a02ce222f0
Integrate complete R3 input-error regression fix
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:39:36 +08:00
8ae19de7a8
fix(restore): avoid duplicate completion locks for empty upload IDs
...
Keep the storage layer error precedence for missing buckets and uploads while retaining every real upload lock. Cover the alias with short deadlines and race-check the original complete-multipart suite in CI.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:39:36 +08:00
7a4f0b5e69
Integrate native restore test lint correction
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:21:46 +08:00
5ac27f7533
test(restore): follow context-first helper convention
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:21:46 +08:00
fa42a09826
fix(restore): rehydrate the selected version under its object lock
...
Preserve handler version context, resolve the requested version's pool, and
return on the initial read failure without writing metadata. Propagate owned
NoLock to single-part writes, multipart completion and failure cleanup in
the same patch. Preserve the original modification time on cleanup.
Route the restore status copy by version and allow internal multipart
rehydration only for a matching completed transition. Single-pool restores
own the metadata snapshot through download and cleanup. Keep public
completion in object-before-upload order, using the target set's object
lock for single-pool calls, so concurrent completion cannot invert locks.
Cover real signed POSTs, null/UUID and cross-pool identity, download failures,
multipart overwrite guards, Object Lock updates and concurrent completion.
This package depends on the restored-copy cleanup safety delivered in R2.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:20:24 +08:00
fcbf2c7d49
Integrate complete native restore repair after R2 cleanup safety
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:20:24 +08:00
18ba0ef32a
Merge R4 version-specific read expiry rechecks after R1
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:11:41 +08:00
65c59dd860
fix(ilm): recheck read expiry for the resolved version
...
Recheck only local ordinary-delete candidates that need an all-pool lifecycle decision. Match UUID/null identity to the version actually read and queue its global metadata and event; retain a successful read on recheck failure, absence, or refusal.
Keep GET reader cleanup, authorization, proxy reads, single-pool reads, restored-copy cleanup, and expiry response headers on their existing paths. Cover signed GET/HEAD, queue contents, metadata faults, missing matches, no-scan boundaries, and reader-lock release.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 21:07:55 +08:00
e7103d77cb
fix(ilm): constrain restored-copy cleanup to verified tiered versions
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 20:55:22 +08:00
167b95dfd8
Integrate R2 restored-copy cleanup safety with R1
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 20:55:22 +08:00
3a1e132f16
fix(ilm): preserve all-pool approval for tiered batch expiry
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 20:40:04 +08:00
30588eb830
Merge PR #282 restore-copy version targeting for R2
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 20:37:15 +08:00
393a84076f
Merge commit '8c1473a618f89fda3b89462c69c2a3c1a320d4c6' into codex/silo-lifecycle-r1-r4
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-03 20:36:07 +08:00
a21f420de3
fix(sts): keep "not found" in the LDAP auth failure so the console can log in root
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-03 08:52:08 +08:00
dcad2ae3e7
fix(iam): decide unstorable IAM record names before asking the drives
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-03 08:38:24 +08:00
525ab5fa40
fix(pools): do not panic when a rebalance stop finds no rebalance metadata
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-03 08:23:59 +08:00
001078e9ca
fix(ilm): expire a restored copy by the version it belongs to
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-02 21:41:37 +03:00
8c1473a618
fix(pools): move versions whose ILM expiry does not hold with the versions in other pools
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-02 19:59:13 +03:00
347d9763fd
fix(ilm): recheck expiries decided in one pool against the versions of the object in all pools
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-11-02 19:58:46 +03:00
a47bacbc0f
test: satisfy lint for lifecycle migration follow-up
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-02 14:37:04 +08:00
0a546c7a76
fix(pools): preserve ILM cleanup during migration
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-02 14:20:17 +08:00
4cc3bc1de6
Merge remote-tracking branch 'origin/main' into HEAD
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
# Conflicts:
# cmd/erasure-server-pool-decom.go
2026-11-02 12:29:08 +08:00
0cfca29cb2
Merge pull request #264 from botdeniska/fix/free-versions-not-versions
...
fix(ilm): stop taking the free versions of deleted tiered versions for versions
2026-11-01 14:44:22 +08:00
a7310d59fe
Fix cross-parity version listing after pool removal ( #267 )
...
Availability-optimized writes can leave a readable null version across separate EC groups when a disk is unavailable. Recount ordinary null versions for all non-strict reads and cover version listing and complete pool removal with end-to-end tests.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-11-01 14:08:09 +08:00
a995921e57
fix(pools): move ILM-expired current versions during rebalance and remove moved copies
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-29 22:43:26 +03:00
19910230aa
fix(pools): move ILM-expired current versions during decommission
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-29 22:42:17 +03:00
7ce7fc8d1e
fix(pools): do not list or move free versions as delete markers
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-29 22:32:44 +03:00
fb1a619ee1
fix(listing): skip free versions when looking for a latest delete marker
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-29 22:08:34 +03:00
3f13c26eed
fix(ilm): do not let a free version make the latest version noncurrent
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-29 22:07:56 +03:00
dcc2f20ba8
Preserve maintenance timeout behavior and prepare SILO 20261026
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-26 22:43:51 +08:00
39278e068e
fix: isolate storage mutation guards by exact resource
...
Replace process-wide hash-slot mutexes with reference-counted locks keyed
by drive and path. Retain entries before waiting, acquire unique paths in
order, and reclaim entries only after all holders and waiters finish.
Add real storage API regressions for unrelated colliding objects and drives,
plus coverage for cancellation, multi-path order and waiter lifetimes.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-26 21:11:49 +08:00
641eb51a40
test: pin the rollback fixture to its required erasure layout
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 23:47:55 +08:00
6921f8c186
fix: return current bucket inventory from account info
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 21:01:01 +08:00
25d928c9df
test: pin failed-overwrite compatibility fixture to 12+4
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:48:39 +08:00
ee3e7ea716
test: keep deferred read diagnostic helpers with their build tag
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:40:40 +08:00
2a04d5f485
fix: retain maintenance read compatibility with write safety fixes
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:39:31 +08:00
9449e6a4a8
test: preserve reads across late commits and rollback
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:23:14 +08:00
9c4bb39571
fix: preserve versioning context when verifying recovery
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 16:05:28 +08:00
86ce8d6012
test: cover versioned and encrypted multi-pool recovery
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 16:03:13 +08:00
b15aa97c94
test: follow recovery regression lint conventions
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:59:45 +08:00
f54c04846e
fix: recover inconsistent multi-pool copies before acknowledging PUT
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:56:28 +08:00
6fdea3b8d9
test: reject recovery ACK when another pool still wins reads
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:55:10 +08:00
380fcbfe47
test: require safe refusal when pool recovery cannot be confirmed
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:49:29 +08:00
a02fa9644c
test: pin multi-pool overwrite recovery after a minority commit
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:48:33 +08:00
652a1c09d3
fix: protect unfinished commits from abandoned data cleanup
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:23:20 +08:00
c86df14f4d
test: pin abandoned cleanup races with commit and undo
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:22:27 +08:00
03875d61e3
fix: reuse validated latest state without rescanning version history
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:02:23 +08:00
1865985aa1
fix: separate rollback ownership from readable metadata identity
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:41:54 +08:00
076a13f9d2
test: preserve reads after partial no-op metadata updates
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:40:00 +08:00
9a4e089f56
fix: reuse unanimous latest metadata for healthy version histories
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:33:49 +08:00
Feng Ruohang