890af4c | Marek Siarkowicz | 11 September 2023, 08:30:49 UTC | Merge pull request #16565 from fuweid/35-cp-13824 [3.5] Fix panic in etcd validate secure endpoints | 11 September 2023, 08:30:49 UTC |
635219a | Benjamin Wang | 10 September 2023, 10:17:07 UTC | Merge pull request #16568 from jmhbnz/fix-release-35-cmux [3.5] Backport removing obsolete http 1.0 version for cmux tests | 10 September 2023, 10:17:07 UTC |
bfb3494 | James Blair | 10 September 2023, 09:02:38 UTC | Remove obsolete http 1.0 version. From TestConnectionMultiplexing to ensure the test will run successfully in Debian 12. Signed-off-by: James Blair <mail@jamesblair.net> | 10 September 2023, 09:02:38 UTC |
7816df7 | Wei Fu | 09 September 2023, 13:06:33 UTC | Fix panic in etcd validate secure endpoints Backport: #13824 Signed-off-by: Wei Fu <fuweid89@gmail.com> | 09 September 2023, 13:06:33 UTC |
c8d06bb | Benjamin Wang | 08 September 2023, 17:20:56 UTC | Merge pull request #16555 from ahrtr/3.5_golang_20230908 [3.5] dependency: bump golang to 1.20.8 | 08 September 2023, 17:20:56 UTC |
bdae1d3 | Benjamin Wang | 08 September 2023, 15:31:21 UTC | dependency: bump golang to 1.20.8 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 08 September 2023, 16:50:49 UTC |
630401e | Marek Siarkowicz | 07 September 2023, 11:57:38 UTC | Merge pull request #16550 from jmhbnz/backport-redirecting-metrics-to-file [3.5] Backport redirecting cmux test metrics data into file to reduce output | 07 September 2023, 11:57:38 UTC |
baa580a | James Blair | 07 September 2023, 08:42:03 UTC | Backport redirect metrics data into file to reduce output. Signed-off-by: James Blair <mail@jamesblair.net> | 07 September 2023, 08:42:03 UTC |
182e352 | Benjamin Wang | 30 August 2023, 09:07:54 UTC | Merge pull request #16490 from fuweid/bp-16464 [3.5] api: fix duplicate gateway url issue | 30 August 2023, 09:07:54 UTC |
ad5a6ea | Wei Fu | 28 August 2023, 00:30:20 UTC | test.sh: increase timeout for grpcproxy test Signed-off-by: Wei Fu <fuweid89@gmail.com> | 28 August 2023, 13:00:51 UTC |
68e09de | Wei Fu | 27 August 2023, 23:40:10 UTC | test: add v3 curl test to cover maintenance hash/hashkv REST API Signed-off-by: Benjamin Wang <wachao@vmware.com> Signed-off-by: Wei Fu <fuweid89@gmail.com> | 28 August 2023, 13:00:46 UTC |
83bf5dc | Wei Fu | 27 August 2023, 15:50:38 UTC | api: fix duplicate gateway url issue Run `scripts/genproto.sh --skip-protodoc` and checkout server/wal/walpb/record.pb.go because we still use go.etcd.io/etcd/raft/v3 instead of go.etcd.io/raft/v3. Before ``` ➜ etcd git:(release-3.5) etcdctl put foo bar OK ➜ etcd git:(release-3.5) etcdctl get -w json foo {"header":{"cluster_id":14841639068965178418,"member_id":10276657743932975437,"revision":2,"raft_term":2},"kvs":[{"key":"Zm9v","create_revision":2,"mod_revision":2,"version":1,"value":"YmFy"}],"count":1} ➜ etcd git:(release-3.5) etcdctl compact 2 compacted revision 2 ➜ etcd git:(release-3.5) http_proxy= curl -L http://127.0.0.1:2379/v3/maintenance/hashkv -X POST -d '{"revsion":2}' Not Found ``` After ```bash ➜ etcd git:(bp-16464) http_proxy= curl -L http://127.0.0.1:2379/v3/maintenance/hashkv -X POST -d '{"revsion":2}' {"header":{"cluster_id":"14841639068965178418","member_id":"10276657743932975437","revision":"2","raft_term":"3"},"hash":3305255506,"compact_revision":"2"}% ``` Signed-off-by: Wei Fu <fuweid89@gmail.com> | 27 August 2023, 16:10:33 UTC |
9e0e491 | Benjamin Wang | 27 August 2023, 15:47:57 UTC | Merge pull request #16476 from new-dream/release-3.5-CVE-2022-34038 [3.5] add a verification on the pagebytes which must be > 0 | 27 August 2023, 15:47:57 UTC |
7b8de81 | new-dream | 25 August 2023, 14:02:45 UTC | pkg: add a verification on the pagebytes which must be > 0 Signed-off-by: n00607095 <niechangxu1@huawei.com> | 25 August 2023, 14:02:45 UTC |
6186538 | Benjamin Wang | 21 August 2023, 07:48:46 UTC | Merge pull request #16444 from jmhbnz/deflake-testpagewriterrandom [3.5] tests: Backport recent test flake fixes | 21 August 2023, 07:48:46 UTC |
b9e5d96 | James Blair | 19 August 2023, 09:41:56 UTC | tests: Backport deflake for TestWatchDelay Signed-off-by: James Blair <mail@jamesblair.net> | 19 August 2023, 09:41:56 UTC |
778f226 | James Blair | 19 August 2023, 09:41:18 UTC | tests: Backport deflake for TestPageWriterRandom The PageWriter has cache buffer so that it doesn't call the Writer until the cache is almost full. Since the data's length is random, the pending bytes should be always less than cache buffer size, instead of page size. Signed-off-by: James Blair <mail@jamesblair.net> | 19 August 2023, 09:41:18 UTC |
0b598c4 | Benjamin Wang | 18 August 2023, 09:13:05 UTC | Merge pull request #16435 from jmhbnz/backport-expose-socket-options [3.5] Backport expose socket options | 18 August 2023, 09:13:05 UTC |
164175d | James Blair | 18 August 2023, 07:14:57 UTC | Backport adding unit test for socket options. Co-authored-by: Shawn Gerrard <shawn.gerrard@gmail.com> Signed-off-by: James Blair <mail@jamesblair.net> | 18 August 2023, 07:14:57 UTC |
2a7bffc | James Blair | 18 August 2023, 00:05:19 UTC | Backport export reuse-port and reuse-address so that they cabn be configured via config file. Co-authored-by: Shawn Gerrard <shawn.gerrard@gmail.com> Signed-off-by: James Blair <mail@jamesblair.net> | 18 August 2023, 00:05:19 UTC |
2d2e75d | Benjamin Wang | 17 August 2023, 11:11:43 UTC | Merge pull request #16401 from jmhbnz/update-to-go-1.20 [3.5] Backport update to golang 1.20 minor release | 17 August 2023, 11:11:43 UTC |
f62a894 | James Blair | 11 August 2023, 09:47:30 UTC | Fix goword failure in rafthttp/transport.go. Signed-off-by: James Blair <mail@jamesblair.net> | 11 August 2023, 09:47:30 UTC |
9c7c8c6 | James Blair | 11 August 2023, 09:16:01 UTC | Backport update to golang 1.20 minor release. Signed-off-by: James Blair <mail@jamesblair.net> | 11 August 2023, 09:16:01 UTC |
5d7c457 | Benjamin Wang | 03 August 2023, 12:16:15 UTC | Merge pull request #16262 from CaojiamingAlan/add_UnsafeReadScheduledCompact_and_UnsafeReadFinishedCompact [3.5] Add UnsafeReadScheduledCompact and UnsafeReadFinishedCompact | 03 August 2023, 12:16:15 UTC |
81ed2b3 | Marek Siarkowicz | 02 August 2023, 13:54:21 UTC | Merge pull request #16340 from jmhbnz/streamline-test-commands [3.5] Backport Makefile recipes for common test commands | 02 August 2023, 13:54:21 UTC |
d3df4d5 | Benjamin Wang | 02 August 2023, 08:39:33 UTC | Merge pull request #16352 from z764969689/release-3.5 Backport "bump go version to 1.19.12" to release-3.5 | 02 August 2023, 08:39:33 UTC |
de0df43 | Luke Zhang | 02 August 2023, 04:56:23 UTC | bump go version to 1.19.12 Signed-off-by: Luke Zhang <z764969689@163.com> | 02 August 2023, 07:33:10 UTC |
0d829e4 | James Blair | 02 August 2023, 02:43:40 UTC | Update workflows to use makefile recipes for unit, integration & e2e-release. Signed-off-by: James Blair <mail@jamesblair.net> | 02 August 2023, 02:43:40 UTC |
84b85a0 | James Blair | 01 August 2023, 21:12:36 UTC | Backport Makefile recipes for common test commands. Signed-off-by: James Blair <mail@jamesblair.net> | 01 August 2023, 21:12:36 UTC |
b924891 | Benjamin Wang | 27 July 2023, 08:03:09 UTC | Merge pull request #16311 from gocurr/release-3.5 [3.5] Backport #16272 to 3.5 | 27 July 2023, 08:03:09 UTC |
5df43d9 | Jes Cok | 26 July 2023, 13:37:32 UTC | pkg/flags: fix UniqueURLs'Set to remove duplicates in UniqueURLs'uss From the name of func 'UniqueURLsFromFlag', we can tell that UniqueURLs'uss should not have duplicates. The current implemention of UniqueURLs'Set has a bug to make it unique. Fixes: #16307. Signed-off-by: Jes Cok <xigua67damn@gmail.com> | 26 July 2023, 13:37:32 UTC |
7ba4add | Marek Siarkowicz | 24 July 2023, 10:04:55 UTC | Merge pull request #16280 from jmhbnz/backport-e2e-release-fix Backport fix to e2e release version identifcation | 24 July 2023, 10:04:55 UTC |
f9ae5f8 | James Blair | 21 July 2023, 23:00:45 UTC | Backport fix to e2e release version identifcation. Signed-off-by: James Blair <mail@jamesblair.net> | 21 July 2023, 23:00:45 UTC |
679820a | Benjamin Wang | 19 July 2023, 18:57:30 UTC | Merge pull request #16270 from CaojiamingAlan/init_client_error Backport #14368 to v3.5 | 19 July 2023, 18:57:30 UTC |
a4fa4d3 | caojiamingalan | 18 July 2023, 19:53:08 UTC | Backport #14368 to v3.5 Signed-off-by: caojiamingalan <alan.c.19971111@gmail.com> | 18 July 2023, 19:53:08 UTC |
eb9bfaa | caojiamingalan | 17 July 2023, 19:45:00 UTC | Follow up https://github.com/etcd-io/etcd/pull/16068#discussion_r1263667496 Add a UnsafeReadScheduledCompact and UnsafeReadFinishedCompact Signed-off-by: caojiamingalan <alan.c.19971111@gmail.com> | 18 July 2023, 15:54:16 UTC |
8f4b6c9 | Benjamin Wang | 15 July 2023, 09:11:34 UTC | Merge pull request #16068 from CaojiamingAlan/release-3.5 [3.5] etcdserver: backport check scheduledCompactKeyName and finishedCompac… | 15 July 2023, 09:11:34 UTC |
6ac9d94 | caojiamingalan | 15 July 2023, 00:22:38 UTC | etcdserver: backport check scheduledCompactKeyName and finishedCompactKeyName before writing hash to release-3.5. Fix #15919. Check ScheduledCompactKeyName and FinishedCompactKeyName before writing hash to hashstore. If they do not match, then it means this compaction has once been interrupted and its hash value is invalid. In such cases, we won't write the hash values to the hashstore, and avoids the incorrect corruption alarm. Signed-off-by: caojiamingalan <alan.c.19971111@gmail.com> | 15 July 2023, 00:22:38 UTC |
9ac1d73 | Benjamin Wang | 14 July 2023, 15:08:51 UTC | Merge pull request #16241 from liangyuanpeng/backport_13577_3.5 [3.5] Backport #13577 to 3.5 | 14 July 2023, 15:08:51 UTC |
c7d9708 | Benjamin Wang | 14 July 2023, 12:46:38 UTC | Merge pull request #16204 from kensou97/release-3.5 [3.5] clientv3: create keepAliveCtxCloser goroutine only if ctx can be canc… | 14 July 2023, 12:46:38 UTC |
f3e1156 | Benjamin Wang | 14 July 2023, 10:13:52 UTC | Merge pull request #16227 from ahrtr/go_3.5_20230712 [3.5] Bump go version to 1.19.11 to fix CVE GO-2023-1878 | 14 July 2023, 10:13:52 UTC |
960cd26 | Lan Liang | 14 July 2023, 02:22:25 UTC | Backport #13577 Disable auth gracefully without impacting existing watchers. Signed-off-by: Lan Liang <gcslyp@gmail.com> | 14 July 2023, 04:50:21 UTC |
9fa58bf | Benjamin Wang | 12 July 2023, 15:54:34 UTC | bump go version to 1.19.11 to fix CVE GO-2023-1878 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 12 July 2023, 15:54:34 UTC |
4d7b7e5 | zhangwenkang | 10 July 2023, 15:08:23 UTC | clientv3: create keepAliveCtxCloser goroutine only if ctx can be canceled Signed-off-by: zhangwenkang <zwenkang@vmware.com> | 10 July 2023, 15:17:05 UTC |
d4f779a | Benjamin Wang | 10 July 2023, 10:15:05 UTC | Merge pull request #16201 from Tachone/release-3.5 [Backport 3.5] etcdutl: fix db double closed | 10 July 2023, 10:15:05 UTC |
2921992 | shitao.lst | 21 June 2023, 09:50:37 UTC | [3.5] etcdutl: fix db double closed Signed-off-by: shitao.lst <acm_tach@163.com> | 10 July 2023, 07:13:13 UTC |
e5bd8f4 | Benjamin Wang | 06 July 2023, 17:59:22 UTC | Merge pull request #16188 from kensou97/release-3.5 [3.5] clientv3: remove v3.WithFirstKey() in Barrier.Wait() | 06 July 2023, 17:59:22 UTC |
6be3ad3 | zhangwenkang | 04 July 2023, 14:01:54 UTC | clientv3: remove v3.WithFirstKey() in Barrier.Wait() fix the unexpected blocking when using Barrier.Wait(), e.g. NewBarrier(client, "a").Wait() will block if key "a" is not existed but "a0" is existed, but it should return immediately. Signed-off-by: zhangwenkang <zwenkang@vmware.com> | 06 July 2023, 08:18:52 UTC |
f3f3729 | Benjamin Wang | 04 July 2023, 13:09:24 UTC | Merge pull request #16151 from jmhbnz/revert-workflow-backport Revert backport of arm64 scheduled workflows | 04 July 2023, 13:09:24 UTC |
a233b2e | Benjamin Wang | 04 July 2023, 09:06:30 UTC | Merge pull request #16165 from tjungblu/revbump_3.5 [3.5] Adding optional revision bump and mark compacted to snapshot restore | 04 July 2023, 09:06:30 UTC |
d0a56c0 | Thomas Jungblut | 03 July 2023, 13:33:01 UTC | update etcdctl flag description for snapshot restores Signed-off-by: Thomas Jungblut <tjungblu@redhat.com> | 03 July 2023, 13:33:01 UTC |
f6668e0 | Benjamin Wang | 03 July 2023, 12:50:26 UTC | etcdutl: update description for --mark-compacted and --bump-revision flags in snapshot restore command Signed-off-by: Benjamin Wang <wachao@vmware.com> | 03 July 2023, 13:31:39 UTC |
4425ef5 | Thomas Jungblut | 03 July 2023, 10:57:12 UTC | Adding optional revision bump and mark compacted to snapshot restore Signed-off-by: Allen Ray <alray@redhat.com> Signed-off-by: Thomas Jungblut <tjungblu@redhat.com> | 03 July 2023, 10:57:12 UTC |
6c1f883 | James Blair | 28 June 2023, 05:11:26 UTC | Revert "Merge pull request #16119 from natusameer/release-3.5" This reverts commit cb38980e2012ecff5e525e7d61cf23ee843b305d, reversing changes made to f565a94844576391beed88a31403d796c31b84e3. Changes reversed as scheduled github actions must exist in default branch. Signed-off-by: James Blair <mail@jamesblair.net> | 28 June 2023, 05:11:26 UTC |
cb38980 | Marek Siarkowicz | 27 June 2023, 07:21:50 UTC | Merge pull request #16119 from natusameer/release-3.5 Add e2e-arm64.yaml and Tests-arm64.yaml to release-3.5 | 27 June 2023, 07:21:50 UTC |
c31f282 | Sameer Natu | 25 June 2023, 02:00:24 UTC | Add e2e-arm64.yaml and tests-arm64.yaml to release-3.5 scheduled at 1.30 Signed-off-by: Sameer Natu <sameer.natu@gmail.com> | 25 June 2023, 02:00:24 UTC |
f565a94 | Benjamin Wang | 21 June 2023, 10:04:51 UTC | Merge pull request #16019 from tjungblu/putauthshort_3.5 [3.5] Early exit auth check on lease puts | 21 June 2023, 10:04:51 UTC |
306c60a | Benjamin Wang | 19 June 2023, 08:33:57 UTC | Merge pull request #16048 from kkkkun/cp-14457-to-3.5 [3.5] etcdserver: fix corruption check when server has just been compacted | 19 June 2023, 08:33:57 UTC |
2c04d51 | Marek Siarkowicz | 16 June 2023, 19:11:54 UTC | Merge pull request #16088 from jmhbnz/backport-gover-simplification [3.5] Backport .github/workflows: Read .go-version as a step and not separate workflow | 16 June 2023, 19:11:54 UTC |
b5f07c9 | James Blair | 16 June 2023, 08:37:38 UTC | Backport .github/workflows: Read .go-version as a step and not separate workflow. Signed-off-by: James Blair <mail@jamesblair.net> | 16 June 2023, 08:37:38 UTC |
423f951 | Thomas Jungblut | 16 June 2023, 07:42:09 UTC | Add first unit test for authApplierV3 This contains a slight refactoring to expose enough information to write meaningful tests for auth applier v3. Signed-off-by: Thomas Jungblut <tjungblu@redhat.com> | 16 June 2023, 07:42:09 UTC |
b2fb75d | Thomas Jungblut | 16 June 2023, 07:14:41 UTC | Early exit auth check on lease puts Mitigates etcd-io#15993 by not checking each key individually for permission when auth is entirely disabled or admin user is calling the method. Signed-off-by: Thomas Jungblut <tjungblu@redhat.com> | 16 June 2023, 07:14:41 UTC |
cf00c2d | Benjamin Wang | 12 June 2023, 08:02:47 UTC | Merge pull request #16032 from kkkkun/add_experimental_hash_check_to_help_3.5 cherry-pick #16031 to release-3.5 | 12 June 2023, 08:02:47 UTC |
8cffdba | kkkkun | 11 June 2023, 14:26:55 UTC | etcdserver: fix corruption check when server has just been compacted Signed-off-by: kkkkun <scuzk373x@gmail.com> | 11 June 2023, 14:27:02 UTC |
ffcde60 | Benjamin Wang | 09 June 2023, 23:03:44 UTC | Merge pull request #16039 from kkkkun/replace_gobin replace gobin with go install | 09 June 2023, 23:03:44 UTC |
dca13c6 | kkkkun | 09 June 2023, 06:17:29 UTC | replace gobin with go install Signed-off-by: kkkkun <scuzk373x@gmail.com> | 09 June 2023, 06:17:37 UTC |
ac034d0 | Benjamin Wang | 08 June 2023, 10:48:55 UTC | Merge pull request #16033 from daljitdokal/release-3.5 [3.5] Backport updating go to latest patch release 1.19.10 | 08 June 2023, 10:48:55 UTC |
15d2aef | daljitdokal | 08 June 2023, 09:12:20 UTC | [3.5] Backport updating go to latest patch release 1.19.10 Signed-off-by: daljitdokal <daljit.dokal@yahoo.co.nz> | 08 June 2023, 09:12:20 UTC |
d3d530c | scuzk373x@gmai.com | 08 June 2023, 06:26:04 UTC | add compact hash check to help Signed-off-by: scuzk373x@gmai.com <zhuanwajiang@pinduoduo.com> | 08 June 2023, 06:26:11 UTC |
4d4984f | Benjamin Wang | 26 May 2023, 10:22:41 UTC | Merge pull request #15939 from HubertZhang/backport-3.5-15021 [release-3.5]naming/endpoints: backport of #15021, fix endpoints prefix bug | 26 May 2023, 10:22:41 UTC |
9811738 | Hubert Zhang | 23 May 2023, 20:43:25 UTC | Fix test of clientv3/naming Signed-off-by: Hubert Zhang <hubert.zyk@gmail.com> | 24 May 2023, 06:58:39 UTC |
2158f21 | Ramil Mirhasanov | 19 December 2022, 11:34:16 UTC | clientv3/naming/endpoints: fix endpoints prefix bug fixes bug with multiple endpoints with same prefix Signed-off-by: Ramil Mirhasanov <ramil600@yahoo.com> | 23 May 2023, 12:00:21 UTC |
721d9fe | Benjamin Wang | 18 May 2023, 02:56:41 UTC | Merge pull request #15907 from yellowzf/release-3.5-backport [release-3.5]grpcproxy: fix memberlist results not update when proxy node down | 18 May 2023, 02:56:41 UTC |
ecfed91 | yellowzf | 06 May 2023, 03:29:19 UTC | grpcproxy: fix memberlist results not update when proxy node down If start grpc proxy with --resolver-prefix, memberlist will return all alive proxy nodes, when one grpc proxy node is down, it is expected to not return the down node, but it is still return Signed-off-by: yellowzf <zzhf3311@163.com> | 16 May 2023, 03:35:31 UTC |
bdbbde9 | Marek Siarkowicz | 11 May 2023, 11:39:43 UTC | version: bump up to 3.5.9 | 11 May 2023, 11:39:43 UTC |
d506948 | Benjamin Wang | 10 May 2023, 00:16:27 UTC | Merge pull request #15815 from mitake/backport-15656-3.5 Backport 15656 to release-3.5 | 10 May 2023, 00:16:27 UTC |
f53707e | Benjamin Wang | 09 May 2023, 20:48:02 UTC | Merge pull request #15860 from serathius/go-version-release-3.5 [release-3.5] Move go version to dedicated .go-version file | 09 May 2023, 20:48:02 UTC |
45d8cb2 | Marek Siarkowicz | 09 May 2023, 10:18:29 UTC | Move go version to dedicated .go-version file Signed-off-by: Marek Siarkowicz <siarkowicz@google.com> | 09 May 2023, 11:50:34 UTC |
e38eb67 | Hitoshi Mitake | 31 March 2023, 14:07:23 UTC | tests: e2e and integration test for timetolive Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com> Co-authored-by: Benjamin Wang <wachao@vmware.com> | 08 May 2023, 13:47:58 UTC |
d1b1aa9 | Hitoshi Mitake | 29 March 2023, 11:46:32 UTC | etcdserver: protect lease timetilive with auth Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com> Co-authored-by: Benjamin Wang <wachao@vmware.com> | 08 May 2023, 13:45:38 UTC |
d6bc827 | Benjamin Wang | 05 May 2023, 00:16:26 UTC | Merge pull request #15822 from jmhbnz/release-3.5-backport [3.5] Backport updating go to latest patch release 1.19.9 | 05 May 2023, 00:16:26 UTC |
fb8fba7 | James Blair | 04 May 2023, 02:13:56 UTC | Backport go update to latest patch release 1.19.9. Signed-off-by: James Blair <mail@jamesblair.net> | 04 May 2023, 02:13:56 UTC |
b91025a | James Blair | 04 May 2023, 02:13:39 UTC | Backport centralising go version for actions workflows. Signed-off-by: James Blair <mail@jamesblair.net> | 04 May 2023, 02:13:39 UTC |
f4f5ac9 | Benjamin Wang | 25 April 2023, 06:48:16 UTC | Merge pull request #15774 from sharathsivakumar/release-3.5 server: backport 15743, improved description of --initial-cluster-sta… | 25 April 2023, 06:48:16 UTC |
c0f2954 | sharathsivakumar | 25 April 2023, 06:02:39 UTC | server: backport 15743, improved description of --initial-cluster-state flag Signed-off-by: sharathsivakumar <mailssr9@gmail.com> | 25 April 2023, 06:02:39 UTC |
217d183 | Marek Siarkowicz | 13 April 2023, 10:08:47 UTC | version: bump up to 3.5.8 | 13 April 2023, 10:08:47 UTC |
9d2cda4 | Marek Siarkowicz | 11 April 2023, 10:21:50 UTC | Merge pull request #15676 from ahrtr/jwt_panic_3.5_20230410 [3.5] etcdserver: verify field 'username' and 'revision' present when decoding a JWT token | 11 April 2023, 10:21:50 UTC |
3cd07fe | Marek Siarkowicz | 11 April 2023, 08:48:30 UTC | Merge pull request #15695 from ahrtr/3.5_request_progress_20230411 [3.5] etcdserver: guarantee order of requested progress notifications | 11 April 2023, 08:48:30 UTC |
cd01925 | Benjamin Wang | 11 April 2023, 01:48:00 UTC | etcdserver: Guarantee order of requested progress notifications Progress notifications requested using ProgressRequest were sent directly using the ctrlStream, which means that they could race against watch responses in the watchStream. This would especially happen when the stream was not synced - e.g. if you requested a progress notification on a freshly created unsynced watcher, the notification would typically arrive indicating a revision for which not all watch responses had been sent. This changes the behaviour so that v3rpc always goes through the watch stream, using a new RequestProgressAll function that closely matches the behaviour of the v3rpc code - i.e. 1. Generate a message with WatchId -1, indicating the revision for *all* watchers in the stream 2. Guarantee that a response is (eventually) sent The latter might require us to defer the response until all watchers are synced, which is likely as it should be. Note that we do *not* guarantee that the number of progress notifications matches the number of requests, only that eventually at least one gets sent. Signed-off-by: Benjamin Wang <wachao@vmware.com> | 11 April 2023, 01:51:48 UTC |
643e6e1 | Benjamin Wang | 09 April 2023, 22:42:18 UTC | etcdserver: verify field 'username' and 'revision' present when decoding a JWT token Signed-off-by: Benjamin Wang <wachao@vmware.com> | 10 April 2023, 00:21:43 UTC |
5872b80 | Benjamin Wang | 07 April 2023, 22:22:37 UTC | Merge pull request #15512 from engow/automated-cherry-pick-of-#15432-origin-release-3.5 [3.5] server/auth: fix auth panic bug when user changes password | 07 April 2023, 22:22:37 UTC |
4501fd8 | Marek Siarkowicz | 07 April 2023, 15:47:23 UTC | Merge pull request #15619 from mitake/3.5-backport-15294 [3.5] backport 15294 | 07 April 2023, 15:47:23 UTC |
7f4eef0 | Marek Siarkowicz | 07 April 2023, 08:56:46 UTC | Merge pull request #15661 from ahrtr/backport_15447_20230407 [3.5] etcdserver: set zap logging to wsproxy | 07 April 2023, 08:56:46 UTC |
b31caa3 | Benjamin Wang | 07 April 2023, 05:33:39 UTC | set zap logging to wsproxy Signed-off-by: Benjamin Wang <wachao@vmware.com> | 07 April 2023, 05:33:39 UTC |
b1df3df | Benjamin Wang | 06 April 2023, 12:41:20 UTC | Merge pull request #15653 from mitake/3.5-backport-15648 [3.5] backport 15648 | 06 April 2023, 12:41:20 UTC |
e6c2e38 | Benjamin Wang | 06 April 2023, 08:48:57 UTC | security: remove password after authenticating the user fix https://nvd.nist.gov/vuln/detail/CVE-2021-28235 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 11:12:02 UTC |
291cb71 | Benjamin Wang | 06 April 2023, 04:58:01 UTC | test: add an e2e test to reproduce https://nvd.nist.gov/vuln/detail/CVE-2021-28235 Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 11:11:20 UTC |
070341c | Benjamin Wang | 06 April 2023, 07:48:49 UTC | Merge pull request #15651 from ahrtr/bump_go_20230406_3.5 [3.5] bump golang to 1.19.8 to fix four CVEs | 06 April 2023, 07:48:49 UTC |
f905e2c | Benjamin Wang | 06 April 2023, 06:27:38 UTC | bump golang to 1.19.8 fix CVE https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8/m/OV40vnafAwAJ Signed-off-by: Benjamin Wang <wachao@vmware.com> | 06 April 2023, 06:27:40 UTC |
e6eeca6 | Hitoshi Mitake | 11 February 2023, 05:51:39 UTC | server/auth: disallow creating empty permission ranges Signed-off-by: Hitoshi Mitake <h.mitake@gmail.com> Co-authored-by: Benjamin Wang <wachao@vmware.com> | 03 April 2023, 13:55:55 UTC |