Commit graph

3269 commits

Author SHA1 Message Date
Jimmy Zelinskie
0359d3f379 nginx: move ssl config out of server-base 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
5db790bb30 setup-tool: add HSTS info box 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
5db4e58e16 nginx: SSL config into server-base.conf 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
0c15c2888d nginx: update cipher suite, HSTS, X-Frame-Options 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
ccfebdf22b nginx: support OCSP Stapling 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
2a03f4d070 nginx: drop SSLv3, support TLS 1.1 & 1.2 2015-05-26 16:05:37 -04:00
Jimmy Zelinskie
4f6234ea8f nginx: enable Strict Transport Security 2015-05-26 16:05:36 -04:00
Joseph Schorr
f6fea27c12 Fix encrypted password generator to use the LDAP username, not the Quay username.
Currently, we use the Quay username via `verify_user` when we go to create the encrypted password. This is only correct if Quay has not generated its own different username for the LDAP user, and fails if it has. We therefore add a new method `confirm_existing_user`, which looks up the federated login for the LDAP user and then runs the auth flow using that username.
2015-05-26 16:05:36 -04:00
Joseph Schorr
88ece113ee Explicitly enable LDAP referrals
Note: The mock LDAP system doesn't support referrals, so we can't add a unit test for this.
2015-05-26 16:05:36 -04:00
Joseph Schorr
4030b0a470 - Have the heartbeat fail to update if the worker has timed out
- Add additional build component logging for tracking down problems in the future
2015-05-26 16:05:36 -04:00
Joseph Schorr
0f18fc1c26 Disable the angular poll channel when the browser tab is hidden
Quay pages that normally poll (repo view, build logs, etc) will skip the API call(s) when the tab is hidden.
2015-05-26 16:05:36 -04:00
Joseph Schorr
dbd119c365 Fix the DB health check
Make sure to search for the proper DB identifier
2015-05-26 16:05:36 -04:00
Joseph Schorr
5845e37e32 Add Swift storage library 2015-05-26 16:05:21 -04:00
Jimmy Zelinskie
417c77f4d9 Merge pull request #34 from jzelinskie/flatten-logs
cloudconfig: flatten logentries container
2015-05-20 16:42:52 -04:00
Jimmy Zelinskie
db05db6295 cloudconfig: flatten logentries container 2015-05-20 16:34:16 -04:00
Joseph Schorr
ac239ec4ee Make sure to only split into two parts max 2015-05-20 14:54:41 -04:00
Jimmy Zelinskie
7bed404302 Merge pull request #33 from coreos-inc/branchregex
Add some more debug logging around bitbucket triggers and add some te…
2015-05-20 14:22:33 -04:00
Joseph Schorr
eb773e40a2 Add some more debug logging around bitbucket triggers and add some tests to verify we properly handle trigger branch filters 2015-05-20 14:18:12 -04:00
Jimmy Zelinskie
1e0d184a99 Merge pull request #32 from jzelinskie/bb
custom-git: accept commit SHAs 7+ chars in length
2015-05-20 12:59:10 -04:00
Jimmy Zelinskie
fe3f0dc10b custom-git: accept commit SHAs 7+ chars in length 2015-05-20 12:53:43 -04:00
Joseph Schorr
598fc6ec46 Add the error code to the worker error logged to redis 2015-05-18 15:01:48 -04:00
Joseph Schorr
2379af71f8 Parse the client secret properly 2015-05-18 15:01:37 -04:00
Joseph Schorr
fb8e718c44 Fix OAuth 2 handler to support retrieving parameters from other places; various OAuth client (such as the Go library) send the values in the request body or even the Auth header 2015-05-18 12:38:39 -04:00
Joseph Schorr
91b464d0de Switch build manager to always just WARN on boto 2015-05-18 12:34:26 -04:00
Jimmy Zelinskie
3daa0e6a52 migration: use SA boolean value for server_default 2015-05-15 19:04:54 -04:00
Jimmy Zelinskie
05e2bdbd02 Merge pull request #29 from jzelinskie/master
migration: server_default for boolean field
2015-05-15 17:06:12 -04:00
Jimmy Zelinskie
e12d5af52c migration: server_default for boolean field 2015-05-15 17:04:50 -04:00
Jimmy Zelinskie
86f400fdf5 buildman: fix btrfs mounting in worker cloudconfig 2015-05-13 17:40:35 -04:00
Joseph Schorr
ee2736bb17 Fix the CoreOS Icon font in the non-CDN case 2015-05-13 17:14:20 -04:00
Joseph Schorr
28bd9af4ff Fix tutorial 2015-05-13 14:55:39 -04:00
Joseph Schorr
30608366d7 Update screenshots and tour content 2015-05-13 14:24:12 -04:00
Joseph Schorr
0e86fc80ca Fix bitbucket trigger to use the specified branch name before the default branch 2015-05-13 13:55:44 -04:00
Joseph Schorr
6a52ffa942 Add missing default value on the new reversion column 2015-05-13 13:49:21 -04:00
Joseph Schorr
6f1a366f6c Merge branch 'master' of github.com:coreos-inc/quay 2015-05-13 13:30:31 -04:00
Joseph Schorr
2172cc73e3 Update screenshot generation 2015-05-13 13:30:22 -04:00
Jimmy Zelinskie
a6902a91d2 Merge pull request #27 from coreos-inc/butterfs
buildman: create and mount btrfs volume for docker
2015-05-13 13:29:46 -04:00
Jimmy Zelinskie
6a5cecebc5 buildman: create and mount btrfs volume for docker
There are numerous issues with overlayfs that actually aren't present with
btrfs. Btrfs seems to have long-running issues, but our builders are
ephemeral. Example issue: https://github.com/docker/docker/issues/10180
2015-05-12 17:42:34 -04:00
Joseph Schorr
af5fc42f27 Make the new repo page support all the trigger types automatically. 2015-05-12 12:40:26 -04:00
Joseph Schorr
07b4fb9105 LDAP sometimes has multiple records for a user 2015-05-12 12:02:09 -04:00
Joseph Schorr
efab02ae47 LDAP improvements:
- Better logging
  - Better error messages
  - Add unit tests
  - Clean up the setup tool for LDAP
2015-05-11 21:23:18 -04:00
Joseph Schorr
3e1abba284 Add ability for super users to rename and delete organizations 2015-05-11 18:03:25 -04:00
Joseph Schorr
27d8ea3d5c Merge branch 'master' of github.com:coreos-inc/quay 2015-05-11 17:07:12 -04:00
Jimmy Zelinskie
9f31bdd571 buildman: add new io.quay.builder.gitfailure error 2015-05-11 15:25:22 -04:00
Joseph Schorr
1c41d34b7c Add ability for superusers to change user emails 2015-05-11 14:38:10 -04:00
Jimmy Zelinskie
15fdae6688 buildman: show base error for buildpack failures
Whereas before these were reserved only for S3 errors, users need these
specifics to debug custom-git configurations.
2015-05-11 14:18:48 -04:00
Joseph Schorr
628d80895d Make sure to escape error messages and add clarification to the trigger activation dialog 2015-05-11 13:47:40 -04:00
Joseph Schorr
4feb2a2032 Hide unneeded user elements when in LDAP 2015-05-11 13:32:24 -04:00
Joseph Schorr
1c83def15b LDAP should only show logs when asked. 2015-05-11 13:01:49 -04:00
Joseph Schorr
de6267700e Fix bugs with the custom git trigger and make error reporting better 2015-05-10 13:38:47 -04:00
Joseph Schorr
f858caf6cd Only return the team and repo permissions when listing robots when we absolutely need them. 2015-05-08 16:43:07 -04:00