1785 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alex	70b9904e91	Merge pull request 'AWS signatures v4: don't actually check Content-Type is signed' (#745) from fix-signed-headers into main ... Reviewed-on: #745	2024-03-01 12:50:15 +00:00
Alex Auvolat	a36248a169	[fix-signed-headers] aws signatures v4: don't actually check Content-Type is signed ... This page of the AWS docs indicate that Content-Type should be part of the CanonicalHeaders (and therefore SignedHeaders) strings in signature calculation: https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html However, testing with Minio Client revealed that it did not sign the Content-Type header, and therefore we broke CI by expecting it to be signed. With this commit, we don't mandate Content-Type to be signed anymore, for better compatibility with the ecosystem. Testing against the official behavior of S3 on AWS has not been done.	2024-03-01 13:12:18 +01:00
Alex	b8c7a560ef	Merge pull request 'Fix potential timing side-channels in authentication mechanisms' (#737) from fix-auth-ct-eq into main ... Reviewed-on: #737	2024-02-29 14:04:38 +00:00
Alex	d3cf560e5c	Merge pull request 'Docs: add default metrics_token in quick start + uniformize use of base64' (#739) from doc-default-token into main ... Reviewed-on: #739	2024-02-29 12:20:24 +00:00
Alex Auvolat	73b11eb17c	[doc-default-token] add default metrics_token in quick start + uniformize use of base64	2024-02-29 13:17:36 +01:00
Alex Auvolat	6d33e721c4	[fix-auth-ct-eq] use consant time comparison for awsv4 signature verification	2024-02-29 13:07:18 +01:00
Alex Auvolat	eaac4924ef	[fix-auth-ct-eq] use argon2 hashing and verification for admin/metrics token checking	2024-02-29 13:07:15 +01:00
Alex	02005055ae	Merge pull request 'Mention deduplication and compression in features page' (#736) from doc-dedup into main ... Reviewed-on: #736	2024-02-28 12:49:26 +00:00
Alex Auvolat	a294dd9473	[doc-dedup] reorder features, move no-RAFT down	2024-02-28 13:48:45 +01:00
Alex Auvolat	947973982d	[doc-dedup] fix #rpc_bind_outgoing anchor in config page	2024-02-28 13:45:30 +01:00
Alex Auvolat	dc995059aa	[doc-dedup] mention deduplication and compression in features page	2024-02-28 13:43:30 +01:00
Alex	10031a3a91	Merge pull request 'Split presigned signature verification + fix conditions' (#735) from fix-presigned into main ... Reviewed-on: #735	2024-02-28 11:38:00 +00:00
Alex Auvolat	90cab5b8f2	[fix-presigned] add comments and reorganize	2024-02-28 12:24:21 +01:00
Alex Auvolat	e9f759d4cb	[fix-presigned] presigned requests: allow x-amz-* query parameters to stand in for equivalent headers	2024-02-28 12:24:21 +01:00
Alex Auvolat	a5e4bfeae9	[fix-presigned] write comments	2024-02-28 12:24:21 +01:00
Alex Auvolat	4c1d42cc5f	[fix-presigned] add back anonymous request code path + refactoring	2024-02-28 12:24:21 +01:00
Alex Auvolat	2efa9c5a1a	[fix-presigned] PostObject: verify X-Amz-Algorithm	2024-02-28 12:24:20 +01:00
Alex Auvolat	a8cb8e8a8b	[fix-presigned] split presigned/normal signature verification	2024-02-28 12:24:13 +01:00
Alex	911a83ea7d	Merge pull request 'rewrite read_and_put_block as a series of steps with channels' (#734) from refactor-put into main ... Reviewed-on: #734	2024-02-26 17:52:45 +00:00
Alex Auvolat	b76c0c102e	[refactor-put] add ordering tag to blocks being sent to storage nodes	2024-02-26 18:35:11 +01:00
Alex Auvolat	babccd2ad3	[refactor-put] send several blocks in parallel to storage nodes	2024-02-26 18:22:37 +01:00
Alex Auvolat	3fe94cc14f	[refactor-put] rewrite read_and_put_block as a series of steps with channels	2024-02-26 17:55:37 +01:00
Alex	17b55205aa	Merge pull request 'doc: reverse-proxy.md: Added section on caddy-fs-s3' (#733) from jpds/garage:caddy-fileserver-browse-s3 into main ... Reviewed-on: #733	2024-02-26 09:56:09 +00:00
Jonathan Davies	3813e6c71d	doc: reverse-proxy.md: Added section on caddy-fs-s3.	2024-02-26 00:54:33 +00:00
Alex	e399b60e25	Merge pull request 'GetObject: split out handle_get_full (small refactoring)' (#732) from split_getobject into main ... Reviewed-on: #732	2024-02-23 17:26:53 +00:00
Alex Auvolat	d640102b76	[split_getobject] GetObject: split out handle_get_full	2024-02-23 18:14:50 +01:00
Alex	61758ce0f9	Merge pull request 'some refactoring on data read/write path' (#729) from refactor-block into main ... Reviewed-on: #729	2024-02-23 15:49:43 +00:00
Alex Auvolat	6ee691e65f	[refactor-block] simplify some more	2024-02-23 12:50:10 +01:00
Alex Auvolat	e9c42bca34	[refactor-block] add DataBlockStream type	2024-02-23 12:22:29 +01:00
Alex Auvolat	cd1069c1d4	[refactor-block] refactor DataBlock and DataBlockPath	2024-02-23 12:15:52 +01:00
Alex Auvolat	07c7895948	[refactor-block] simplify rpc_get_block	2024-02-23 11:54:40 +01:00
Alex Auvolat	9b41f4ff20	[refactor-block] move read_stream_to_end to garage_net	2024-02-23 11:46:57 +01:00
Alex Auvolat	93552b9275	[refactor-block] Remove redundant BlockStream type	2024-02-23 11:33:38 +01:00
Alex	74d0c47f21	Merge pull request 'Add node-global lock for bucket/key operations (fix #723)' (#728) from lock-createbucket into main ... Reviewed-on: #728	2024-02-22 12:05:19 +00:00
Alex Auvolat	cff702a951	[lock-createbucket] Add node-global lock for bucket/key operations (fix #723)	2024-02-22 12:28:21 +01:00
Alex	7e212e20e0	Merge pull request 'Minor typos & grammar fixes in docs' (#727) from hartraft/garage:docs-typo-fix into main ... Reviewed-on: #727	2024-02-22 09:26:08 +00:00
hartraft	00a5f14a7b	Align admin endpoint port	2024-02-20 21:19:00 +01:00
hartraft	1a07c8dd54	Minor typos and grammar	2024-02-20 21:03:39 +01:00
hartraft	292f4ff9cb	Typo ... Fix small typo on the getting started guide	2024-02-20 18:35:56 +00:00
Alex	885405d944	Merge pull request 'system metrics improvements' (#726) from peer-metrics into main ... Reviewed-on: #726	2024-02-20 15:35:12 +00:00
Alex Auvolat	bcd571ef57	[peer-metrics] add documentation for new cluster status metrics	2024-02-20 14:59:04 +01:00
Alex Auvolat	b868493da9	[peer-metrics] add basic cluster node status metrics (fix #545)	2024-02-20 14:50:24 +01:00
Alex Auvolat	182a23cc12	[peer-metrics] refactor SystemMetrics to hold a reference to System	2024-02-20 14:20:58 +01:00
Alex Auvolat	3cdf69f079	[peer-metrics] Add metrics for cluster health, like GetClusterHealth admin API	2024-02-20 13:50:45 +01:00
Alex Auvolat	00d479358d	[peer-metrics] refactor/simplify SystemMetrics	2024-02-20 13:50:45 +01:00
Alex	203bb10035	Merge pull request 'Filter nodes Garage tries to connect to' (#719) from reconnect-only-current into main ... Reviewed-on: #719	2024-02-20 10:37:11 +00:00
Alex Auvolat	e91576677e	[reconnect-only-current] filter nodes to reconnect to ... do not try reconnecting to nodes received from consul/kubernetes discovery if they are not currently in the layout	2024-02-20 11:07:10 +01:00
Alex	0b9859befa	Merge pull request 'garage_net: retry connecting when new IP is learned' (#724) from networking-fixes into main ... Reviewed-on: #724	2024-02-19 17:37:01 +00:00
Alex Auvolat	95e3a39b4d	[networking-fixes] small refactoring in garage_net peering	2024-02-19 18:12:21 +01:00
Alex Auvolat	66fe893023	[networking-fixes] garage_net: retry connecting when new IP is learned	2024-02-19 18:12:21 +01:00