Merge pull request #8609 from emqx/sync-4.3

chore: sync v4.3 to v4.4

.github/workflows/release.yaml

@@ -66,24 +66,24 @@ jobs:
                -X POST \
                -d "{\"repo\":\"emqx/emqx\", \"tag\": \"${{ github.ref_name }}\" }" \
                ${{ secrets.EMQX_IO_RELEASE_API }}
-      - name: update repo.emqx.io
+      - uses: emqx/push-helm-action@v1
-        if: github.event_name == 'release' && endsWith(github.repository, 'enterprise') && matrix.profile == 'emqx-ee'
-        run: |
-          curl --silent --show-error \
-            -H "Authorization: token ${{ secrets.CI_GIT_TOKEN }}" \
-            -H "Accept: application/vnd.github.v3+json" \
-            -X POST \
-            -d "{\"ref\":\"v1.0.3\",\"inputs\":{\"version\": \"${{ github.ref_name }}\", \"emqx_ee\": \"true\"}}" \
-            "https://api.github.com/repos/emqx/emqx-ci-helper/actions/workflows/update_emqx_repos.yaml/dispatches"
-      - name: update repo.emqx.io
         if: github.event_name == 'release' && endsWith(github.repository, 'emqx') && matrix.profile == 'emqx'
-        run: |
+        with:
-          curl --silent --show-error \
+          charts_dir: "${{ github.workspace }}/deploy/charts/emqx"
-            -H "Authorization: token ${{ secrets.CI_GIT_TOKEN }}" \
+          version: ${{ github.ref_name }}
-            -H "Accept: application/vnd.github.v3+json" \
+          aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
-            -X POST \
+          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-            -d "{\"ref\":\"v1.0.3\",\"inputs\":{\"version\": \"${{ github.ref_name }}\", \"emqx_ce\": \"true\"}}" \
+          aws_region: "us-west-2"
-            "https://api.github.com/repos/emqx/emqx-ci-helper/actions/workflows/update_emqx_repos.yaml/dispatches"
+          aws_bucket_name: "repos-emqx-io"
+      - uses: emqx/push-helm-action@v1
+        if: github.event_name == 'release' && endsWith(github.repository, 'enterprise') && matrix.profile == 'emqx-ee'
+        with:
+          charts_dir: "${{ github.workspace }}/deploy/charts/emqx-ee"
+          version: ${{ github.ref_name }}
+          aws_access_key_id: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          aws_secret_access_key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          aws_region: "us-west-2"
+          aws_bucket_name: "repos-emqx-io"
       - name: update homebrew packages
         if: github.event_name == 'release' && endsWith(github.repository, 'emqx') && matrix.profile == 'emqx'
         run: |

etc/emqx.conf

@@ -653,7 +653,10 @@ log.rotation.count = 5
 ## Allow anonymous authentication by default if no auth plugins loaded.
 ## Notice: Disable the option in production deployment!
 ##
-## Value: true | false
+## Configured to `false_quick_deny` means quick deny of anonymous clients
+## (without username). So the auth backend checks can be skipped.
+##
+## Value: true | false | false_quick_deny
 allow_anonymous = true
 
 ## Allow or deny if no ACL rules matched.