Commit Graph

8198 Commits

Author SHA1 Message Date
wang yan
58bb56f1f7 remove the expirations field from the robot test code in cherry pick
Signed-off-by: wang yan <wangyan@vmware.com>
2020-02-05 15:19:23 +08:00
wang yan
5c657f0216 fix issue on listing robot accounts
Update the query FuzzyMatch when to list robot accounts per project

Signed-off-by: wang yan <wangyan@vmware.com>
2020-02-05 13:34:50 +08:00
Wenkai Yin(尹文开)
5dd1395450
Merge pull request #10439 from pivotal/global-logs-for-limited-guest
Remove project logs access for Limited Guest role
2020-01-21 19:28:53 +08:00
He Weiwei
6d942e4520
fix(scan-job): fetch bearer token for scanner adapter in scan job (#10461)
Before submit scan job the authorization computed and send to the scan
job and then scan job may in pending state for a long time before it
begins to run.
When the pending more than 30 min which is the default bearer token
expiration time, the authorization had been expired when execute scan
job.
This PR changes the time of computing authorization from before
submitting the scan job to executing the job.

Closes #10325

Signed-off-by: He Weiwei <hweiwei@vmware.com>
2020-01-21 19:10:50 +08:00
danfengliu
26cc8435ba
Merge pull request #10527 from danfengliu/cherry-pick-add-nightly-test-robot-account
[Cherry-Pick 1.10.0] Add nightly test case for robot account
2020-01-20 18:37:04 +08:00
danfengliu
9e42f6d6d1 Notary test failed in Helm Pipeline
In Helm pipeline, harbor access address is by domain name instead of IP, so cert directory should be created by domain name.

Signed-off-by: danfengliu <danfengl@vmware.com>
2020-01-20 17:13:17 +08:00
Danfeng Liu (c)
cf605e430e Add nightly test case for tag immutability
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2020-01-19 15:38:10 +08:00
Danfeng Liu (c)
9b51123bd3 1. Add nightly test case of Robot-Account; 2. In Go Into Repo keyword, filter element should not be clicked since list in loading state, so add some sleep and waiting for the cirlce icon is gone; 3. Move read-only test case in the end of common.robot.
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2020-01-19 14:51:35 +08:00
danfengliu
812eec40bf
Merge pull request #10530 from danfengliu/add-expect-file-from-linux-os-1
Add expect file from linux OS
2020-01-19 14:44:54 +08:00
wang yan
2d41498f6a Add expect file from linux OS
Signed-off-by: wang yan <wangyan@vmware.com>
2020-01-18 21:56:58 -08:00
Mark Huang
c2257d49b8 Hide projects in global logs where user has limited guest role
Signed-off-by: Mark Huang <mhuang@pivotal.io>
2020-01-17 11:34:46 -05:00
danfengliu
012aa570c8
Merge pull request #10515 from danfengliu/cherry-pick-1.10-switch-registry-from-dockerhub-to-cpe-4
Switch registry from docker-hub ot internal harbor registry
2020-01-17 16:11:38 +08:00
Danfeng Liu (c)
410fb5242b Switch registry from docker-hub ot internal harbor registry
In nightly test, images for tests were pulled from docker-hub, and sometime in an rare occasion, client will fail to contact docker-hub like timeout error, so we like to pull image from an internal harbor registry with no network issue invovled.

Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2020-01-17 15:06:00 +08:00
danfengliu
ed056f2fea
Merge pull request #10510 from danfengliu/cherry-pick-1.10-add-remove-notary-signature-nightly-testcase
[Cherry-pick 1.10.0]Add notary remove signature test case in nightly
2020-01-17 14:32:40 +08:00
Danfeng Liu (c)
e0db766f97 O
Add notary remove signature test case in nightly

1. Update E2E image Dockerfile for adding notary CLI;
2. Add test case of remove notary signature.

Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
2020-01-17 13:34:32 +08:00
He Weiwei
7ae208cd6c
build(swagger): change download link of swagger-codegen-cli (#10511)
The http://central.maven.org is not available now so change the download
link of swagger-codegen-cli to https://repo1.maven.org

Signed-off-by: He Weiwei <hweiwei@vmware.com>
2020-01-17 12:11:48 +08:00
Wenkai Yin(尹文开)
96e2bbf12e
Merge pull request #10453 from bitsf/ecr_delete_image_1.10
(cherry-pick): aws ecr delete image 1.10.x
2020-01-13 13:10:34 +08:00
Ziming Zhang
8e1f7bbd9f fix(replication): aws ecr delete image
Change-Id: I5e38b813c2840e0270973c38680cb8f815e5ece9
Signed-off-by: Ziming Zhang <zziming@vmware.com>
2020-01-13 11:05:17 +08:00
Steven Zou
fb02036597
Merge pull request #10393 from heww/fix-issue-10284
fix(scanner): use new created ormer for transaction
2020-01-03 11:23:54 +08:00
He Weiwei
dc2d950172 fix(scanner): use new created ormer for transaction
Use new created ormer for transaction in SetDefaultRegistration

Closes #10284

Signed-off-by: He Weiwei <hweiwei@vmware.com>
2020-01-03 02:19:53 +00:00
Daniel Jiang
dd80db67c1
Merge pull request #10364 from reasonerjt/disable-token-service-xsrf-1.10
Disable XSRF check for /service/token - cherry pick to 1.10
2019-12-28 00:05:41 +08:00
stonezdj(Daojun Zhang)
6647a274f1
Merge pull request #10358 from reasonerjt/tokenreview-onboard-1.10
Onboard user when doing token review - cherrypick to 1.10
2019-12-27 17:19:05 +08:00
danfengliu
e0b4620838
Merge pull request #10359 from danfengliu/cherry-pick-Go-Into-Repo-refector
[Cherry-pick to 1.10.0] Refect keyword of Go Into Reop
2019-12-27 16:55:03 +08:00
Daniel Jiang
1d0c61a6da Disable XSRF check for /service/token
This commit disables XSRF check for "service/token" so that when
containerd sends `POST` it will not return 403 and containerd can
fallback to `GET` to complete the workflow.

Fixes #10305

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-12-27 14:25:17 +08:00
danfengliu
b79a251918 Refect keyword of Go Into Reop
Signed-off-by: danfengliu <danfengl@vmware.com>
2019-12-27 13:37:35 +08:00
Daniel Jiang
94a3da33e6 Onboard user when doing token review
This commit will make the "tokenreview" security filter onboard
user if the request carries a valid token.  If the "skipsearch" flag in
http_auth setting is set to false the onboard will fail.

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-12-27 13:29:21 +08:00
jwangyangls
9755d879db
Merge pull request #10306 from jwangyangls/tanslation-modify-retag-replication
[Cherry-pick]Translation modification of replication and tag in Chinese mode
2019-12-25 14:50:46 +08:00
Yogi_Wang
c937e0a6bf Translation modification of replication and tag in Chinese mode
1.replicaiton ==> 复制
2.tag ==> tag
3.retag ==> tag拷贝
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2019-12-18 16:13:31 +08:00
Wenkai Yin(尹文开)
ae034185eb
Merge pull request #10258 from reasonerjt/stastic-api-group-member-1.10
Stastics API should handle group members - cherrypick to 1.10
2019-12-16 15:46:51 +08:00
Steven Zou
eccc89a37e
doc[compatibility]:remove not evaluated scanners
all the scanner listed in the compatibility doc should be evaluated
2019-12-16 14:59:14 +08:00
xaleeks
2c2032b401
Merge pull request #10270 from steven-zou/doc/compatibility
[CHERRY-PICK-1.10.0]:doc[compatibility]:add compatibility doc ref in the README
2019-12-16 14:45:25 +08:00
Steven Zou
163ba2c7b1 doc[compatibility]:add doc ref in the README
- refer the harbor compatibility doc in the README
- add .md suffix to the README file under api/harbor

Signed-off-by: Steven Zou <szou@vmware.com>
2019-12-16 14:09:16 +08:00
Steven Zou
2c284d0608 doc[compatibility] provide compatibility doc
- list all the supported replicaiton adapters
- list all the verified OIDC providers including the ones verified by the end users
- list all the pluggable scanners

Signed-off-by: Steven Zou <szou@vmware.com>
2019-12-16 14:06:35 +08:00
Daniel Jiang
3cc9b42b68 Stastics API should handle group members
statistic API use security Context to list project rather than calling
projectmanager directly, such that the group membership will be taken
into account.
fixes #10230

It should be cherry picked to 1.9.x and 1.10.x branches

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2019-12-13 17:55:21 +08:00
xaleeks
c614c165fa
Merge pull request #10212 from ninjadq/update_doc_of_migration_110
[doc] Update doc for migration
2019-12-12 16:39:02 +08:00
DQ
fce32fba0e [doc] Update doc for migration
Migration guild is a lit bit confusion

Add copy after migrate config file

Signed-off-by: DQ <dengq@vmware.com>
2019-12-12 13:15:11 +08:00
Will Sun
44b9805536
Merge pull request #10220 from AllForNothing/release-1.10.0
Add links to view doc for scanners ui
2019-12-11 15:51:55 +08:00
sshijun
890c6ac6c8 Add links to view doc for scanners ui
Signed-off-by: sshijun <sshijun@vmware.com>
2019-12-11 13:23:33 +08:00
Steven Zou
af73efb042
Merge pull request #10210 from steven-zou/chore/clear_scanner_specs_1.10
Chore/clear scanner specs 1.10
2019-12-10 18:54:34 +08:00
Steven Zou
07dbbf1023 doc[api spec]:rename folder name to
Signed-off-by: Steven Zou <szou@vmware.com>
2019-12-10 14:20:54 +08:00
Steven Zou
828c7c082d doc[scanner]:clear scanner spec related
- remove the scanner open API spec from api folder
- update README doc to remove the API reference

Signed-off-by: Steven Zou <szou@vmware.com>
2019-12-09 18:56:11 +08:00
Will Sun
9efe8b47d7
Merge pull request #10174 from AllForNothing/release-1.10.0
Improve ui for  project config page
2019-12-06 14:59:28 +08:00
sshijun
414bc1a8cc Improve ui for project config page
Signed-off-by: sshijun <sshijun@vmware.com>
2019-12-06 13:54:10 +08:00
Wang Yan
6b84b62f75
Merge pull request #10155 from bitsf/upgrade_clair_1.10
[cherry-pick] upgrade clair to v2.1.1
2019-12-06 11:48:42 +08:00
Wang Yan
2e2c849aa6
Merge pull request #10165 from ywk253100/191205_sort_1.10
Sort the tag before returning the list when calling API
2019-12-06 11:37:51 +08:00
Wenkai Yin(尹文开)
6287a9f26e
Merge pull request #10152 from wy65701436/fix-10092
improve pulling vulnerable images warning message
2019-12-06 11:18:16 +08:00
stonezdj(Daojun Zhang)
5da568cf12
Merge pull request #10156 from reasonerjt/rm-authproxy-case-sensitive-v1.10
Get rid of case-sensitivity in authproxy setting -- Cherrypick to v1.10
2019-12-06 10:40:03 +08:00
jwangyangls
9f66682fa0
Merge pull request #10151 from jwangyangls/fix-bug-1.10-issue
[cherry-pick]Fix bug in master about 1.10
2019-12-06 10:07:35 +08:00
Will Sun
46e004b167
Merge pull request #10144 from AllForNothing/release-1.10.0
Modify ui to fix some bugs(cherry-pick #10143)
2019-12-06 09:09:39 +08:00
Wenkai Yin
0e821a9237 Sort the tag before returning the list when calling API
Sort the tag before returning the list when calling API list tag API

Signed-off-by: Wenkai Yin <yinw@vmware.com>
2019-12-05 19:54:11 +08:00