minio

Commit Graph

Author	SHA1	Message	Date
Harshavardhana	586614c73f	fix: temp credentials shouldn't allow policy/group changes (#8675 ) This PR fixes the issue where we might allow policy changes for temporary credentials out of band, this situation allows privilege escalation for those temporary credentials. We should disallow any external actions on temporary creds as a practice and we should clearly differentiate which are static and which are temporary credentials. Refer #8667	2019-12-19 14:21:21 -08:00
poornas	929951fd49	Add support for multiple admins (#8487 ) Also define IAM policies for administering MinIO server	2019-11-19 02:03:18 -08:00
Harshavardhana	822eb5ddc7	Bring in safe mode support (#8478 ) This PR refactors object layer handling such that upon failure in sub-system initialization server reaches a stage of safe-mode operation wherein only certain API operations are enabled and available. This allows for fixing many scenarios such as - incorrect configuration in vault, etcd, notification targets - missing files, incomplete config migrations unable to read encrypted content etc - any other issues related to notification, policies, lifecycle etc	2019-11-09 09:27:23 -08:00

Author

SHA1

Message

Date

Harshavardhana

586614c73f

fix: temp credentials shouldn't allow policy/group changes (#8675 )

This PR fixes the issue where we might allow policy changes
for temporary credentials out of band, this situation allows
privilege escalation for those temporary credentials. We
should disallow any external actions on temporary creds
as a practice and we should clearly differentiate which
are static and which are temporary credentials.

Refer #8667

2019-12-19 14:21:21 -08:00

poornas

929951fd49

Add support for multiple admins (#8487 )

Also define IAM policies for administering
MinIO server

2019-11-19 02:03:18 -08:00

Harshavardhana

822eb5ddc7

Bring in safe mode support (#8478 )

This PR refactors object layer handling such
that upon failure in sub-system initialization
server reaches a stage of safe-mode operation
wherein only certain API operations are enabled
and available.

This allows for fixing many scenarios such as

 - incorrect configuration in vault, etcd,
   notification targets
 - missing files, incomplete config migrations
   unable to read encrypted content etc
 - any other issues related to notification,
   policies, lifecycle etc

2019-11-09 09:27:23 -08:00

3 Commits