安正超 60f14cb0f1 fix(bucket-encryption): populate default KMS key for SSE-KMS without key ID (#3225) ...

* fix(bucket-encryption): populate default KMS key for SSE-KMS without key ID

When PutBucketEncryption receives SSE-KMS configuration without a specific
KMS key ID, query the KMS service for the default key and populate
KMSMasterKeyID before storing. This ensures GetBucketEncryption responses
include the key ID, which S3 clients like mc rely on to distinguish SSE-KMS
from SSE-S3 in their display logic.

Fixes #3039

* test(kms): cover empty bucket encryption key ID

* fix(bucket-encryption): require default KMS key

2026-06-06 02:57:48 +00:00

..

audit

chore(deps): refresh workspace deps and linux fs_type gating (#3030)

2026-05-20 15:03:07 +00:00

checksums

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

common

feat(scanner): add scanner budget progress controls (#3185)

2026-06-03 14:37:58 +00:00

concurrency

refactor: converge storage io hot paths (#3029)

2026-05-20 12:00:23 +00:00

config

feat(scanner): add runtime scanner controls and status (#3203)

2026-06-04 05:16:26 +00:00

credentials

refactor(credentials): derive RPC secret fallback and remove IAM keygen duplication (#3079)

2026-05-25 11:05:58 +00:00

crypto

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

data-usage

fix(scanner,data-usage): fix add() logic inversion and usize underflow in reduce_children_of (#3142)

2026-05-31 21:52:53 +00:00

e2e_test

fix(bucket-encryption): populate default KMS key for SSE-KMS without key ID (#3225)

2026-06-06 02:57:48 +00:00

ecstore

refactor(ecstore): add accessor methods for service globals (#3226)

2026-06-05 15:29:38 +00:00

filemeta

perf(filemeta): phase-1~3 rename_data metadata optimization (#3011)

2026-05-19 10:20:24 +00:00

heal

fix: prioritize manual heal queue admission (#3192)

2026-06-03 14:21:20 +00:00

iam

fix(iam): allow colons and dots in STS claim policy names (#3164)

2026-06-04 03:39:50 +00:00

io-core

fix(io-core,signer): replace unwrap() with proper error handling (#3150)

2026-05-31 23:40:20 +00:00

io-metrics

feat(ecstore): add object lock diagnostics (#3178)

2026-06-03 02:10:27 +00:00

keystone

fix(security): document unsafe and TLS overrides (#2835)

2026-05-06 15:09:02 +00:00

kms

chore: move mcp crate to standalone repository (#2578)

2026-04-17 12:42:26 +00:00

lock

feat(ecstore): add object lock diagnostics (#3178)

2026-06-03 02:10:27 +00:00

madmin

fix(user): service account expiration handling with RFC3339 (#3078)

2026-05-25 04:27:25 +00:00

notify

fix(notify): normalize lock ordering to prevent deadlock (#3199)

2026-06-03 15:37:59 +00:00

object-capacity

fix(ecstore): reduce restart-time startup race noise (#3108)

2026-05-28 15:14:30 +00:00

obs

feat(scanner): add scanner budget progress controls (#3185)

2026-06-03 14:37:58 +00:00

policy

fix(security): add deny_unknown_fields to deserialization structs (#3198)

2026-06-03 15:33:28 +00:00

protocols

fix(ecstore): optimize ObjectInfo clone and fix critical TODOs (#3149)

2026-06-01 00:44:58 +00:00

protos

refactor(tls): centralize runtime foundation (#3065)

2026-05-24 06:41:15 +00:00

rio

fix(ecstore): retry transient walk dir stream errors (#3194)

2026-06-03 13:38:22 +00:00

s3-ops

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

s3-types

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

s3select-api

fix(s3select): validate scan_range protocol and parquet overlap (#3176)

2026-06-03 15:57:17 +00:00

s3select-query

fix(s3select): validate scan_range protocol and parquet overlap (#3176)

2026-06-03 15:57:17 +00:00

scanner

feat(scanner): add versioned scan checkpoints (#3220)

2026-06-05 13:49:41 +00:00

signer

fix(signer): address post-merge review comments (#3216)

2026-06-04 22:45:50 +00:00

targets

test(targets): cover Kafka check SASL validation (#3136)

2026-05-31 04:47:21 +00:00

tls-runtime

feat(tls): add inspect command for TLS layouts (#3092)

2026-05-27 07:23:58 +00:00

trusted-proxies

fix(security): harden proxy auth and default credentials (#2981)

2026-05-16 04:01:50 +00:00

utils

fix(rio): map truncated put bodies to incompletebody (#3168)

2026-06-02 11:31:51 +00:00

zip

chore: move mcp crate to standalone repository (#2578)

2026-04-17 12:42:26 +00:00

AGENTS.md

chore(agents): add Rust code quality rules and skill (#3144)

2026-05-31 22:19:36 +08:00