2 Commits

Author	SHA1	Message	Date
GatewayJ	3d4f4bb86d	fix(sts): align AssumeRole authorization (#5281) ... * fix(sts): align AssumeRole authorization with MinIO * test(sts): cover AssumeRole OPA contract * fix(iam): fail closed on unresolved policies * fix(iam): fail closed while OPA initializes --------- Co-authored-by: cxymds <cxymds@gmail.com> Co-authored-by: Zhengchao An <anzhengchao@gmail.com>	2026-08-01 11:48:58 +08:00
Zhengchao An	c7926a7956	test(e2e): admin IAM user/policy/service-account CRUD lifecycle (#4855) ... First systematic HTTP e2e batch for the admin management surface (backlog#1154 peri-2): full user -> canned-policy -> attach -> service-account lifecycle with data-plane effect assertions (the credential really gains and loses S3 access), plus a non-admin 403 probe per management endpoint targeting a different principal so deny_only self-access semantics do not mask the gate. Wired into the e2e-smoke nextest profile (ci-4 mechanism).	2026-07-15 09:37:54 +00:00