mirror of
https://github.com/rustfs/rustfs.git
synced 2026-10-13 16:11:56 +00:00
Hauser
1266d4c270
* feat(tls): reload external certificate snapshots coherently Pin projected certificate generations, validate complete TLS material, coordinate server consumers, and invalidate outbound RPC caches coherently. Add externally managed TLS Secret support and rotation guidance. Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * feat(tls): publish server certificates through a fenced admin API Add opt-in server-leaf publication with dedicated IAM actions, actual TLS transport checks, immutable generations, durable captured-token CAS and idempotent receipts. Preserve independent trust and client identity sources and distinguish visible publication state from the full serving chain. Validate 64 TLS tests, 41 TLS-runtime tests, the focused IAM policy test, and eight live local API scenarios including least privilege and restart. Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * fix(admin): route certificate handler types through S3 facade Use the existing admin S3 facade to keep direct s3s imports within the footprint ratchet. Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * test(admin): include TLS certificate routes in route matrix Account for the registered certificate-state GET and certificate publication POST without changing route behavior or weakening matrix assertions. Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * fix(tls): reconcile startup trust before skipping reloads Compare the initialized listener bundle with coherently published outbound material, retain startup trust and client identity when sources disappear, and cover independent startup rotations through real reload passes. Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * refactor(tls): reuse pinned generations and prepared listener state Co-Authored-By: heihutu <heihutu@gmail.com> Co-Authored-By: zhi22915 <qiuzgang@gmail.com> * fix(tls): preserve startup trust source requirements --------- Co-authored-by: heihutu <heihutu@gmail.com> Co-authored-by: zhi22915 <qiuzgang@gmail.com> Co-authored-by: overtrue <anzhengchao@gmail.com>
69 lines
3.6 KiB
Markdown
69 lines
3.6 KiB
Markdown
# Documentation
|
|
|
|
Use the focused indexes rather than treating this directory as an unordered
|
|
collection:
|
|
|
|
- [Architecture knowledge base](architecture/README.md)
|
|
- [Testing references](testing/README.md)
|
|
|
|
## Operations
|
|
|
|
- [External certificate issuance and TLS rotation](operations/tls-certificate-rotation.md) — publication, native reload, trust separation and failure handling.
|
|
|
|
- [Architecture guard troubleshooting](operations/architecture-guard-troubleshooting.md) — diagnose repository guard failures.
|
|
- [Logging governance](operations/logging-governance.md) — broad event audits, migrations, and guardrail changes.
|
|
|
|
- [Multipart upload memory diagnosis](operations/multipart-memory.md) — allocator attribution, Docker reproduction and sustained upload checks.
|
|
|
|
For the logical per-operation io_uring read cap, see
|
|
[io_uring read chunk size](operations/io-uring-read-chunks.md).
|
|
|
|
For bounded local read-backend startup and cancellation, see
|
|
[io_uring backend initialization](operations/io-uring-initialization.md).
|
|
|
|
For legacy protection assessment and bounded protected copies, see [Object integrity inventory, audit, and migration](operations/shard-integrity-audit.md).
|
|
|
|
For encrypted listing compatibility and older stored fingerprints, see
|
|
[Encrypted object ETags](operations/encrypted-etags.md).
|
|
|
|
Operational runbooks live under [`operations/`](operations/). Replication
|
|
operators should start with:
|
|
|
|
| Runbook | Use it for |
|
|
|---|---|
|
|
| [Site replication operations](operations/site-replication-operations.md) | Health fields, pending operations, outage recovery, re-pair admission, IAM/SSE boundaries, and upgrades. |
|
|
| [Replication target check](operations/replication-check.md) | Validating an S3 destination and version fidelity before enabling replication. |
|
|
| [Replication object size limits](operations/replication-object-size-limits.md) | Multipart routing, large-object limits, and retry characteristics. |
|
|
| [Replication outbound transport](operations/replication-outbound-transport.md) | Integrity headers, generic target behavior, and transport knobs. |
|
|
|
|
For the erasure-coded cluster lifecycle (planning, parity and `EC:0`,
|
|
expansion, rebalance, decommission, heal, drive replacement, restart
|
|
recovery, and the `rc` CLI mapping), start with
|
|
[Cluster and erasure-coding lifecycle operations](operations/cluster-lifecycle-operations.md).
|
|
|
|
For concurrent bucket creation and deletion, see
|
|
[Bucket operation admission](operations/bucket-operation-admission.md).
|
|
|
|
For persisted administrator bucket tasks and bucket recreation, see
|
|
[Bucket heal recovery](operations/bucket-heal-recovery.md).
|
|
|
|
For disk replacement across VM restarts and schema 5/6 maintenance migration,
|
|
see [Replacement generation recovery](operations/replacement-generation-recovery.md).
|
|
|
|
For historical GET timeouts during PUT or Heal, see
|
|
[Object lock contention diagnostics](operations/object-lock-contention.md).
|
|
|
|
Other runbooks remain grouped by filename in [`operations/`](operations/);
|
|
architecture pages link to the relevant runbook where a cross-boundary
|
|
procedure is required.
|
|
|
|
For storage dashboards, see [Storage metrics and observer selection](operations/storage-metrics.md):
|
|
drive ownership, snapshot freshness, counter queries, and rolling upgrades.
|
|
|
|
For optional shard commitments, see [Independent shard integrity rollout](operations/shard-integrity-rollout.md):
|
|
activation, legacy repair results, multipart mode changes, and rollback limits.
|
|
|
|
For crates.io publication of workspace crates, see
|
|
[Workspace Cargo Publish](operations/cargo-publish-workspace.md): dependency
|
|
ordering, dry-run, publish, and failure handling.
|