75107d7698
fix: remove any duplicate statements in policy input ( #9385 )
...
Add support for removing duplicate statements automatically
5 years ago
1fa65c7f2f
fix: object lock behavior when default lock config is enabled ( #9305 )
5 years ago
2c20716f37
fix: Avoid force delete in compliance/worm mode ( #9276 )
...
also, bring in an additional policy to ensure that
force delete bucket is only allowed with the right
policy for the user, just DeleteBucketAction
policy action is not enough.
5 years ago
43a3778b45
fix: support object-remaining-retention-days policy condition ( #9259 )
...
This PR also tries to simplify the approach taken in
object-locking implementation by preferential treatment
given towards full validation.
This in-turn has fixed couple of bugs related to
how policy should have been honored when ByPassGovernance
is provided.
Simplifies code a bit, but also duplicates code intentionally
for clarity due to complex nature of object locking
implementation.
5 years ago
d8af244708
Add numeric/date policy conditions ( #9233 )
...
add new policy conditions
- NumericEquals
- NumericNotEquals
- NumericLessThan
- NumericLessThanEquals
- NumericGreaterThan
- NumericGreaterThanEquals
- DateEquals
- DateNotEquals
- DateLessThan
- DateLessThanEquals
- DateGreaterThan
- DateGreaterThanEquals
5 years ago
b207520d98
Fix lifecycle GET: AWS SDK complaints on empty config ( #9201 )
5 years ago
2f2c7d91a8
Add new extended list of JWT keys from OpenID group ( #9087 )
...
https://www.iana.org/assignments/jwt/jwt.xhtml#claims
5 years ago
23a8411732
Add a generic Walk()'er to list a bucket, optinally prefix ( #9026 )
...
This generic Walk() is used by likes of Lifecyle, or
KMS to rotate keys or any other functionality which
relies on this functionality.
5 years ago
02a59a04d1
Fix error messages returned by (Put)GetObjectLegalHold ( #9013 )
...
fiixing some minor discrepancies between aws s3 responses
vs minio server
5 years ago
16a6e68d7b
fix: indicate PutBucketEncryption as a valid policy action ( #9009 )
5 years ago
9f298d2311
Omit empty algorithm tags in bucket encryption XML ( #8987 )
...
- Bucket encryption config returned by MinIO would always have the xml namespace
set
- Make unit tests in pkg/bucket/encryption more robust
5 years ago
64ec17b463
Fix Legal Hold request parsing ( #8981 )
...
AWS S3 doesn't enforce the URL in XMLNS, accordingly, removing the
URL in XMLNS for ObjectLegalHold.
This was found while testing https://github.com/minio/minio-go/pull/1226
5 years ago
7e819d00ea
Fix Error Code for ObjectTagging Parsing ( #8971 )
...
Also add Mint tests
5 years ago
33767266e7
Fix Tagging XML Unmarshalling ( #8977 )
...
AWS S3 doesn't strictly enforce the presence of URL in tagging XML.
This PR updates MinIO to behave similarly.
Fixes #8976
5 years ago
e5951e30d0
Add support for Object Tagging in LifeCycle configuration ( #8880 )
...
Fixes #8870
Co-Authored-By: Krishnan Parthasarathi <krisis@users.noreply.github.com>
5 years ago
026265f8f7
Add support for bucket encryption feature ( #8890 )
...
- pkg/bucket/encryption provides support for handling bucket
encryption configuration
- changes under cmd/ provide support for AES256 algorithm only
Co-Authored-By: Poorna <poornas@users.noreply.github.com>
Co-authored-by: Harshavardhana <harsha@minio.io>
5 years ago
881e983ed9
Fix Retention, ObjectLock, LegalHold struct namespaces correctly. ( #8909 )
...
Reverts #8903 to allow structs to be unmarshalled
even if the namespace is missing.
5 years ago
5bd0e95eef
Set default namespace for necessary structs ( #8903 )
5 years ago
0cbebf0f57
Rename pkg/{tagging,lifecycle} to pkg/bucket sub-directory ( #8892 )
...
Rename to allow for more such features to come in a more
proper hierarchical manner.
5 years ago
Harshavardhana