Log in
v1.8.0
Changelog
- a40aae8 Bugfix: url-encoded chars on the website listener
- 6f69a1f Check versioning on init
- ea9c1d6 auth: add GetUserAccountFresh to bypass the IAM cache
- 4e5fb34 chore(deps): bump actions/checkout from 6 to 7
- d88ac4e chore(deps): bump actions/setup-go from 6 to 7
- 77aa23b chore(deps): bump actions/setup-go from 6 to 7
- 1c7e22e chore(deps): bump github/codeql-action from 4 to 4.37.4
- dc2ae0c chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6
- e553d3c chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7
- ec61bc5 chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8
- 41a511e chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9
- ea8233c chore(deps): bump the dev-dependencies group across 1 directory with 20 updates
- c1c5a5f chore(deps): bump the dev-dependencies group with 19 updates
- 3e555fb chore(deps): bump the dev-dependencies group with 21 updates
- 8ac6bd5 chore(deps): bump the dev-dependencies group with 22 updates
- 8112b91 chore(deps): bump the dev-dependencies group with 23 updates
- 67e8d08 chore(deps): bump the dev-dependencies group with 27 updates
- f4a2904 chore(deps): bump the dev-dependencies group with 9 updates
- 87fc1b9 chore: add rdma/librcserver.a to .gitignore
- de042a5 cumiddleware: cover RC token boundary and legacy-precedence cases
- 05487cf cumiddleware: reject unsupported RC token schemes with 501
- c638503 feat(azure): carry Azure blob marker in continuation token for pagination
- a780f34 feat(azure): server-side copy with download+reupload fallback
- c84c5f6 feat: accept principal ARNs in bucket policies under standalone IAM
- e012a6f feat: add AWS-compatible standalone IAM service
- 7b6b816 feat: add Helm chart support for the standalone IAM service
- ec579ca feat: add IAM OIDC provider CRUD
- 4901afe feat: add IAM OIDC provider tagging actions
- cbcc656 feat: add IAM Role CRUD
- c9ce6ab feat: add IAM role inline policy CRUD
- 1bbcd64 feat: add IAM role tagging actions
- 9b352a3 feat: add IAM user access key management
- 3328501 feat: add IAM user inline policy CRUD
- 26a54b3 feat: add IAM user tagging actions
- ab2b816 feat: add STS web identity federation, IAM policy Condition support, and access control enforcement
- 062bf0b feat: add best-effort O_DIRECT support for posix put/get-object put-part
- 45a532e feat: add configurable file permissions for new objects
- 1b8147c feat: add helm chart admin and webui ingress support
- 2e22a42 feat: add live GitHub OIDC end-to-end test for AssumeRoleWithWebIdentity
- 62c6787 feat: add new vgwrdma service for cuObject compatible server
- 29256f0 feat: add optional data-integrity ETag mode for posix/scoutfs
- abb3b27 feat: add standalone IAM support in WebGUI
- c9e26b5 feat: add standalone iam service to systemd config setup
- 535cc9d feat: add the hipobj-rc-v2 control routes to the vgwrdma gateway
- a8c5810 feat: allow supplying an external IAM service implementation to embedgw
- 7dfea7a feat: govern GetBucketVersioning with the regular access checks
- 2147a0c feat: integrate standalone IAM service with S3 gateway for identity-based policy enforcement
- 5f9041f feat: support admin/access logs on standard streams
- a4d4519 feat: version the private IAM protocol between gateway and standalone service
- f7e13d7 fix(posix): make conditional PUT evaluation and publication atomic per key
- b83f5d9 fix(posix): return empty config for GetBucketVersioning when unconfigured
- 0720815 fix: add integeration tests
- f6219c8 fix: add license header to rdma files
- 6121d52 fix: apply default Content-Type in POSTObject
- f567abc fix: authorize every key in a DeleteObjects batch after a bucket-policy deny
- fce9d9b fix: build failure from conflicting merges
- ca8d434 fix: drain unread request bodies before closing the connection
- 9a73e22 fix: harden posix conditional publish locking
- e146646 fix: honor mpMaxParts across partNumber validation
- b9f8b8e fix: include common prefixes in ListObjectsV2 key count
- 9011935 fix: infer UserName from the calling access key in the access-key APIs
- 8779630 fix: make --chuid/--chgid usable with the standalone IAM service
- 4a0e07f fix: newer gofmt for s3api
- afbee5b fix: role last-used tracking, and record S3 requests in last-used metadata
- e05d0df fix: s3proxy sends bodyless CreateBucket when the configuration is empty
- 571df30 fix: support proxy
- c7f8bc0 fix: use constant-time comparisons for SigV4 signatures
- c0ed55c fix: use dir permissions option for temporary directories
- c281008 rdma: add the Go binding for the RC session server
- 64fcfee rdma: add the RC session server C ABI
- 50fc9fe rdma: authenticate RC routes through the terminal error path
- 726d65d rdma: gate the RC data plane behind a dedicated flag
- 1596531 rdma: keep RC route XML fidelity
- 50f4482 rdma: map RC transport errors to protocol codes
- efa0309 rdma: port the hipObject v2 RC session core
- 1a8d4c9 rdma: serialize RC route errors at the route boundary
- 158ccdf rdma: test RC route errors through the production server
