Commit Graph

34 Commits

Author SHA1 Message Date
Yan d5b85a6748
Add the registry controller httpserver, it's responsible for controlling (#5265)
docker regsitry. This version has the API to call regsitry GC with jobservice
secret. Seprates it into a standalone container as do not want to invoke two
processes in one container.

It needs to mount the registry storage into this container in order to do GC,
and needs to copy the registry binary into it.
2018-07-16 16:50:28 +08:00
stonezdj 62acdb14f3 Add settings to define admin with LDAP group DN 2018-07-05 14:46:44 +08:00
stonezdj 72e9b22e10 Fix issue that harbor tile can not save customized settings 2018-06-28 16:20:10 +08:00
Yan ae257433cc
Fully migrate harbor db to postgresql (#4689)
* Merge harbor db to postgres
2018-04-27 02:27:12 -07:00
stonezdj 9bcfaedc0e Add REST API for assign role to group 2018-04-04 13:39:42 +08:00
yixingj cb64ad96ff Make endpoint configurable
Move all the endpoint to harbor.cfg
2018-03-26 10:50:18 +08:00
Yan cbcca015b0
add read only mode to stop docker push (#4433) 2018-03-23 03:16:08 -07:00
stonezdj 44fc373c6d Add LDAP Group Search Configure Param 2018-03-15 06:16:47 +08:00
Wenkai Yin 379f113452 Implement label management API 2018-03-09 12:17:27 +08:00
stonezdj f138067242 Refactor project member 2018-02-09 10:38:51 +08:00
Wenkai Yin 53d5a2256a Propagate registry storage driver name to adminserver and return it in /api/systeminfo 2018-01-16 16:57:28 +08:00
Daniel Jiang 43afd426bb
Merge pull request #3995 from reasonerjt/admin-rename
Provide API to rename admin
2018-01-12 13:59:13 +08:00
Tan Jiang a392a8dc29 Provide API to rename admin
This is to provide a workaround for very corner case that in user's
authentication backend (LDAP, UAA) has a user called "admin" and because
Harbor's super user is hard coded to "admin" it's not possible to login
the "admin" with credentials in LDAP or UAA.

To minimize the impact, we'll provide an internal API for user to update
the super user's username from "admin" to "admin@harbor.local", this API
can be called by "admin" only, and is not reversible.
2018-01-11 23:01:06 +08:00
stonezdj c48c7f7b6a Setting timeout for ldap ping 2018-01-10 15:14:30 +08:00
Tan Jiang da20e4f11c Search UAA when adding member to a project.
1)Enable UAA client to search UAA by calling '/Users' API.
2)Implement 'SearchUser' in UAA auth helper, register it to auth
package.
2017-12-26 00:25:32 +08:00
yixingj f63588855f Make Clair DB configurable
Make the HOST,PORT,USERNAME,DB configurable for
Clair
2017-12-20 18:29:50 +08:00
Tan Jiang 2ffc58a5d4 Refactor the configuraiton of UAA
Remove the attribute "uaa_ca_root" from harbor.cfg and introduce
"uaa_verify_cert".  Similar to LDAP settings, this allow user to
explicitly turn of the cert verification against UAA server, such that
the code will work with self-signed certificate.
2017-12-19 14:42:07 +08:00
yixingj 9b03c93afd Add database driver for Harbor configurations
1>Add a new database driver for configurations
2> change the current default driver from json
to database
2017-12-06 13:06:54 +08:00
stonezdj 16243cfbbc Add LDAP remote certifcate validation
push test

Add unit test for ldap verify cert

remove common.VerifyRemoteCert

Update code with PR review comments

Add change ldaps config and add UT testcase for TLS feature

add ldap verfiy cert checkbox about #3513

Draft harbor ova install guide

Search and import ldap user when add project members

Add unit test case for SearchAndImportUser

ova guide

Add ova install guide

Add ova install guide 2

Add ova install guide 3

Call ValidateLdapConf before search ldap

trim space in username

Remove leading space in openLdap username

Remove doc change in this branch

Update unit test for ldap search and import user

Add test case about ldap verify cert checkbox

Modify ldap testcase
2017-11-24 12:41:51 +08:00
Tan Jiang 512384722a Make the internal URL of UI and JobService configurable 2017-11-03 20:43:25 +08:00
Wenkai Yin 2156750b04 Move certificate verification to target level
The certificate verification is on system level before this commit. Moving it
to target level makes the configuration more flexible for different targets.
2017-10-20 15:36:56 +08:00
Tan Jiang 51286d9baa Provide UAA authenticator for password based authentication. 2017-10-07 00:16:53 +08:00
Wenkai Yin 923a8d65b1 expose insecure flag in api 2017-09-04 15:10:07 +08:00
Tan Jiang 629cf29850 The password to access clair db can be configured in harbor.cfg, skip auto-scan if clair-db is not ready 2017-07-17 15:25:47 +08:00
Tan Jiang ca805759d9 update scan overview in notification handler, and return clair vuln timestamp in system info 2017-07-07 17:47:52 +08:00
Tan Jiang af0e8c85bb configuration api can handle scan all policy 2017-06-29 15:14:11 +08:00
Tan Jiang 15384317e0 add with_clair flag in systeminfo 2017-06-15 16:15:46 +08:00
Wenkai Yin 0925fd35f1 implement project manager based on PMS 2017-06-12 14:43:26 +08:00
Wenkai Yin e1c1b8ec34 refactor project api 2017-05-16 15:02:37 +08:00
Wenkai Yin f8615e4746 create different security context according to the rquest 2017-05-09 17:02:29 +08:00
Wenkai Yin d5db9db00b update 2017-05-03 17:21:38 +08:00
wy65701436 53f7cfb967 replace go header 2017-04-13 03:54:58 -07:00
Wenkai Yin ec27e2dc07 remove compress js flag 2017-03-30 12:59:47 +08:00
Wenkai Yin 67612aa2e3 abstract adminserver client into a single package 2017-03-21 01:00:26 +08:00