Commit graph

5062 commits

Author SHA1 Message Date
Jake Moshenko
7b53797677 Fix garbage collection when manifests may reference tags 2015-11-19 16:01:36 -05:00
Jake Moshenko
bb934e04af Merge pull request #927 from jakedt/alias
Alias our subqueries to appease the MySQL beast
2015-11-19 13:07:09 -05:00
Jake Moshenko
7ae94f414c Alias our subqueries to appease the MySQL beast 2015-11-19 12:58:06 -05:00
Silas Sewell
90ec66561d Merge pull request #915 from coreos-inc/clair-worker-update-children
securityworker: mark children we can't analyze
2015-11-19 12:11:11 -05:00
Silas Sewell
1162814734 securityworker: mark children we can't analyze
This allows us to differentiate between images that are queued and those we
can't analyze in constant time.
2015-11-19 11:22:15 -05:00
Jake Moshenko
9c8e1eb506 Merge pull request #923 from jakedt/v2performance
Improve the performance of fetching manifest blobs by checksum.
2015-11-19 11:05:44 -05:00
Jake Moshenko
e6bd5488c9 Ensure that manifest tags are still alive 2015-11-19 11:01:47 -05:00
Jake Moshenko
b564492ea7 Improve the performance of fetching manifest blobs by checksum. 2015-11-19 11:01:47 -05:00
Quentin Machu
790a33589d Merge pull request #921 from jakedt/fixcache
Re-enable squashed caching
2015-11-18 22:08:30 -05:00
Jake Moshenko
e01f5ce06e Re-enable squashed caching 2015-11-18 22:05:07 -05:00
Quentin Machu
450a3e08e0 Merge pull request #920 from Quentin-M/fix_secwor
Fix security worker (ok last time before I give up on engineering)
2015-11-18 21:24:13 -05:00
Quentin Machu
f2d874386b Fix security worker (ok last time before I give up on engineering) 2015-11-18 21:21:00 -05:00
Jake Moshenko
e3c64afaf3 Merge pull request #919 from jakedt/fixregistrytest
Fix anonymous repository pulls
2015-11-18 20:17:21 -05:00
Jake Moshenko
39d799b1aa Fix anonymous repository pulls 2015-11-18 20:11:06 -05:00
Quentin Machu
04f2688944 Merge pull request #917 from Quentin-M/fix_secwor
Fix security worker (again?)
2015-11-18 19:45:36 -05:00
Quentin Machu
88e85cded0 Fix security worker (again?) 2015-11-18 19:45:09 -05:00
Rob Szumski
ba934f81a7 static: add v2 support details 2015-11-18 16:45:00 -08:00
Jake Moshenko
0195eea77c Merge pull request #916 from jakedt/fixcrazyauth
Fixcrazyauth
2015-11-18 19:30:08 -05:00
Jake Moshenko
c27f91f7cf Fix token pushes for v2 auth, tokens have no user 2015-11-18 19:18:12 -05:00
Jake Moshenko
4c0e215c2f Silence boto logs when running locally 2015-11-18 19:04:26 -05:00
Quentin Machu
32d0cb49c9 Merge pull request #914 from Quentin-M/fix_secwor
Add missing import
2015-11-18 17:41:39 -05:00
Quentin Machu
7e9faa6c54 Add missing import 2015-11-18 17:39:27 -05:00
Matt Jibson
26f1d77a69 Merge pull request #889 from mjibson/s3-sigv4-host
Allow setting of boto's S3 host for SIGv4
2015-11-18 17:36:15 -05:00
Jake Moshenko
5894761bf7 Merge pull request #913 from jakedt/fucknginx
Remove the Transfer Encoding directive from v2 headers
2015-11-18 17:26:38 -05:00
Jake Moshenko
30bb97a04d Remove the Transfer Encoding directive from v2 headers 2015-11-18 17:23:30 -05:00
Matt Jibson
b3c2388618 Allow setting of boto's S3 host for SIGv4
The problem only happens when a user has configured the new AWS Frankfurt
region for their S3 backend. It is the only region to require the new
v4 signature. All other regions support both v2 and v4. I'm not sure
which version is used by default on US Standard.

We could attempt to figure out where the bucket is hosted based on its
DNS resolution and auto-populate the host field that way. But I think
the amount of effort to have that work correctly outweighs its benefit
for such a simple solution.

fixes #863
fixes #764
2015-11-18 17:19:33 -05:00
Jake Moshenko
d6abfdff72 Merge pull request #910 from jakedt/nginxfix
Stop clobbering our proxy_set_header directives
2015-11-18 16:01:34 -05:00
Jake Moshenko
d6c5fc5d1b Stop clobbering our proxy_set_header directives 2015-11-18 16:00:23 -05:00
Quentin Machu
6d89f259f5 Merge pull request #894 from Quentin-M/fix_secwor
Refactor security worker
2015-11-18 14:40:34 -05:00
Quentin Machu
605ed1fc77 Refactor security worker 2015-11-18 14:38:32 -05:00
Jake Moshenko
7e029184f5 Merge pull request #908 from jakedt/addindices
Add indices for the security worker fields on Image
2015-11-18 13:34:41 -05:00
Jake Moshenko
18b14001b4 Add indices for the security worker fields on Image
Fixes #906
2015-11-18 13:29:51 -05:00
Matt Jibson
f02bb3caee Add user admin scope
Also remove unused scope decorator.

fixes #890
2015-11-18 12:01:40 -05:00
Silas Sewell
1a08cee4e7 Merge pull request #904 from coreos-inc/fix-squash
Fix squash pull after v2 merge
2015-11-18 11:29:39 -05:00
Silas Sewell
f3dafd50e4 Fix squash pull after v2 merge 2015-11-17 18:25:43 -05:00
Jake Moshenko
206ffc65af Merge pull request #902 from jakedt/notransitive
Image parents do not have to be nulled transitively on repo delete
2015-11-17 16:53:13 -05:00
Jake Moshenko
206e18d160 Image parents do not have to be nulled transitively on repo delete 2015-11-17 16:48:26 -05:00
Jake Moshenko
f0a9167275 Merge pull request #900 from jakedt/fixparent
Fix parent to be a relationship again
2015-11-17 16:18:17 -05:00
Jake Moshenko
e252397292 Switch parent back to a ForeignKeyField without a constraint 2015-11-17 16:09:33 -05:00
Jake Moshenko
3374e8c812 Do not constrain deferred fields in SQLAlchemy bridge 2015-11-17 15:55:18 -05:00
Jake Moshenko
574c80be49 Merge pull request #897 from jakedt/stagingfixes
Staging fixes
2015-11-17 12:26:22 -05:00
Jake Moshenko
ae61ebeac9 The translate placements query was renamed in v2 2015-11-17 12:24:05 -05:00
Jake Moshenko
ad273eb002 Re-seed crypto random on all forks 2015-11-17 12:23:10 -05:00
Jake Moshenko
7205bf5e7f Merge pull request #885 from jakedt/python-registry-v2
Python registry v2 mega merge
2015-11-16 16:15:40 -05:00
Matt Jibson
f17984b93d Merge pull request #887 from mjibson/no-unnamed-api-ops
Don't expose unnamed API operations
2015-11-16 15:42:20 -05:00
Matt Jibson
a8a61cb80d Merge pull request #879 from mjibson/k8s-endpoint
Use env vars to set k8s endpoint URL
2015-11-16 15:41:40 -05:00
Matt Jibson
366e9c5e9f Merge pull request #886 from mjibson/logarchive-no-put
No PUT for logarchive
2015-11-16 15:41:28 -05:00
Matt Jibson
d5fb8cafd4 Don't expose unnamed API operations
fixes #861
2015-11-16 15:40:33 -05:00
Silas Sewell
30b0101584 Fix seq generators for enum tables in postgres
This attempts to insert a temporary entry into each enum table until it
succeeds. It re-synchronizes the postgres sequence generators with the max id
of the table.

Fixes #883 and #880
2015-11-16 15:29:51 -05:00
Matt Jibson
13aa6cfcfc No PUT for logarchive
fixes #862
2015-11-16 15:01:12 -05:00