MinIO

Commit Graph

Author	SHA1	Message	Date
Aditya Manthramurthy	5f78691fcf	ldap: Add user DN attributes list config param (#19758 ) This change uses the updated ldap library in minio/pkg (bumped up to v3). A new config parameter is added for LDAP configuration to specify extra user attributes to load from the LDAP server and to store them as additional claims for the user. A test is added in sts_handlers.go that shows how to access the LDAP attributes as a claim. This is in preparation for adding SSH pubkey authentication to MinIO's SFTP integration.	1 year ago
Harshavardhana	f3a52cc195	simplify listener implementation setup customizations in right place (#19589 )	1 year ago
Anis Eleuch	95bf4a57b6	logging: Add subsystem to log API (#19002 ) Create new code paths for multiple subsystems in the code. This will make maintaing this easier later. Also introduce bugLogIf() for errors that should not happen in the first place.	1 year ago
Poorna	31e8f7c525	Small reformatting of startup message (#19228 ) Also changing User-Agent format	1 year ago
Harshavardhana	88837fb753	add new update v2 that updates per node, allows idempotent behavior (#18859 ) add new update v2 that updates per node, allows idempotent behavior new API ensures that - binary is correct and can be downloaded checksummed verified - committed to actual path - restart returns back the relevant waiting drives	2 years ago
Harshavardhana	961f7dea82	compress binary while sending it to all the nodes (#18837 ) Also limit the amount of concurrency when sending binary updates to peers, avoid high network over TX that can cause disconnection events for the node sending updates.	2 years ago
Harshavardhana	f9b4a8d6e8	improve server update behavior by re-using memory properly (#18831 )	2 years ago
Aditya Manthramurthy	1c99fb106c	Update to minio/pkg/v2 (#17967 )	2 years ago
Harshavardhana	e37c4efc6e	fix: upon DNS refresh() failure use previous values (#17561 ) DNS refresh() in-case of MinIO can safely re-use the previous values on bare-metal setups, since bare-metal arrangements do not change DNS in any manner commonly. This PR simplifies that, we only ever need DNS caching on bare-metal setups. - On containerized setups do not enable DNS caching at all, as it may have adverse effects on the overall effectiveness of k8s DNS systems. k8s DNS systems are dynamic and expect applications to avoid managing DNS caching themselves, instead provide a cleaner container native caching implementations that must be used. - update IsDocker() detection, including podman runtime - move to minio/dnscache fork for a simpler package	2 years ago
Harshavardhana	9571b0825e	add configurable VRF interface and user-timeout (#17108 )	2 years ago
Aditya Manthramurthy	05444a0f6a	Use the official pub key to always verify binary (#16857 )	2 years ago
Anis Elleuch	f37a5b6dae	Add CPU info in the check update user-agent (#16447 )	3 years ago
jiuker	62cd918061	fix: close helmInfo file descriptor (#16319 )	3 years ago
jiuker	fd8750e959	fix: http body must be drained in downloadBinary() (#16001 )	3 years ago
Harshavardhana	5532982857	do not disable IsKubernetes(), IsDocker() checks with MINIO_CI_CD (#15852 )	3 years ago
Lenin Alevski	4bdf41a6c7	Removing unused getUpdateReaderFromFile function (#15794 ) Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>	3 years ago
Daryl White	d44f3526dc	Update links to documentation site (#15750 )	3 years ago
Klaus Post	ff12080ff5	Remove deprecated io/ioutil (#15707 )	3 years ago
Harshavardhana	433b6fa8fe	upgrade golang-lint to the latest (#15600 )	3 years ago
Harshavardhana	043aaa792d	fix: intrument os.OpenFile differently for Reads and Writes (#15449 ) allows us to trace latency for READs or WRITEs	3 years ago
Cesar Celis Hernandez	8ec888d13d	feat: update binary once and push it to other servers (#15407 )	3 years ago
Harshavardhana	bc72e4226e	do not allow filesystem fallback in server download (#15429 ) It is possible for anyone with admin access to relatively to get any content of any random OS location by simply providing the file with 'mc admin update alias/ /etc/passwd`. Workaround is to disable 'admin:ServiceUpdate' action. Everyone is advised to upgrade to this patch. Thanks to @alevsk for finding this bug.	3 years ago
Anis Elleuch	e4b51235f8	upgrade: Split in two steps to ensure a stable retry (#15396 ) Currently, if one server in a distributed setup fails to upgrade due to any reasons, it is not possible to upgrade again unless nodes are restarted. To fix this, split the upgrade process into two steps : - download the new binary on all servers - If successful, overwrite the old binary with the new one	3 years ago
Harshavardhana	5ac6d91525	support 'admin update' for hotfix versions (#15308 ) hotfixed versions are rejected as invalid, allow `mc admin update` from hotfix repos.	3 years ago
Klaus Post	ac055b09e9	Add detailed scanner metrics (#15161 )	3 years ago
Anis Elleuch	cf4cf58faf	Do not allow parallel upgrade in one server (#14782 ) It is wasteful to allow parallel upgrades of MinIO server. This also generates weird error invoked by selfupdate module when it happens such as: 'rename /opt/bin/.minio.old /opt/bin/..minio.old.old'	3 years ago
Harshavardhana	6123377e66	speedup getFormatErasureInQuorum use driveCount (#14239 ) startup speed-up, currently getFormatErasureInQuorum() would spend up to 2-3secs when there are 3000+ drives for example in a setup, simplify this implementation to use drive counts.	4 years ago
Klaus Post	3d66d053c7	Add small client TLS PSK cache (#14039 )	4 years ago
Harshavardhana	f527c708f2	run gofumpt cleanup across code-base (#14015 )	4 years ago
Anis Elleuch	db65ec4674	update: Add permission check before starting to update (#13291 )	4 years ago
Harshavardhana	f486cfae86	point all docs for containers to quay.io	4 years ago
Harshavardhana	4d8f81a992	remove replicate set fallback behavior (#12865 ) replica set deployment style is an incorrect style of distributed MinIO deployment, since statefulsets have been around for many releases in k8s now.	4 years ago
Harshavardhana	2ce60d772b	fix: update README.md for new release (#12637 ) rename all 'docker run' commands to 'podman run' fixes #12633	4 years ago
Harshavardhana	da74e2f167	move internal/net to pkg/net package (#12505 )	4 years ago
Harshavardhana	1f262daf6f	rename all remaining packages to internal/ (#12418 ) This is to ensure that there are no projects that try to import `minio/minio/pkg` into their own repo. Any such common packages should go to `https://github.com/minio/pkg`	4 years ago
Harshavardhana	81d5688d56	move the dependency to minio/pkg for common libraries (#12397 )	4 years ago
Harshavardhana	069432566f	update license change for MinIO Signed-off-by: Harshavardhana <harsha@minio.io>	4 years ago
Harshavardhana	8f98e3acfa	fix build with fips tags	4 years ago
Harshavardhana	89d58bec16	avoid frequent DNS lookups for baremetal setups (#11972 ) bump up the DNS cache for baremetal setups upto 10 minutes	4 years ago
Harshavardhana	641e564b65	fips build tag uses relevant binary link for updates (#12014 ) This code is necessary for `mc admin update` command to work with fips compiled binaries, with fips tags the releaseInfo will automatically point to fips specific binaries.	4 years ago
Andreas Auernhammer	c1a49be639	use crypto/sha256 for FIPS 140-2 compliance (#11623 ) This commit replaces the usage of github.com/minio/sha256-simd with crypto/sha256 of the standard library in all non-performance critical paths. This is necessary for FIPS 140-2 compliance which requires that all crypto. primitives are implemented by a FIPS-validated module. Go can use the Google FIPS module. The boringcrypto branch of the Go standard library uses the BoringSSL FIPS module to implement crypto. primitives like AES or SHA256. We only keep github.com/minio/sha256-simd when computing the content-SHA256 of an object. Therefore, this commit relies on a build tag `fips`. When MinIO is compiled without the `fips` flag it will use github.com/minio/sha256-simd. When MinIO is compiled with the fips flag (go build --tags "fips") then MinIO uses crypto/sha256 to compute the content-SHA256.	4 years ago
Harshavardhana	df93102235	fix: unwrapping issues with os.Is* functions (#10949 ) reduces 3 stat calls, reducing the overall startup time significantly.	5 years ago
Klaus Post	e63a44b734	rest client: Expect context timeouts for locks (#10782 ) Add option for rest clients to not mark a remote offline for context timeouts. This can be used if context timeouts are expected on the call.	5 years ago
Harshavardhana	9109148474	add support for new UA values for update an check (#10451 )	5 years ago
Harshavardhana	3a73f1ead5	refactor server update behavior (#10107 )	5 years ago
Klaus Post	968342c732	Remove usage of go-ieproxy for windows (#10009 ) There is a potential for deadlock on Windows 10 refer https://github.com/mattn/go-ieproxy/issues/17 remove this dependency for now.	5 years ago
Harshavardhana	72e0745e2f	fix: migrate to go.etcd.io import path (#9987 ) with the merge of https://github.com/etcd-io/etcd/pull/11823 etcd v3.5.0 will now have a properly imported versioned path this fixes our pending migration to newer repo	5 years ago
Harshavardhana	e59ee14f40	Tune tcp keep-alives with new kernel timeout options (#9963 ) For more deeper understanding https://blog.cloudflare.com/when-tcp-sockets-refuse-to-die/	5 years ago
Harshavardhana	5686a7e273	fix NAS gateway support for policy/notification (#9765 ) Fixes #9764	5 years ago
Harshavardhana	e45c90060f	remove references for deprecated dockerfiles and deployment styles (#9675 )	5 years ago

1 2

58 Commits (RELEASE.2024-07-16T23-46-41Z)