Commit graph

3573 commits

Author SHA1 Message Date
Joseph Schorr
38a6b3621c Automatically link the superuser account to federated service for auth
When the user commits the configuration, if they have chosen a non-DB auth system, we now auto-link the superuser account to that auth system, to ensure they can login again after restart.
2015-07-22 13:37:23 -04:00
Joseph Schorr
33b54218cc Refactor the users class into their own files, add a common base class for federated users and add a verify_credentials method which only does the verification, without the linking. We use this in the superuser verification pass 2015-07-20 11:39:59 -04:00
Joseph Schorr
1245385808 Fix typo 2015-07-20 10:55:21 -04:00
Joseph Schorr
066637f496 Basic Keystone Auth support
Note: This has been verified as working by the end customer
2015-07-20 10:55:21 -04:00
Jimmy Zelinskie
eb612d606c Merge pull request #246 from jakedt/python-registry-v2
Massive refactoring
2015-07-17 16:34:32 -04:00
Jake Moshenko
f2508fb48a Have the auth realm url computed based on the request url. 2015-07-17 11:56:15 -04:00
Jake Moshenko
bc29561f8f Fix and templatize the logic for external JWT AuthN and registry v2 Auth.
Make it explicit that the registry-v2 stuff is not ready for prime time.
2015-07-17 11:56:15 -04:00
Jake Moshenko
768192927a Temporarily disable registry v2. 2015-07-17 11:56:15 -04:00
Jake Moshenko
3efaa255e8 Accidental refactor, split out legacy.py into separate sumodules and update all call sites. 2015-07-17 11:56:15 -04:00
Jake Moshenko
2109d24483 Add the toposort dependency. 2015-07-17 11:50:41 -04:00
Jake Moshenko
bea8b9ac53 More changes for registry-v2 in python.
Implement the minimal changes to the local filesystem storage driver and feed them through the distributed storage driver.
Create a digest package which contains digest_tools and checksums.
Fix the tests to use the new v1 endpoint locations.
Fix repository.delete_instance to properly filter the generated queries to avoid most subquery deletes, but still generate them when not explicitly filtered.
2015-07-17 11:50:41 -04:00
Jake Moshenko
acbcc2e206 Start of a v2 API. 2015-07-17 11:50:41 -04:00
Jake Moshenko
3bfa2a6509 Merge pull request #249 from coreos-inc/fixrepolist
Fix queries for repository list popularity and action count
2015-07-16 17:10:10 -04:00
Joseph Schorr
7a548ea101 Fix queries for repository list popularity and action count
Before this change, we used extremely inefficient outer joins as part of a single query of lookup, which was spiking our CPU usage to nearly 100% on the query. We now issue two separate queries for popularity and action account, by doing a lookup of the previously found IDs. Interestingly enough, because of the way the queries are now written, MySQL can actually do both queries *directly from the indicies*, which means they each occur in approx 20ms!

Verified by local tests, postgres tests, and testing on staging with monitoring of our CPU usage during lookup
2015-07-17 00:08:27 +03:00
Jimmy Zelinskie
d21251c910 Merge pull request #247 from coreos-inc/extratest
Extra list repos test to mimic the conditions of a known issue with a customer
2015-07-15 18:26:25 -04:00
Joseph Schorr
5ae8c11638 Extra list repos test to mimic the conditions of a known issue with one customer 2015-07-16 01:25:19 +03:00
Jake Moshenko
c64e490059 Merge pull request #136 from coreos-inc/syslogviewfix
Fix logs view in superuser panel
2015-07-15 18:22:23 -04:00
josephschorr
410b5497ca Merge pull request #245 from jakedt/fixscopes
Make the scopes dynamic based on app config.
2015-07-15 18:15:12 -04:00
Jake Moshenko
f5ee7a6697 Make the scopes dynamic based on app config. 2015-07-15 18:13:15 -04:00
Jimmy Zelinskie
fa4310ce21 Merge pull request #244 from coreos-inc/configsave
The database SSL name needs to be in its own list
2015-07-15 17:50:15 -04:00
Joseph Schorr
4726559322 The database SSL name needs to be in its own list
FIxes #243
2015-07-16 00:49:07 +03:00
josephschorr
053ceb6220 Merge pull request #242 from jzelinskie/fixstatusendpoint
model: add missing params to validate_database_url
2015-07-15 17:40:41 -04:00
Jimmy Zelinskie
2869e2a6ea model: add missing params to validate_database_url 2015-07-15 17:39:26 -04:00
Barak Michener
6d7036cb4a Merge pull request #239 from jzelinskie/changes
changelog: cut 1.9.8
2015-07-14 18:40:59 -04:00
Jimmy Zelinskie
d8f5c34373 changelog: cut 1.9.8 2015-07-14 18:38:36 -04:00
Jimmy Zelinskie
68894a6cad nginx: comment out last part of OCSP stapling 2015-07-14 18:07:53 -04:00
Barak Michener
7f8fdf5c14 Merge pull request #238 from coreos-inc/oopstestslogs
Oops, added logging.basicConfig to a test.
2015-07-14 17:57:23 -04:00
Jake Moshenko
cb95a800e3 Oops, added logging.basicConfig to a test. 2015-07-14 17:56:34 -04:00
Jake Moshenko
de99d6f017 Merge pull request #237 from jzelinskie/disable-ocsp
nginx: "temporarily" disable OCSP stapling
2015-07-14 17:37:46 -04:00
Jimmy Zelinskie
973aa601ef nginx: "temporarily" disable OCSP stapling 2015-07-14 17:33:57 -04:00
Jimmy Zelinskie
608853cb12 Merge pull request #235 from coreos-inc/fixtestdata
Fix the test data to accurately reflect what initdb will create.
2015-07-14 16:59:58 -04:00
Jake Moshenko
eec7886e01 Add a server default for the broken migration. 2015-07-14 16:58:58 -04:00
Jake Moshenko
ebecb1dc89 Regenerate the test db and supporting files. 2015-07-14 16:57:04 -04:00
Jimmy Zelinskie
e2634da7eb Merge pull request #232 from coreos-inc/buildnpefix
Don't None the build_status, as it might still be used later
2015-07-14 16:22:44 -04:00
josephschorr
1ec02b5c15 Merge pull request #233 from coreos-inc/signupflow
Some small UI fixes
2015-07-14 15:47:24 -04:00
Joseph Schorr
634190d1f9 Better messaging when creating a user on the landing page
Fixes #230
2015-07-14 14:00:29 +03:00
Joseph Schorr
9453d67c32 Change default placement of form error popovers
Fixes #229
2015-07-14 13:35:10 +03:00
Joseph Schorr
d842881608 Don't None the build_status, as it might still be used later 2015-07-14 12:49:03 +03:00
Jimmy Zelinskie
bde781c98b Merge pull request #205 from coreos-inc/delrobot
Fix deletion of robot accounts when attached to builds
2015-07-13 12:19:01 -04:00
Jimmy Zelinskie
9492ead3b3 Merge pull request #224 from coreos-inc/npefix2
Small NPE Fix
2015-07-13 12:07:08 -04:00
Joseph Schorr
e04c22867c Switch logs to use a single comprehension 2015-07-13 12:45:08 +03:00
Joseph Schorr
fe7677f275 Small NPE Fix 2015-07-13 12:20:51 +03:00
Jimmy Zelinskie
d9bafa478b Merge pull request #218 from coreos-inc/upstreamreqs
Refresh the dependencies and switch back to upstream peewee now that …
2015-07-06 15:17:57 -04:00
Jake Moshenko
1fb676d1f6 Refresh the dependencies and switch back to upstream peewee now that coleifer has added a fix. 2015-07-06 15:02:52 -04:00
Jimmy Zelinskie
cf4800c06c Merge pull request #213 from coreos-inc/orgmember
Add a secondary tab to Teams for managing org members
2015-07-06 11:48:40 -04:00
Jimmy Zelinskie
e199e19374 Merge pull request #217 from coreos-inc/robotspace
Remove space in robot names in the robots manager
2015-07-03 02:37:55 -04:00
Joseph Schorr
750b6ec287 Remove space in robot names in the robots manager
Fixes #216
2015-07-03 09:06:01 +03:00
Jimmy Zelinskie
5497d4cee8 Merge pull request #214 from coreos-inc/swiftstream
Implement `stream_read_file` for the Swift storage engine
2015-07-02 11:52:13 -04:00
Jimmy Zelinskie
3e29420718 Merge pull request #201 from coreos-inc/basepullissue
Record phase information and make better error messages on pull failure
2015-07-02 11:26:40 -04:00
Joseph Schorr
4333bb9e14 Implement stream_read_file for the Swift storage engine
Note that Swift doesn't seem to have a file-like interface, so we need to wrap the generator we get back from it.

Fixes #210
2015-07-02 17:52:43 +03:00