Upstream
/
harbor
mirror of https://github.com/goharbor/harbor.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
11,946 Commits 45 Branches 298 Tags 349 MiB
Commit Graph

11946 Commits

Author SHA1 Message Date
Shengwen YU b7b884760a
Bump up version to v2.10.1 (#20122) 
fix: update Harbor version to v2.10.1

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-03-13 17:46:38 +08:00
Shengwen YU 4ecc60dbd7
update go.mod dep, golangci-lint, mocks (#20121) 
* fix: update golangci-lint to 1.56.2

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

* fix: update dependency

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

* fix: update code to comply with golangci-lint

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

* fix: update mocks

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>

---------

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-03-13 16:59:50 +08:00
stonezdj(Daojun Zhang) b755416522
[cherry-pick] Move strong_ssl_ciphers to top level in harbor.yaml (#20022) 
Move strong_ssl_ciphers to top level in harbor.yaml

  fixes #19912

Signed-off-by: stonezdj <stonezdj@gmail.com>
Co-authored-by: stonezdj <daojunz@vmware.com>
 2024-02-26 09:58:22 +00:00
stonezdj(Daojun Zhang) 86cd022ddf
[cherry-pick] limit url to local site (#20020) 
Limit url to local path

Signed-off-by: stonezdj <daojunz@vmware.com>
Co-authored-by: stonezdj <daojunz@vmware.com>
 2024-02-26 13:43:43 +08:00
Shengwen YU d55ed259fb
[Cherry-pick] feat: enable configuration of skip_java_db_update (#19998) 
feat: enable configuration of skip_java_db_update

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-02-21 10:14:02 +08:00
Shengwen YU 8742c6d73e
update retry of get_scan_data_export_execution from 5 to 15 (#19960) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-02-11 20:24:36 +09:00
MinerYang e1b3538701
reverse ip_family config for release-2.10 (#19950) 
Signed-off-by: yminer <yminer@vmware.com>
 2024-02-07 16:41:04 +08:00
Shengwen YU 8710b3292c
[Cherry-pick] fix: cve export label filter xpath (#19931) (#19947) 
fix: cve export label filter xpath (#19931)

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2024-02-05 13:56:23 +08:00
MinerYang 158718c93b
add ip_family config in harbor.yml on release-2.10 (#19939) 
add ipFamily config in values.yaml

Signed-off-by: yminer <yminer@vmware.com>

update name

update prepare and migration

update comments

Signed-off-by: yminer <yminer@vmware.com>

remove print msg

update migrate template

update default value

update migrate template
 2024-02-02 20:25:25 +08:00
MinerYang 1f8e578d5e
[cherry-pick]add v6 port for nginx ad portal config (#19894) 
add v6 port for nginx ad portal config

Signed-off-by: yminer <yminer@vmware.com>
 2024-01-26 23:00:43 +01:00
Shengwen YU 4694d8880d
[Cherry-Pick] Update replication rule filter label xpath (#19895) (#19904) 
Update replication rule filter label xpath (#19895)

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
Co-authored-by: Yang Jiao <72076317+YangJiao0817@users.noreply.github.com>
 2024-01-25 09:21:30 +08:00
Yang Jiao f5b86470c6
[cherry-pick]fix label select bugs (#19850) (#19862) 
fix label select bugs (#19850)

Signed-off-by: shengqiw <shengqiw@vmware.com>
Co-authored-by: ShengqiWang <124650040+ShengqiWang@users.noreply.github.com>
 2024-01-19 15:11:44 +08:00
Wang Yan 236ece8c70
[cherry-pick]remove the log for ScannerSkipUpdatePullTime (#19846) 
remove the log for ScannerSkipUpdatePullTime

fixes #19795, remove the noise in the log

Signed-off-by: wang yan <wangyan@vmware.com>
 2024-01-16 09:35:32 +08:00
Maksym Trofimenko cf41c69475
[Cherry pick] add repository read permission to limitedGuest (#19816) 
add repository read permission to limitedGuest

Signed-off-by: Maksym Trofimenko <maksym@container-registry.com>
Co-authored-by: Maksym Trofimenko <maksym@container-registry.com>
 2024-01-15 16:29:04 +08:00
stonezdj(Daojun Zhang) 773931d855
[cherry-pick] Cache image list with digest key (#19838) 
Cache image list with digest key

  fixes #19429

Signed-off-by: stonezdj <daojunz@vmware.com>
Co-authored-by: stonezdj <daojunz@vmware.com>
 2024-01-12 21:59:01 +08:00
Yang Jiao 8cecf2e554
[cherry-pick]Add quota permissions testcase (#19823) 
Add quota permissions testcase

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2024-01-12 10:25:46 +08:00
Yang Jiao 241b417412
[cherry-pick]Remove robot account update quota permission (#19818) 
Remove robot account update quota permission

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2024-01-10 10:44:07 +08:00
Yang Jiao f62f04bda1
[cherry-pick]Add quota permissions to robot account (#19800) 
Add quota permissions to robot account

Fix #19792

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2024-01-08 11:43:37 +08:00
Yang Jiao 7f11c0e6a4
[cherry-pick]Add multi-tier accessory replication test cases (#19736) 
Add multi-tier accessory replication test cases

Fix #19275

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2023-12-20 15:31:56 +08:00
Yang Jiao 5b52c29124
[cherry-pick]Add notation replication test case (#19739) 
Add notation replication test case

Fix #19548

Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
 2023-12-20 15:31:11 +08:00
Yang Jiao 6abb4eab2d
Refresh base images on release-2.10.0 (#19713) 
Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
 2023-12-14 14:23:19 +08:00
Yang Jiao 4f19f84dd5
[cherry-pick]Update Robot Account Test Case (#19711) 
Update Robot Account Test Case

Update project and system robot account testcase
Update system robot account do replication testcase

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-14 03:26:30 +00:00
Yang Jiao ee793bf25b
Refresh base image on 2.10.0 (#19691) 
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-11 13:18:56 +08:00
Wang Yan aa1f79cd0c
bump distribution (#19669) 
Bump up the distribution to v2.8.3

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-12-11 10:11:39 +08:00
dependabot[bot] 66716b7826
Bump actions/setup-go from 1 to 5 (#19684) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 1 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v1...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-08 17:07:59 +08:00
dependabot[bot] eabc6f4289
Bump google-github-actions/auth from 1 to 2 (#19649) 
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 1 to 2.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/auth/compare/v1...v2)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-08 16:29:04 +08:00
dependabot[bot] 6b41277b03
Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 in /src (#19631) 
Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/yaml/compare/v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-08 15:11:38 +08:00
Yang Jiao 52d2d5c303
Updating Permission Test Scripts (#19687) 
Support for test cases that run multiple resources in a single run

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-08 06:10:19 +00:00
dependabot[bot] 8859f69668
Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 in /src (#19636) 
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/v3/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-08 13:20:20 +08:00
dependabot[bot] af4c6b6f0f
Bump github.com/gorilla/handlers from 1.5.1 to 1.5.2 in /src (#19632) 
Bumps [github.com/gorilla/handlers](https://github.com/gorilla/handlers) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/gorilla/handlers/releases)
- [Commits](https://github.com/gorilla/handlers/compare/v1.5.1...v1.5.2)

---
updated-dependencies:
- dependency-name: github.com/gorilla/handlers
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-08 09:59:06 +08:00
dependabot[bot] 2984c2e04b
Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 in /src (#19633) 
Bumps [github.com/robfig/cron/v3](https://github.com/robfig/cron) from 3.0.0 to 3.0.1.
- [Commits](https://github.com/robfig/cron/compare/v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: github.com/robfig/cron/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-12-07 17:49:21 +08:00
Shijun Sun f99a619bc6
Add min-width to the permission column (#19675) 
1. To avoid style confusion

Signed-off-by: AllForNothing <shijun.sun@broadcom.com>
 2023-12-07 05:37:45 +00:00
Yang Jiao ed0a69cf80
Add external scanner test case (#19682) 
Fix #19279

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-12-07 11:20:11 +08:00
Shijun Sun 323e11fefb
Update the wording text for the system robot account (#19666) 
Signed-off-by: AllForNothing <shijun.sun@broadcom.com>
 2023-12-05 09:43:02 +00:00
Shijun Sun 469b6a495b
Update the style for the robot acccount ui (#19663) 
1. Fixes #19614
2. Fixes #19617

Signed-off-by: AllForNothing <shijun.sun@broadcom.com>
 2023-12-05 09:00:17 +00:00
Shengwen YU 1cbc901599
fix: upgrade google.golang.org/grpc (#19648) 
fix: upgrade google.golang.org/grpc and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2023-12-05 16:22:39 +08:00
MinerYang 3b127bc477
fix 2.10 prepare migration version (#19665) 
fix 2.10 prepare migration

Signed-off-by: yminer <yminer@vmware.com>
 2023-12-05 15:31:17 +08:00
Wang Yan 7b40dc6f46
fix the landing accessory data (#19661) 
Fix the keywords when to list accessories belong to the subject manifest.

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-12-05 14:14:32 +08:00
Shijun Sun 7fee99b5fe
Update the name checking for the robot account (#19645) 
1. Fixes #19612

Signed-off-by: AllForNothing <shijun.sun@broadcom.com>
 2023-12-05 03:01:40 +00:00
Aaron Steinberg 3c56f2d1a0
[release-note/docs] swagger.yaml "repositoryName" parameter description update (#19651) 
* swagger.yaml fix

Signed-off-by: Aaron Steinberg <asteinber-contractor@aurora.tech>

* Signed-off by: Aaron Steinberg <aaron@aa.codes>

Signed-off-by: Aaron Steinberg <asteinber-contractor@aurora.tech>

---------

Signed-off-by: Aaron Steinberg <asteinber-contractor@aurora.tech>
 2023-11-30 09:17:05 +00:00
Yang Jiao 7cef4217b0
Add user API test case (#19638) 
Fix #19280

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-29 10:25:02 +08:00
Shijun Sun f26b9f52e9
Update the test script for the project permissions (#19623) 
Signed-off-by: AllForNothing <sshijun@vmware.com>
 2023-11-28 02:16:02 +00:00
dependabot[bot] bf251ef0aa
Bump github.com/coreos/go-oidc/v3 from 3.0.0 to 3.7.0 in /src (#19542) 
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.0.0 to 3.7.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.0.0...v3.7.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-11-28 09:31:16 +08:00
Shengwen YU f14635a5d3
fix: update TRIVYVERSION=v0.47.0 && TRIVYADAPTERVERSION=v0.30.19 (#19624) 
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
 2023-11-28 08:43:37 +08:00
Wang Yan 3f72604d57
fix robot account access issue (#19627) 
fixes #19622
Resolve the 403 issue occurring when a robot account, equipped with both system and project scope, attempts to access project resources.

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-11-27 19:16:37 +08:00
Yang Jiao 4fbcf92da9
Add jump to CNAB Bundle index artifact list test case (#19629) 
Fix #19278

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-27 18:26:06 +08:00
Yang Jiao 38ac8bf717
Add notation pull policy test case (#19625) 
Fix #19547

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
 2023-11-27 09:44:20 +00:00
dependabot[bot] e1df9b0a73
Bump golang.org/x/time from 0.0.0-20220210224613-90d013bbcef8 to 0.4.0 in /src (#19541) 
Bump golang.org/x/time in /src

Bumps [golang.org/x/time](https://github.com/golang/time) from 0.0.0-20220210224613-90d013bbcef8 to 0.4.0.
- [Commits](https://github.com/golang/time/commits/v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/time
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
 2023-11-27 16:58:28 +08:00
dependabot[bot] 4fac10a97d
Bump actions/setup-node from 3 to 4 (#19478) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
 2023-11-27 15:48:21 +08:00
Wang Yan e6900301ce
fix system label resource (#19621) 
Make sure robot can use rbac.Resource(label) to access system level label

Signed-off-by: wang yan <wangyan@vmware.com>
 2023-11-27 13:34:17 +08:00