josephschorr
5470d4c70e
Merge pull request #2606 from coreos-inc/v2.3.3-branch
...
V2.3.3 changes
2017-05-02 15:53:17 -04:00
Joseph Schorr
d77463cc8b
Add sharing to the images lookup in get_matching_tags_for_images
...
Should prevent an issue if we ever get a request with thousands and thousands of images where we would exceed the DB's max packet size
2017-05-02 15:50:31 -04:00
Joseph Schorr
98fcae753b
Change the security notification system to use get_matching_tags_for_images
...
This should vastly reduce the number of database calls we make, as instead of making 2-3 calls per image, we'll make two calls per ~100 images
2017-05-02 15:39:27 -04:00
Joseph Schorr
74dd0ef8e8
Add a batch get_matching_tags_for_images method
...
This will be used in the security notification worker to retrieving the tags needed in a set of batch calls, rather than multiple calls per image
2017-05-02 15:38:25 -04:00
josephschorr
fcbdae573f
Merge pull request #2605 from coreos-inc/v2.3.3-changelog
...
Update changelog for v2.3.3
2017-05-02 15:03:51 -04:00
Joseph Schorr
49f100b11c
Update changelog for v2.3.3
2017-05-02 15:01:21 -04:00
josephschorr
3d59f96f60
Merge pull request #2601 from coreos-inc/v2.3.3-gitlabperm
...
Have gitlab default to True on permissions if they are missing
2017-05-02 13:16:49 -04:00
Evan Cordell
7a96db0945
Add test for SNI support
2017-05-02 13:14:30 -04:00
Joseph Schorr
bf41aedc9c
Have gitlab default to True on permissions if they are missing
...
This allows the repositories to be selected in the UI, if we are unsure whether the user has permission. Since gitlab will do the check anyway, this is safe, although not a great user experience if they chose an invalid repository, but we can't really do much about that.
2017-05-02 13:11:57 -04:00
Evan Cordell
738f53f61a
Merge pull request #2597 from ecordell/sni
...
TUF metadata api SNI support
2017-05-02 13:01:16 -04:00
Evan Cordell
b2569ffbb2
Support SNI in python requests, and only delete tuf metadata if it
...
exists
2017-05-02 09:32:12 -04:00
josephschorr
a78d5fb9ff
Merge pull request #2599 from coreos-inc/no-seriously-frack-you-gitlab
...
Anything can be None in GitLab!
2017-05-01 20:11:41 -04:00
Joseph Schorr
ae7012eef2
Anything can be None in GitLab!
...
Fixes a problem where the `project_access` block is reported as `null` from GitLab API, which breaks our code, because we assume sanity in API design.
2017-05-01 20:09:18 -04:00
josephschorr
a3955d9705
Merge pull request #2596 from coreos-inc/build-queued-prom
...
Add prometheus metric for queued builds
2017-05-01 16:25:52 -04:00
EvB
c4d15f1456
feat(suepr-user): add custom icon for data consistency settings
2017-05-01 16:21:06 -04:00
EvB
27b3c40015
feat(config-setup): add auditlog failover option
2017-05-01 16:20:30 -04:00
josephschorr
9a6cf65836
Merge pull request #2598 from coreos-inc/ldap-lc-fix
...
Move LDAP controls init into the inner loop
2017-05-01 16:12:34 -04:00
Joseph Schorr
b67113e848
Move LDAP controls init into the inner loop
...
We cannot use it across different DNs, so we need to move it down
2017-05-01 16:04:33 -04:00
Joseph Schorr
ae0d1e831b
Add prometheus metric for queued builds
2017-05-01 15:16:55 -04:00
josephschorr
d90933d856
Merge pull request #2595 from coreos-inc/ldap-escape
...
Make sure to escape LDAP queries
2017-05-01 14:25:19 -04:00
Joseph Schorr
30a681343f
Make sure to escape LDAP queries
...
Fixes an issue in team sync around group names that contain *s
Fixes https://www.pivotaltracker.com/story/show/144628235
2017-05-01 14:00:54 -04:00
josephschorr
02c4d75634
Merge pull request #2594 from coreos-inc/show-if-ordering
...
Fix show_if ordering and add a check that fails if misordered
2017-05-01 13:17:39 -04:00
Joseph Schorr
3e8bc07b6c
Fix show_if ordering and add a check that fails if misordered
...
Before this change, these endpoints still existed even if the flag was off
2017-05-01 13:14:20 -04:00
josephschorr
4764756f85
Merge pull request #2593 from coreos-inc/trust-disabled-no-call
...
Don't make signing call unless trust is explicitly enabled
2017-05-01 13:06:05 -04:00
Joseph Schorr
a852c5839c
Don't make signing call unless trust is explicitly enabled
...
It is causing a 500 for some reason
2017-05-01 11:42:18 -04:00
Joseph Schorr
e583be3914
Remove inner query for ancestors lookup on get_matching_tags
2017-04-28 20:10:54 -04:00
Joseph Schorr
8b2e4d3bcf
Add a test for get_matching_tags
2017-04-28 19:57:24 -04:00
josephschorr
8552f7f6e6
Merge pull request #2590 from coreos-inc/anon-ldap-test
...
Make sure we don't allow anonymous binding in LDAP auth
2017-04-28 18:27:23 -04:00
Joseph Schorr
de6352ef73
Make sure we don't allow anonymous binding in LDAP auth
...
We already prevented it, but let's make sure we never allow it by adding some tests
2017-04-28 17:09:47 -04:00
Joseph Schorr
e9ffe0e27b
Implement new search UI
...
We now have both autocomplete-based searching for quick results, as well as a full search page for a full listing of results
2017-04-28 13:57:28 -04:00
Charlton Austin
f1d6a7284d
Merge pull request #2483 from charltonaustin/phase_four_config
...
feat(data): remove subdir
2017-04-28 13:24:22 -04:00
Charlton Austin
c79711b6dc
feat(data): remove subdir
...
### Description of Changes
This is the last step in the four phase migration of the config
2017-04-28 13:23:51 -04:00
josephschorr
8b148bf1d4
Merge pull request #2576 from coreos-inc/full-db-tests-tox
...
Reenable full database testing locally and in concourse
2017-04-27 18:09:15 -04:00
josephschorr
dbb57f7001
Merge pull request #2589 from coreos-inc/setup-tool-fix
...
Fix time machine config validator on old-style config
2017-04-27 14:44:03 -04:00
josephschorr
0a60dd0122
Merge pull request #2584 from coreos-inc/ldap-sync-opt
...
LDAP Team sync improvements
2017-04-27 14:40:26 -04:00
Joseph Schorr
4ea4ee3aa4
Fix time machine config validator on old-style config
...
Existing config won't have the keys defined, so make sure we skip in that case (and just use the defaults)
2017-04-27 14:24:47 -04:00
josephschorr
66b98e5380
Merge pull request #2588 from coreos-inc/fix-yarn-dockerfile
...
Lock yarn version to fix breakage
2017-04-27 14:10:51 -04:00
Joseph Schorr
9cf2372edb
Lock yarn version to fix breakage
...
Once yarn updates past version 0.23, we can unlock it.
2017-04-27 14:06:44 -04:00
josephschorr
493f5a1806
Merge pull request #2587 from coreos-inc/update-changelog
...
Add missing entry to changelog for 2.3.2
2017-04-27 13:38:48 -04:00
Joseph Schorr
b6d2b0c519
Add missing entry to changelog for 2.3.2
2017-04-27 13:33:58 -04:00
josephschorr
3e287978e1
Merge pull request #2585 from coreos-inc/oidc-auth-header
...
Add Authorization header with token to user info call
2017-04-27 11:28:25 -04:00
Joseph Schorr
c0cc574ca2
Add Authorization header with token to user info call
...
While not required, it is recommended to send the token as an Authorization header to the UserInfo call in OIDC: http://openid.net/specs/openid-connect-core-1_0.html#UserInfo
Some implementations expect this and will fail if not present
2017-04-27 11:24:12 -04:00
Joseph Schorr
dd1addee29
LDAP Team sync improvements
...
- Add a large amount of additional logging
- Handle NO_SUCH_OBJECT in AD searches
- Only check if *a* record exists when adding syncing, as opposed to loading the entire search set
2017-04-26 20:26:12 -04:00
Erica
a9337ff484
Merge pull request #2583 from coreos-inc/TEST-buildlogs-endpoint
...
test(endpoints/web): test buildlogs endpoint
2017-04-26 19:35:13 -04:00
EvB
b216290e31
test(endpoints/web): test buildlogs endpoint
2017-04-26 18:16:26 -04:00
Erica
51ff7cab20
Merge pull request #2582 from coreos-inc/FIX-archivelogs-url
...
fix(data.archivedlogs): update endpoint name
2017-04-26 17:34:57 -04:00
EvB
fddcd0a395
fix(data.archivedlogs): update endpoint name
2017-04-26 17:31:44 -04:00
josephschorr
5f13b99651
Merge pull request #2581 from coreos-inc/2.3.2-changelog
...
Changelog for v2.3.2
2017-04-26 14:25:03 -04:00
Joseph Schorr
6c91389d35
Changelog for v2.3.2
2017-04-26 14:23:51 -04:00
josephschorr
5c4f7d50c6
Merge pull request #2580 from coreos-inc/team-sync-email-fix
...
Fix handling of team sync when a user already exists with the email address
2017-04-26 14:19:23 -04:00
