Chris Lu 3f8035deb7 security: share the admin gRPC peer authentication check ...

The local-peer fallback and bearer-token validation used by the filer IAM
gRPC path move into weed/security so every admin-plane gRPC service can
enforce the same contract. A client certificate verified by the server's
TLS config now also counts as authenticated.

2026-10-12 02:55:50 -07:00

..

certreload

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

grpc_peer_test.go

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

grpc_peer.go

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

guard_signing_key_test.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

guard_whitelist_test.go

Revert #9440 — volume admin fail-closed gate breaks multi-host clusters (#9472)

2026-05-12 16:00:44 -07:00

guard.go

security: hot-reload JWT signing keys on SIGHUP (#9826)

2026-06-04 22:26:08 -07:00

jwt_filer_provider_test.go

filer.sync: sign proxied chunk I/O from the per-side security file (#11645)

2026-10-08 22:04:06 +08:00

jwt.go

filer.sync: sign proxied chunk I/O from the per-side security file (#11645)

2026-10-08 22:04:06 +08:00

tls_client_cert_test.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00

tls_reload.go

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

tls_sni_test.go

fix: port in SNI address when using domainName instead of IP for master (#8500)

2026-03-04 07:05:45 -08:00

tls.go

util: serialize all ViperProxy access so startup cannot hit concurrent map read/write (#11470)

2026-09-26 16:09:29 +08:00