He Weiwei
3e515bfabb
feat(quota): skip to save blob size when quota disabled
...
Signed-off-by: He Weiwei <hweiwei@vmware.com>
2019-09-25 09:19:20 +00:00
He Weiwei
d8c2bf6f86
fix(quota): handle range header missing in response
...
Signed-off-by: He Weiwei <hweiwei@vmware.com>
2019-09-25 09:17:22 +00:00
stonezdj(Daojun Zhang)
ec559b0585
Merge pull request #9123 from stonezdj/immutable_tags
...
Add DAO for immutable tags
2019-09-23 21:46:07 +08:00
Steven Zou
a73f896f23
Merge pull request #9154 from steven-zou/feature/pluggable_scanner_s2
...
[stage2]support pluggable scanner
2019-09-23 21:12:27 +08:00
danfengliu
cb5a145f27
Merge pull request #9212 from danfengliu/upgrade-preparev17-for-new-migrate-jenkins-pipeline-add-more-test-data
...
commented 2 lines to remove Vulnerability scan all data verification
2019-09-23 19:00:19 +08:00
danfengliu
7144f23857
Merge pull request #9204 from danfengliu/add-id-for-sign-up-btn
...
Modify sign-up button xpath from relative html path to id
2019-09-23 18:00:51 +08:00
stonezdj
29d2bcce99
Add DAO for immutable tags
...
Signed-off-by: stonezdj <stonezdj@gmail.com>
2019-09-23 16:45:07 +08:00
stonezdj(Daojun Zhang)
93bfcd78fd
Merge pull request #9115 from wy65701436/immutable-selector
...
Add quota switcher swagger doc
2019-09-23 16:43:06 +08:00
Steven Zou
d616bc3509
add scan report CRUD supporting and
...
- change error collection in scan job
- add dead client checking in client pool
- change key word type to interface{} for q.Query
- update bearer authorizer
- add required UT cases
Signed-off-by: Steven Zou <szou@vmware.com>
2019-09-23 16:21:39 +08:00
Danfeng Liu (c)
6e4331fb92
In this PR right now, I commented 2 lines to remove a verification, it's because that Vulnerability data is not consistent when migrate harbor from 1.7 to 1.9, I've filed an issue to follow it, once it's fixed, these 2 commented lines will be come back.
...
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2019-09-23 16:14:01 +08:00
Danfeng Liu (c)
cca1fab069
Modify sign-up button xpath from relative html path to id, and modify script.
...
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2019-09-23 15:40:27 +08:00
Mia ZHOU
dfa9d61ef3
Merge pull request #9203 from zhoumeina/add_unit_test
...
Karma test refactor to support test in portal and coverage report
2019-09-23 15:27:52 +08:00
Ziming
df625f4ef9
Merge pull request #9177 from bitsf/fix_tag_retention_test
...
adjust wait job timeout in test case
2019-09-23 14:47:05 +08:00
Meina Zhou
898442370a
Karma test refactor to support test in portal and coverage report
...
Signed-off-by: Meina Zhou <meinaz@vmware.com>
2019-09-23 13:52:07 +08:00
Steven Zou
0c19eba8c2
[stage2]support pluggable scanner
...
- add scanner rest API v1 spec
- implement v1 client which is used to talk to scanner adapter
- adjust data/orm models
- adjust code package structure
Signed-off-by: Steven Zou <szou@vmware.com>
- implement scan client which is used to talk to scanner adapter
- implement scan job which take the work of communicating with scanner
- update scanner mgmt API routes
- add corresponding UT cases
2019-09-23 09:37:54 +08:00
Wenkai Yin(尹文开)
63373c8ef9
Merge pull request #9158 from reasonerjt/secure-cookie
...
Add Secure flag to cookie
2019-09-22 08:15:18 +08:00
Ziming Zhang
f6ac2687fa
fix dayspl/daysps test
...
Signed-off-by: Ziming Zhang <zziming@vmware.com>
Change-Id: I3c654e305f774c2329109888f68e708efeca721e
2019-09-20 18:32:58 +08:00
Wang Yan
38a9690f9a
Merge pull request #9180 from danfengliu/nightly-test-keyword-create-a-new-project-missing-btn-click-1
...
Add retry in keyword <Create An New Project> to make sure OK button was clicked successfully
2019-09-20 18:11:04 +08:00
Daniel Jiang
f491061b57
Merge pull request #8440 from gklp/gklp_issue_8197_wrong_header_content_type_after_redirection
...
All redirect operations should have content-type as json
2019-09-20 17:21:01 +08:00
Daniel Jiang
6effa2105a
Merge pull request #9142 from reasonerjt/oidc-groups
...
Support OIDC groups
2019-09-20 17:12:50 +08:00
Danfeng Liu (c)
9a147f0999
In nightly test, keyword <Create An New Project> failed after angular upgrade, the OK button in create new project page was clicked, but it's not effective, so I add a retry for OK button click, if the button was not disappeared, script will be clicked again.
...
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2019-09-20 16:22:10 +08:00
Ziming Zhang
afe81a8b3b
adjust wait job timeout
...
Change-Id: I8f32f814158d4a7418c39edb7a781879db17a4d7
Signed-off-by: Ziming Zhang <zziming@vmware.com>
2019-09-20 16:18:03 +08:00
danfengliu
17d221bf85
Merge pull request #9173 from danfengliu/change-way-of-checking-UI-element-value-due-to-angula-upgrade
...
Modify way of Project creation verifycation in migrate pipeline
2019-09-20 16:01:58 +08:00
jwangyangls
3144635ea1
Merge pull request #9139 from jwangyangls/add-oidc-claim
...
Add oidc group claim in config-auth、member、administrator
2019-09-20 15:58:31 +08:00
xaleeks
43b25d5ddd
Merge pull request #9166 from michmike/master
...
Updating the security disclosure process
2019-09-20 15:34:40 +08:00
Danfeng Liu (c)
9e05e6dc74
After angula upraded, all migrate pipelines failed at system setting project creation verification. Keyword of Page Should Contain is not working anymore in new UI, so I choosen a new more precise way of checking the select element value of 'everyone'
...
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2019-09-20 14:55:53 +08:00
Yogi_Wang
63f135337e
Add oidc group claim
...
1. add oidc group claim in configration page
2. add oidc group-page in user page,you can go to it through clicking add-group button;
3. add oidc list page in administrator ,admin can go to this page
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2019-09-20 13:53:25 +08:00
Daniel Jiang
f1367064fb
Address review comment
...
Address review comments for commit
b21f9dc6f1
and resolve conflict
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-09-20 13:42:39 +08:00
Michael Michael
64e60fe9cc
Update SECURITY.md
2019-09-19 21:30:37 -07:00
Wenkai Yin(尹文开)
20262d70bb
Merge pull request #9155 from reasonerjt/gen-session-id
...
Generate new session ID after login
2019-09-20 11:22:44 +08:00
Michael Michael
3d9dc4e734
Update SECURITY.md
2019-09-19 19:08:22 -07:00
Michael Michael
e908e1c588
Update SECURITY.md
...
updating to include cncf lists for public disclosure
Signed-off-by: Michael Michael michmike@cs.stanford.edu
2019-09-19 15:29:27 -07:00
Michael Michael
0300a804c4
Update SECURITY.md
2019-09-19 15:07:20 -07:00
Michael Michael
34093e73c4
Update SECURITY.md
2019-09-19 14:22:04 -07:00
Michael Michael
e80d208192
Update SECURITY.md
2019-09-19 14:08:49 -07:00
Michael Michael
daec26a5f9
moving the doc to the top of the repo
2019-09-19 10:37:40 -07:00
Wang Yan
adc9878e65
Merge pull request #9165 from xaleeks/xaleeks-security-disclosure-process
...
security disclosure process
2019-09-20 01:09:01 +08:00
xaleeks
9b4e3fa5c4
security disclosure process
...
Signed-off-by: xaleeks <xalex@vmware.com>
2019-09-20 00:02:34 +08:00
Daniel Jiang
3e5973fc6e
Add Secure flag to cookie
...
This commit modifies nginx configuration file to make sure the secure
flag is added to "Set-Cookie" header when Harbor is serving https
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-09-19 21:04:37 +08:00
Daniel Jiang
07dd14d3b5
Generate new session ID after login
...
This commit mitigates the Session Fixation issue by making sure a new
session ID is generated each time user logs in to Harbor
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-09-19 20:51:50 +08:00
wang yan
cab07f71cd
Merge branch 'master' of https://github.com/goharbor/harbor into immutable-selector
2019-09-19 17:55:29 +08:00
Daniel Jiang
b21f9dc6f1
Support OIDC groups
...
This commit enable project admin to add group as project member when
Harbor is configured against OIDC as AuthN backend.
It populates the information of groups from ID Token based on the claim
that is set in OIDC settings.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-09-19 17:49:31 +08:00
danfengliu
c360e71d51
Merge pull request #9148 from AllForNothing/add-member-nightly
...
Improve project name validator when adding new project
2019-09-19 17:13:31 +08:00
Steven Zou
4c4897aef1
Merge pull request #9134 from steven-zou/feature/pluggable_scanners
...
support pluggable scanner
2019-09-19 16:08:24 +08:00
sshijun
6b2ba60c1e
Improve project name validator when adding new project
...
Signed-off-by: sshijun <sshijun@vmware.com>
2019-09-19 13:53:36 +08:00
jwangyangls
e505ba53f0
Merge pull request #9147 from jwangyangls/add-id-edit-rep
...
Add id in repo info button
2019-09-19 13:03:06 +08:00
Yogi_Wang
450184c4ec
Add id in repo info button
...
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2019-09-19 12:21:07 +08:00
jwangyangls
5ffba4a6f5
Merge pull request #9069 from danfengliu/script-project-quotas-nightly-test-case
...
Script test case for project quotas
2019-09-19 10:27:22 +08:00
Steven Zou
e324a4d623
support pluggable scanner
...
- add DAO layer for scanner registration
- add CURD manager for scanner registration
- add API controller for plug scanner
- add REST APIs for CURD of plug scanner
- add migration sql:0011_1.10.0
- add scan interface definition (no implementations)
- add related UT cases with testify
fix #8979 #8990
Signed-off-by: Steven Zou <szou@vmware.com>
2019-09-18 21:56:45 +08:00
Steven Zou
ae0c129b27
Merge pull request #9125 from wy65701436/refactor-selector
...
refactor selector of retention
2019-09-18 18:27:16 +08:00