seaweedfs

mirrors/seaweedfs

Fork 0

mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-08-20 14:17:07 +00:00

Files

T

History

Chris LuandGitHub d5372f9eb7 feat(s3/lifecycle): apply cluster rate limit to walker dispatch (#9471 )

Phase 4b shipped the walker without plugging it into the cluster
rate.Limiter that processMatches honors. A walker hitting a large
bucket on the recovery branch could burst LifecycleDelete RPCs past
the cluster_deletes_per_second cap that streaming-replay respects.

WalkerDispatcher now takes a *rate.Limiter and waits on it before
each RPC, observing the wait time on S3LifecycleDispatchLimiterWaitSeconds
just like processMatches does. The handler passes the same limiter
to both paths so replay + walk share one budget; nil disables
throttling (unchanged default).

Tests pin: the limiter actually delays a dispatch when the burst
token is drained, and a ctx cancellation in Limiter.Wait surfaces
as an error without sending the RPC.

2026-05-13 09:24:50 -07:00

cors

go fmt

2026-01-28 14:34:07 -08:00

iceberg

fix(iceberg): default namespace location so fresh CTAS does not race metadata write (#9074 ) (#9246 )

2026-04-27 16:37:33 -07:00

lifecycle_xml

refactor(s3api): move Lifecycle XML structs to leaf package lifecycle_xml (#9360 )

2026-05-07 18:54:06 -07:00

policy

chore(weed/s3api/policy): prune unused test functions (#9150 )

2026-04-20 12:04:41 -07:00

policy_engine

fix(s3): s3:PutObject bucket policy now implicitly allows multipart uploads (#8968 )

2026-04-07 11:13:29 -07:00

s3_constants

feat(s3): stamp noncurrent_since on versioned demotions (#9431 )

2026-05-11 13:41:33 -07:00

s3_objectlock

mount: make metadata cache rebuilds snapshot-consistent (#8531 )

2026-03-07 09:19:40 -08:00

s3bucket

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3err

fix(s3): honor X-Forwarded-For in audit log remote_ip (#9295 )

2026-04-30 15:19:04 -07:00

s3lifecycle

feat(s3/lifecycle): apply cluster rate limit to walker dispatch (#9471 )

2026-05-13 09:24:50 -07:00

s3tables

fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120 )

2026-04-17 12:23:21 -07:00

AmazonS3.xsd

…

auth_credentials_subscribe_test.go

go fmt

2026-02-20 18:40:47 -08:00

auth_credentials_subscribe.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

auth_credentials_trust.go

Add AssumeRole and AssumeRoleWithLDAPIdentity STS actions (#8003 )

2026-01-12 10:45:24 -08:00

auth_credentials.go

fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261 )

2026-05-01 01:14:15 -07:00

auth_proxy_integration_test.go

feat: drop table location mapping support (#8458 )

2026-02-26 16:36:24 -08:00

auth_security_test.go

fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120 )

2026-04-17 12:23:21 -07:00

auth_signature_v2_test.go

…

auth_signature_v2.go

s3: enforce authentication and JSON error format for Iceberg REST Catalog (#8192 )

2026-02-03 11:55:12 -08:00

auth_signature_v4_sts_test.go

S3: Implement IAM defaults and STS signing key fallback (#8348 )

2026-02-16 13:59:13 -08:00

auth_signature_v4_test.go

fix(s3): handle empty URL path in forwarded prefix signature verification (#8973 )

2026-04-07 13:22:21 -07:00

auth_signature_v4_unsigned_headers_test.go

security(s3api): reject unsigned x-amz-* headers in SigV4 requests (#9121 )

2026-04-17 12:20:28 -07:00

auth_signature_v4.go

security(s3api): reject unsigned x-amz-* headers in SigV4 requests (#9121 )

2026-04-17 12:20:28 -07:00

auth_sts_identity_test.go

S3: Implement IAM defaults and STS signing key fallback (#8348 )

2026-02-16 13:59:13 -08:00

auth_sts_v4_test.go

fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120 )

2026-04-17 12:23:21 -07:00

auto_signature_v4_test.go

fix(s3): allow anonymous ListBuckets with prefix-scoped List action (#9073 )

2026-04-14 10:52:00 -07:00

bucket_metadata_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

bucket_metadata.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

bucket_paths.go

feat: drop table location mapping support (#8458 )

2026-02-26 16:36:24 -08:00

bucket_size_metrics_test.go

fix(s3/shell): factor EC volumes into bucket size metrics and collection.list (#9182 )

2026-04-21 20:17:42 -07:00

bucket_size_metrics.go

fix(s3/shell): factor EC volumes into bucket size metrics and collection.list (#9182 )

2026-04-21 20:17:42 -07:00

chunked_bug_reproduction_test.go

…

chunked_reader_v4_test.go

IAM: Add Service Account Support (#7744 ) (#7901 )

2025-12-29 20:17:23 -08:00

chunked_reader_v4.go

…

copy_source_decode_test.go

s3: use url.PathUnescape for X-Amz-Copy-Source header (#8545 )

2026-03-07 11:10:02 -08:00

credential_iam_errors.go

fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261 )

2026-05-01 01:14:15 -07:00

custom_types.go

…

filer_multipart_sse_s3_test.go

fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224 )

2026-04-25 23:06:37 -07:00

filer_multipart.go

fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224 )

2026-04-25 23:06:37 -07:00

filer_util_delete_test.go

Fix S3 delete for non-empty directory markers (#8740 )

2026-03-23 13:35:16 -07:00

filer_util_tags.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

filer_util.go

refactor(s3api): strip back-stamp from PutBucketLifecycleConfiguration (Phase 4) (#9367 )

2026-05-08 11:03:03 -07:00

iam_defaults_test.go

Fix IAM defaults and S3Tables IAM regression (#8374 )

2026-02-18 18:20:03 -08:00

iam_optional_test.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

identity_reflection_test.go

Enforce IAM for S3 Tables bucket creation (#8388 )

2026-02-19 22:52:05 -08:00

object_lock_utils.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

README.txt

…

s3_action_resolver_test.go

feat(s3): add STS GetFederationToken support (#8891 )

2026-04-02 17:37:05 -07:00

s3_action_resolver.go

feat(s3): add STS GetFederationToken support (#8891 )

2026-04-02 17:37:05 -07:00

s3_bucket_encryption.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3_content_encoding_test.go

…

s3_end_to_end_test.go

fix(s3): populate s3:prefix from query param for ListObjects policy conditions (#8971 )

2026-04-07 13:21:30 -07:00

s3_error_utils.go

Prune Unused Functions from weed/s3api (#8815 )

2026-03-28 13:24:11 -07:00

s3_existing_object_tag_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3_granular_action_security_test.go

…

s3_iam_middleware.go

fix(s3): populate s3:prefix from query param for ListObjects policy conditions (#8971 )

2026-04-07 13:21:30 -07:00

s3_iam_role_selection_test.go

…

s3_jwt_auth_test.go

fix(s3): strip client-supplied X-SeaweedFS-Principal/Session-Token in AuthSignatureOnly (#9120 )

2026-04-17 12:23:21 -07:00

s3_list_parts_action_test.go

…

s3_metadata_util.go

…

s3_sse_c.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3_sse_ctr_test.go

…

s3_sse_kms_utils.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3_sse_kms.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3_sse_metadata.go

fix(s3api): cross-SSE copy operations and bring them back into CI (#9281 ) (#9282 )

2026-04-29 10:06:51 -07:00

s3_sse_s3_integration_test.go

fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908 ) (#9228 )

2026-04-26 16:31:42 -07:00

s3_sse_s3_kek_passphrase_test.go

fix(s3): encrypt SSE-S3 KEK at rest with AES-GCM wrapping (#8880 )

2026-05-04 19:21:41 -07:00

s3_sse_s3_multipart_test.go

…

s3_sse_s3.go

fix(s3): encrypt SSE-S3 KEK at rest with AES-GCM wrapping (#8880 )

2026-05-04 19:21:41 -07:00

s3_sse_test_utils_test.go

…

s3_sse_utils.go

…

s3_token_differentiation_test.go

…

s3_validation_utils_require_test.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3_validation_utils.go

fix(s3): add HMAC-SHA256 key commitment to SSE-S3 and SSE-KMS (#8879 )

2026-05-04 19:14:41 -07:00

s3api_acl_helper.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3api_acp.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_auth.go

Fix critical authentication bypass vulnerability (#7912 ) (#7915 )

2025-12-30 12:40:59 -08:00

s3api_bucket_config_update_test.go

s3api: preserve lifecycle config responses for Terraform (#8805 )

2026-03-27 22:50:02 -07:00

s3api_bucket_config.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_bucket_cors_handlers.go

…

s3api_bucket_handlers_object_lock_config.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_bucket_handlers.go

refactor(s3api): drop filer.conf TTL routing from PUT lifecycle (#9379 )

2026-05-08 21:54:39 -07:00

s3api_bucket_lifecycle_config.go

s3api: preserve lifecycle config responses for Terraform (#8805 )

2026-03-27 22:50:02 -07:00

s3api_bucket_lifecycle_response_test.go

refactor(s3api): drop filer.conf TTL routing from PUT lifecycle (#9379 )

2026-05-08 21:54:39 -07:00

s3api_bucket_metadata_test.go

…

s3api_bucket_policy_arn_test.go

s3api: fix AccessDenied by correctly propagating principal ARN in vended tokens (#8330 )

2026-02-12 23:11:41 -08:00

s3api_bucket_policy_engine.go

s3: support s3:x-amz-server-side-encryption policy condition (#8806 )

2026-03-27 23:15:01 -07:00

s3api_bucket_policy_handlers.go

fix(s3): omit NotResource:null from bucket policy JSON response (#8658 )

2026-03-16 12:58:26 -07:00

s3api_bucket_tagging_handlers.go

…

s3api_circuit_breaker_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_circuit_breaker.go

s3api: fix static IAM policy enforcement after reload (#8532 )

2026-03-06 12:35:08 -08:00

s3api_copy_size_calculation.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3api_copy_validation.go

…

s3api_domain_test.go

…

s3api_embedded_iam_oidc.go

feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320 )

2026-05-05 11:26:08 -07:00

s3api_embedded_iam_test.go

fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261 )

2026-05-01 01:14:15 -07:00

s3api_embedded_iam.go

feat(iam): OIDC provider store + read-only IAM API (Phase 2a) (#9319 )

2026-05-04 22:15:03 -07:00

s3api_encrypted_volume_copy_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_governance_permissions_test.go

s3: enforce authentication and JSON error format for Iceberg REST Catalog (#8192 )

2026-02-03 11:55:12 -08:00

s3api_handlers.go

fix(s3): don't count ErrNotFound as filer health failure in failover (#8995 )

2026-04-08 17:08:57 -07:00

s3api_iam_oidc_test.go

feat(iam): OIDC provider mutations + multi-client + TLS thumbprints (Phase 2b) (#9320 )

2026-05-05 11:26:08 -07:00

s3api_implicit_directory_test.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_internal_lifecycle_test.go

refactor(s3/lifecycle): extract entryUsesMetadataOnlyDelete predicate (#9417 )

2026-05-10 09:39:05 -07:00

s3api_internal_lifecycle.go

refactor(s3/lifecycle): extract entryUsesMetadataOnlyDelete predicate (#9417 )

2026-05-10 09:39:05 -07:00

s3api_list_normalization_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_multipart_ssekms_test.go

fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908 ) (#9228 )

2026-04-26 16:31:42 -07:00

s3api_nextmarker_test.go

fix: S3 listing NextMarker missing intermediate directory component (#8089 )

2026-01-22 16:56:35 -08:00

s3api_object_handlers_acl.go

Add Iceberg admin UI (#8246 )

2026-02-08 20:06:32 -08:00

s3api_object_handlers_attributes.go

s3api: add GetObjectAttributes API support (#8504 )

2026-03-04 12:52:09 -08:00

s3api_object_handlers_copy_alloc_test.go

fix(s3api): cap copy-chunk receive buffer to avoid append-grow blowup (#9420 )

2026-05-10 12:08:06 -07:00

s3api_object_handlers_copy_bench_test.go

feat(s3api): full-chunk gzip pass-through skips volume-side decompress (#9427 )

2026-05-10 14:55:59 -07:00

s3api_object_handlers_copy_chunk_upload_test.go

fix: cap pool retention so chunk-copy buffers don't hoard memory (#9422 )

2026-05-10 13:34:25 -07:00

s3api_object_handlers_copy_part_sse.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_handlers_copy_stream.go

feat(s3api): full-chunk gzip pass-through skips volume-side decompress (#9427 )

2026-05-10 14:55:59 -07:00

s3api_object_handlers_copy_unified.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_object_handlers_copy.go

feat(s3api): full-chunk gzip pass-through skips volume-side decompress (#9427 )

2026-05-10 14:55:59 -07:00

s3api_object_handlers_delete_test.go

feat(s3/lifecycle): metadata-only delete when entry TtlSec > 0 (Phase 2b) (#9390 )

2026-05-09 18:38:38 -07:00

s3api_object_handlers_delete.go

feat(s3/lifecycle): metadata-only delete when entry TtlSec > 0 (Phase 2b) (#9390 )

2026-05-09 18:38:38 -07:00

s3api_object_handlers_legal_hold.go

adjust logs

2026-01-17 18:40:48 -08:00

s3api_object_handlers_list_directory_test.go

fix: directory incorrectly listed as object in S3 ListObjects (#7939 )

2026-01-02 15:52:37 -08:00

s3api_object_handlers_list_test.go

fix(s3api): ListObjects with trailing-slash prefix matches sibling directories (#8599 )

2026-03-11 02:28:34 -07:00

s3api_object_handlers_list_versioned_test.go

fix(s3): skip directories before marker in ListObjectVersions pagination (#8890 )

2026-04-02 15:59:52 -07:00

s3api_object_handlers_list.go

fix(s3api): fix uint16 overflow in doListFilerEntries Limit calculation (#9271 )

2026-04-28 20:50:05 -07:00

s3api_object_handlers_multipart.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_handlers_postpolicy_test.go

fix(s3): propagate validated POST form fields to upload headers (#9123 )

2026-04-17 14:55:06 -07:00

s3api_object_handlers_postpolicy.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_handlers_put_checksum_test.go

fix(s3): honor ChecksumAlgorithm on presigned URL uploads (#9076 )

2026-04-14 21:52:49 -07:00

s3api_object_handlers_put.go

feat(s3): stamp noncurrent_since on versioned demotions (#9431 )

2026-05-11 13:41:33 -07:00

s3api_object_handlers_retention.go

…

s3api_object_handlers_tagging.go

Add Iceberg admin UI (#8246 )

2026-02-08 20:06:32 -08:00

s3api_object_handlers.go

fix(s3): cache remote-only source before CopyObject (#9304 ) (#9305 )

2026-05-03 18:52:45 -07:00

s3api_object_lifecycle_ttl_test.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_lifecycle_ttl.go

feat(s3api): apply lifecycle TTL at write time (#9377 )

2026-05-08 21:35:27 -07:00

s3api_object_lock_fix_test.go

…

s3api_object_lock_headers_test.go

…

s3api_object_ownership_test.go

s3: implement Bucket Owner Enforced for object ownership (#7913 )

2025-12-29 23:54:00 -08:00

s3api_object_retention_test.go

…

s3api_object_retention.go

Prune Unused Functions from weed/s3api (#8815 )

2026-03-28 13:24:11 -07:00

s3api_object_versioning_self_heal_test.go

fix(s3api): self-heal stale .versions latest-version pointer on read (#9125 )

2026-04-17 14:57:59 -07:00

s3api_object_versioning.go

feat(s3): stamp noncurrent_since on versioned demotions (#9431 )

2026-05-11 13:41:33 -07:00

s3api_put_handlers.go

Prune Unused Functions from weed/s3api (#8815 )

2026-03-28 13:24:11 -07:00

s3api_put_object_helper_test.go

S3: Implement IAM defaults and STS signing key fallback (#8348 )

2026-02-16 13:59:13 -08:00

s3api_put_object_helper.go

…

s3api_remote_storage_test.go

fix(s3): cache remote-only source before CopyObject (#9304 ) (#9305 )

2026-05-03 18:52:45 -07:00

s3api_server_grpc.go

iam: add IAM group management (#8560 )

2026-03-09 11:54:32 -07:00

s3api_server_routing_test.go

fix(s3api): route STS GetFederationToken to STS handler (#9157 ) (#9167 )

2026-04-20 19:33:22 -07:00

s3api_server.go

feat(s3): register SeaweedS3LifecycleInternal gRPC service (#9359 )

2026-05-07 18:19:42 -07:00

s3api_sosapi.go

chore: remove ~50k lines of unreachable dead code (#8913 )

2026-04-03 16:04:27 -07:00

s3api_sse_decrypt_test.go

fix(s3api): backfill multipart SSE-S3 metadata at completion (#9224 )

2026-04-25 23:06:37 -07:00

s3api_sse_s3_upload_test.go

…

s3api_status_handlers.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_stream_error_test.go

Client disconnects create context cancelled errors, 500x errors and Filer lookup failures (#8845 )

2026-03-30 12:11:30 -07:00

s3api_sts_assume_role_dispatch_test.go

fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333 )

2026-05-05 19:14:44 -07:00

s3api_sts_assume_role_empty_arn_test.go

fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333 )

2026-05-05 19:14:44 -07:00

s3api_sts_assume_role_test.go

Embed role policies in AssumeRole STS tokens (#8421 )

2026-02-23 22:59:53 -08:00

s3api_sts_get_caller_identity_test.go

STS: add GetCallerIdentity support (#8893 )

2026-04-02 15:59:09 -07:00

s3api_sts_get_federation_token_test.go

feat(s3): add STS GetFederationToken support (#8891 )

2026-04-02 17:37:05 -07:00

s3api_sts.go

fix(iam): four phase-3 follow-ups (provider scoping, public path wrapper, static mirror, claim-mode RoleArn) (#9333 )

2026-05-05 19:14:44 -07:00

s3api_tables_rest_validation_test.go

s3api: return 400 for invalid namespace query in REST table routes (#8296 )

2026-02-10 17:57:08 -08:00

s3api_tables.go

Enforce IAM for S3 Tables bucket creation (#8388 )

2026-02-19 22:52:05 -08:00

s3api_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_version_id_test.go

chore: execute goimports to format the code (#7983 )

2026-01-07 13:06:08 -08:00

s3api_version_id.go

Add table operations test (#8241 )

2026-02-07 13:27:47 -08:00

s3api_xsd_generated_helper.go

…

s3api_xsd_generated.go

…

sses3_multipart_repro_test.go

fix(s3api): stream multipart-SSE chunks lazily to avoid truncated GETs (#8908 ) (#9228 )

2026-04-26 16:31:42 -07:00

stats.go

…

sts_packed_policy_test.go

feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318 )

2026-05-04 22:10:49 -07:00

sts_params_test.go

s3/iam: reuse one request id per request (#8538 )

2026-03-06 15:22:39 -08:00

sts_session_name_test.go

feat(iam): STS web-identity AWS-fidelity polish (Phase 1) (#9318 )

2026-05-04 22:10:49 -07:00

tags_test.go

…

tags.go

Add s3tables shell and admin UI (#8172 )

2026-01-30 22:57:05 -08:00

README.txt

see https://blog.aqwari.net/xml-schema-go/

1. go get aqwari.net/xml/cmd/xsdgen
2. Add EncodingType element for ListBucketResult in AmazonS3.xsd
3. xsdgen -o s3api_xsd_generated.go -pkg s3api AmazonS3.xsd
4. Remove empty Grantee struct in s3api_xsd_generated.go
5. Remove xmlns: sed s'/http:\/\/s3.amazonaws.com\/doc\/2006-03-01\/\ //' s3api_xsd_generated.go