Repository navigation

fix(docker): make auth bootstrap safe for mounted and upgraded configs - #3192

Open

Adarsh-Me wants to merge 23 commits into

apache:masterfrom

Adarsh-Me:fix-entrypoint-auth-bootstrap

Commits on Sep 22, 2026

Commits on Sep 23, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026

fix(docker): reject an unusable AUTHENTICATOR_CLASS before writing it
Adarsh-Me
committed
a5de9f6

Navigation Menu

Repository navigation

fix(docker): make auth bootstrap safe for mounted and upgraded configs - #3192

fix(docker): make auth bootstrap safe for mounted and upgraded configs#3192
Adarsh-Me wants to merge 23 commits into
apache:masterfrom
Adarsh-Me:fix-entrypoint-auth-bootstrap

Commits on Sep 3, 2026

fix(docker): make auth bootstrap safe for mounted and upgraded configs

Commits on Sep 11, 2026

fix(docker): close review gaps in auth bootstrap alignment

Commits on Sep 12, 2026

fix(docker): close review gaps in auth bootstrap parsing and rewrite

Commits on Sep 13, 2026

fix(docker): keep the config inode when rewriting properties

Commits on Sep 16, 2026

fix(docker): refuse one-sided auth bootstrap and pre-create tmp 0600

Commits on Sep 22, 2026

fix(docker): close the remaining auth bootstrap review gaps

test(docker): cover the rollback branch where restoring also fails

Commits on Sep 23, 2026

fix(docker): decide authentication by side, not by class

fix(docker): read properties and yaml the way the server does

Merge master into fix-entrypoint-auth-bootstrap

fix(docker): let enable-auth.sh answer what the entrypoint asks

Commits on Sep 24, 2026

fix(docker): read the authenticator value the server actually reads

fix(docker): answer the config questions the guards cannot resolve

fix(docker): fail closed on layouts the guards resolved too optimistically

Commits on Sep 25, 2026

fix(docker): read the yaml shapes the scanner still answered wrongly

fix(docker): refuse to arm REST when the yaml names no authenticator

Commits on Sep 26, 2026

fix(docker): reject an unusable AUTHENTICATOR_CLASS before writing it

Commits on Sep 27, 2026

fix(docker): read a flow collection that a child value leaves open

fix(docker): answer yamlscan with what Settings.read() actually loads

Commits on Sep 28, 2026

fix(docker): read a BOM, a node property and a CR as SnakeYAML does

fix(docker): state get's real exit status, and drop the has mode nothing calls

Commits on Sep 29, 2026

fix(docker): read every value the script decides on before the first write

fix(docker): refuse a config the run cannot write, and do not call it damaged