Chris Lu f9dfc0ea37 feat(iam): STS web-identity AWS-fidelity polish ...

- OIDC discovery via .well-known/openid-configuration; falls back to
  /.well-known/jwks.json when discovery is absent. Reject discovery docs
  whose issuer claim does not match the configured issuer to defend
  against issuer-substitution.
- ComputeParentUser derives a stable per-identity hash from (sub, iss).
  Surface as aws:userid in the request context and as a parent_user
  claim in the session JWT so per-user state survives token rotation.
- Per-role MaxSessionDuration (3600..43200) clamps requested
  DurationSeconds before the STS service applies its own caps.
- Tighten RoleSessionName to the AWS contract: 2..64 chars from
  [\w+=,.@-].
- Populate PackedPolicySize in AssumeRole / AssumeRoleWithWebIdentity /
  AssumeRoleWithLDAPIdentity responses as a percentage of the 2048-byte
  inline session policy budget.

2026-05-04 22:06:19 -07:00

..

admin

fix(admin/view): define basePath in plugin IIFE scopes (#9298)

2026-05-01 18:22:39 -07:00

cluster

fix(wdclient,volume): compare master leader with ServerAddress.Equals (#9089)

2026-04-15 12:29:31 -07:00

command

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

credential

fix(credential/postgres,s3api/iam): rename safety + pgxutil follow-ups to #9226 (#9230)

2026-04-26 16:31:53 -07:00

filer

filer(mysql): TLS hostname/SNI knobs + MariaDB upsert documentation (#9260)

2026-04-28 01:29:41 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

feat(iam): STS web-identity AWS-fidelity polish

2026-05-04 22:06:19 -07:00

iamapi

fix(s3api,iamapi): avoid full SaveConfiguration when creating a single IAM user (#9261)

2026-05-01 01:14:15 -07:00

images

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

kms

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

mount

fix(mount): keep async flush when LockOwner has no POSIX locks (#9300)

2026-05-01 19:51:27 -07:00

mq

chore(weed/mq/kafka/protocol): prune no-op test (#9287)

2026-04-29 14:11:51 -07:00

notification

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

operation

fix(upload): rewind request body when retrying on connection reset (#9139) (#9222)

2026-04-26 02:17:55 -07:00

pb

fix(grpc): require host match before routing dials to local Unix socket (#9254) (#9257)

2026-04-27 23:10:36 -07:00

plugin/worker

refactor(worker): co-locate plugin handlers with their task packages (#9301)

2026-05-02 18:03:13 -07:00

query

fix(weed/query/engine): check for nil pointers (#9114)

2026-04-16 16:27:55 -07:00

remote_storage

fix(remote-storage/azure): fix re-cache of large remote blobs (#9174) (#9179)

2026-04-21 14:56:36 -07:00

replication

go fmt

2026-04-10 17:31:14 -07:00

s3api

feat(iam): STS web-identity AWS-fidelity polish

2026-05-04 22:06:19 -07:00

security

feat(security): hot-reload HTTPS certs without restart (k8s cert-manager) (#9181)

2026-04-21 20:20:11 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

fix(nfs): accept dirpath any-where under the export, mirroring rclone (#9291)

2026-04-30 10:06:44 -07:00

sftpd

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00

shell

fix(shell): use exact match for volume.balance -racks/-nodes filter (#9279)

2026-04-29 10:19:16 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

Export Prometheus metrics for scrubbing operations. (#9264)

2026-04-28 12:34:02 -07:00

storage

refactor(weed/storage): log volume file removal failures (#9297)

2026-05-01 11:52:40 -07:00

telemetry

Prevent split-brain: Persistent ClusterID and Join Validation (#8022)

2026-01-18 14:02:34 -08:00

topology

chore(weed/topology): prune unused functions (#9249)

2026-04-27 15:54:52 -07:00

util

4.23

2026-05-03 23:15:34 -07:00

wdclient

fix(wdclient,volume): compare master leader with ServerAddress.Equals (#9089)

2026-04-15 12:29:31 -07:00

worker

refactor(worker): co-locate plugin handlers with their task packages (#9301)

2026-05-02 18:03:13 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

chore: remove ~50k lines of unreachable dead code (#8913)

2026-04-03 16:04:27 -07:00