Commit Graph

3822 Commits

Author SHA1 Message Date
reasonerjt
19a13e8575 Deprivilege harbor-ui harbor-jobservice harbor-adminserver
Use non-root user to run the service within these docker images, and provide HEALTHCHECK
mechanism.
2017-11-09 03:09:09 -08:00
Wenkai Yin
367c2b142f
Merge pull request #3571 from ywk253100/171107_log_rotate
Improve log rotation configurability
2017-11-09 15:19:18 +08:00
Wenkai Yin
66b9699ac2 Improve log rotation configurability 2017-11-09 14:33:05 +08:00
Henry Zhang
05d8b1194e Update README to include Twitter and email groups of Harbor. 2017-11-08 21:09:36 +08:00
Daniel Jiang
b654a55e85
Merge pull request #3546 from yixingjia/noroot_clair
Run clair with limited user
2017-11-08 13:51:16 +08:00
Yan
847fc02018
Merge pull request #3544 from sigsbee/projectconfig
Add project level policy auto case
2017-11-08 13:07:32 +08:00
yixingj
e9d1b89936 Run clair with limited user
1>creat user clair
2>run clair with user clair
2017-11-08 12:31:35 +08:00
Daniel Jiang
7cd44e4eb6
Merge pull request #3540 from cmingxu/patch-1
Update kubernetes_deployment.md
2017-11-07 15:17:18 +08:00
myufei
c66ab0d142 Add project level policy auto case 2017-11-07 15:04:27 +08:00
Daniel Jiang
8dfe5f0bfc
Merge pull request #3536 from ywk253100/171102_fail_earlier
Fail earlier when found database schema dismatch
2017-11-07 15:01:14 +08:00
Daniel Jiang
a7640a5000
Merge pull request #3559 from reasonerjt/deprivilege-harbor-core
Remove the Dockerfile of rsyslog image
2017-11-07 14:27:46 +08:00
Wenkai Yin
5293a9287b Fail earlier when found database schema dismatch 2017-11-07 13:07:56 +08:00
Daniel Jiang
7a4a66cbd9
Merge pull request #3521 from wy65701436/fix-offline-installer
Return error on packaging offline installer failure
2017-11-07 10:53:27 +08:00
Daniel Jiang
e722e3b40d
Merge pull request #3556 from wy65701436/add-desc-mapprojects
Add description for VIC 1.2 migration scripts
2017-11-07 10:52:30 +08:00
wangyan
28834fedf7 Add description for VIC 1.2 migration scripts 2017-11-06 01:16:17 -08:00
Daniel Jiang
91ae1255e8
Merge pull request #3549 from wy65701436/ova-ci
Add OVA CI scripts
2017-11-06 15:05:17 +08:00
reasonerjt
9382cac934 Remove the Dockerfile of rsyslog image 2017-11-05 21:52:23 -08:00
Daniel Jiang
9b37c2b01d
Merge pull request #3551 from reasonerjt/configure-endpoints
Make the internal URL of UI and JobService configurable
2017-11-05 22:33:05 +08:00
Tan Jiang
512384722a Make the internal URL of UI and JobService configurable 2017-11-03 20:43:25 +08:00
wangyan
8df0dae5ca Add OVA CI scripts 2017-11-03 03:40:56 -07:00
Yan
10199c10ef
Merge pull request #3491 from Evalle/3463
ISSUE-3463: fix docker-compose command
2017-11-03 15:44:48 +08:00
Yan
3d1713ac70
Merge pull request #3543 from wy65701436/update-migrator-13
Update migrator version to 1.3
2017-11-03 15:29:47 +08:00
Daniel Jiang
22d7ea77c8
Merge pull request #3530 from reasonerjt/deprivilege-harbor-core
Deprivilege harobr-log, harbor-db, registry image
2017-11-03 15:27:20 +08:00
Daniel Jiang
795d33a45a
Add filter on API endpoints to mitigate XSRF (#3542)
Add filter for all API endpoints to allow the POST requests which have
application/json header.
Make update to UI code to make sure all requests contain the header.
2017-11-03 14:43:27 +08:00
root
6f335bdb1a Deprivilege harobr-log, harbor-db, registry image.
This change involves using non-root user to run the process of the
docker images.  Also made update in Dockerfile to make the containers
support "read-only" and introduce "HEALTHCHECK". Note the "read-only"
options are not enabled in docker-compose, to cover the very corner
case when user wants to update the container filesystem manually.

Remove read only option from docker-compose template by default
2017-11-02 23:35:06 -07:00
wangyan
ec8216a7db Update migrator version to 1.3 2017-11-02 23:23:19 -07:00
Yan
877e918f85
Merge pull request #3535 from ninjadq/db_migration_1_3_0
db migration from 1.2.0 to 1.3.0
2017-11-03 13:41:46 +08:00
kevin.xu
047e5e9d05
Update kubernetes_deployment.md 2017-11-02 05:12:28 -05:00
Daniel Jiang
6a9dc8a133
Merge pull request #3495 from ywk253100/171031_config
Add email_insecure and delete verify_remote_cert configuration item from harbor.cfg
2017-11-02 17:47:48 +08:00
Deng, Qian
5ffa192b79 db migration from 1.2.0 to 1.3.0 2017-11-02 17:43:10 +08:00
Daniel Jiang
f7967e22ab
Merge pull request #3482 from yixingjia/ossclairupdate
Update Clair base images
2017-11-02 14:23:33 +08:00
pengpengshui
83b0000d71
Merge pull request #3512 from pengpengshui/master
modify the remote cert checkbox value and test case
2017-11-02 09:45:03 +08:00
Fuhui Peng (c)
48cbdcbb08 change package version 2017-11-01 18:45:11 +08:00
Fuhui Peng (c)
30a60e6115 Merge branch 'master' of https://github.com/vmware/harbor 2017-11-01 18:36:37 +08:00
wangyan
6c092e2172 Return error on packaging offline installer failure 2017-11-01 03:09:45 -07:00
Deng, Qian
c19a7a56da
Merge pull request #3514 from ninjadq/fix_project_level_policy_issue
* fix bug when save policies
* improve text of vulnerability
* fix bug project admin can see the config tab
2017-11-01 04:53:29 -05:00
Fuhui Peng (c)
bcfba78615 modify test case about email config 2017-11-01 17:29:02 +08:00
Deng, Qian
bd2bb0a697 fix project admin can view project config 2017-11-01 16:40:01 +08:00
Yan
d150f8763b
Merge pull request #3503 from sigsbee/deleteproj
Update assert of keyword Project should not be deleted
2017-11-01 16:23:53 +08:00
Daniel Jiang
0339f4ffcc
Merge pull request #3515 from wy65701436/fix-build-issue
Update package offline installer with vmware/photon
2017-11-01 15:29:59 +08:00
Fuhui Peng (c)
a1a5835d76 Merge branch 'master' of https://github.com/vmware/harbor 2017-11-01 14:51:38 +08:00
Deng, Qian
091f68e5b0 fix tag vulnerability text to uppercase 2017-11-01 14:39:25 +08:00
myufei
d3f9d0545d Update assert of keyword Project should not be deleted 2017-11-01 14:23:52 +08:00
wangyan
9e1049e3c9 Update package offline installer with vmware/photon 2017-10-31 22:17:46 -07:00
yixingjia
8908b75085
Merge pull request #3481 from yixingjia/ossnotaryupdate
Update Notary base images and oss package
2017-10-31 19:46:07 -07:00
Deng, Qian
0045b269db fix bug when save policies 2017-11-01 10:31:21 +08:00
Yan
5ba414397d
Merge pull request #3484 from wy65701436/https-ci
Enable https support in CI testing
2017-11-01 09:08:51 +08:00
Fuhui Peng (c)
29cf632de8 modify the remote cert checkbox value 2017-10-31 19:39:07 +08:00
Daniel Jiang
f7b4218022
Merge pull request #3476 from yixingjia/ossUpdateUI
Update UI image oss package to latest
2017-10-31 17:50:03 +08:00
wangyan
31d92bf0c5 Enable https support in CI testing
Add harbor.ca with certutil into Chrome trust store, then can use Chrome headless to access harbor with https
And also update Chrome to latest stable version 62
2017-10-31 00:49:43 -07:00