fix(rpc): bind internode auth to exact targets (#4988)

This commit is contained in:
cxymds
2026-07-19 21:52:57 +08:00
committed by GitHub
parent b0c6c4cbce
commit 133499c2d5
11 changed files with 821 additions and 34 deletions
@@ -13,6 +13,7 @@ for later deletion.
## Open Items
- `#4648` walk-dir stream completion capability: old clients can append fallback output to an already-used metacache writer after a terminal body error, so servers emit terminal walk errors only to clients that sign the `walk_dir_stream_completion=error-v1` query capability and its request-body digest. Remove the legacy clean-EOF path after the minimum supported RustFS peer version always advertises this capability.
- `heal-rpc-auth-v2` internode gRPC authentication: servers temporarily accept legacy prefix signatures so old peers remain available during rolling upgrades. Remove the legacy fallback after the minimum supported RustFS peer version sends v2 authentication on every internode gRPC request.
## Review Checklist