:00