From dfac1315ca9bf6486c4a3300b0fcaf4b6988242c Mon Sep 17 00:00:00 2001 From: Konstantin Lebedev <9497591+kmlebedev@users.noreply.github.com> Date: Thu, 11 Dec 2025 03:35:59 +0500 Subject: fix: filer do not support IP whitelist right now #7094 (#7095) * fix: filer do not support IP whitelist right now #7094 * Apply suggestion from @gemini-code-assist[bot] Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --------- Co-authored-by: Chris Lu Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> --- weed/server/filer_server.go | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/weed/server/filer_server.go b/weed/server/filer_server.go index 95d344af4..597c5162c 100644 --- a/weed/server/filer_server.go +++ b/weed/server/filer_server.go @@ -173,8 +173,11 @@ func NewFilerServer(defaultMux, readonlyMux *http.ServeMux, option *FilerOption) } }) fs.filer.Cipher = option.Cipher - whiteList := util.StringSplit(v.GetString("guard.white_list"), ",") - fs.filerGuard = security.NewGuard(whiteList, signingKey, expiresAfterSec, readSigningKey, readExpiresAfterSec) + // we do not support IP whitelist right now https://github.com/seaweedfs/seaweedfs/issues/7094 + if v.GetString("guard.white_list") != "" { + glog.Warningf("filer: guard.white_list is configured but the IP whitelist feature is currently disabled. See https://github.com/seaweedfs/seaweedfs/issues/7094") + } + fs.filerGuard = security.NewGuard([]string{}, signingKey, expiresAfterSec, readSigningKey, readExpiresAfterSec) fs.volumeGuard = security.NewGuard([]string{}, volumeSigningKey, volumeExpiresAfterSec, volumeReadSigningKey, volumeReadExpiresAfterSec) fs.checkWithMaster() @@ -254,6 +257,4 @@ func (fs *FilerServer) Reload() { glog.V(0).Infoln("Reload filer server...") util.LoadConfiguration("security", false) - v := util.GetViper() - fs.filerGuard.UpdateWhiteList(util.StringSplit(v.GetString("guard.white_list"), ",")) } -- cgit v1.2.3