Commit graph

4210 commits

Author SHA1 Message Date
josephschorr
744ad9e79b Merge pull request #849 from coreos-inc/vulnerability-tool-priority
Only send vulnerability events if the minimum priority is gte to that…
2015-11-10 16:15:08 -05:00
Joseph Schorr
ca7d736db2 Only send vulnerability events if the minimum priority is gte to that specified
Fixes #770
2015-11-10 16:05:55 -05:00
Jimmy Zelinskie
5926501e08 Merge pull request #842 from jzelinskie/goodhumor
add queue and worker for clair notifications
2015-11-10 15:23:41 -05:00
Jimmy Zelinskie
5655c08467 fix security worker service permissions 2015-11-10 15:22:36 -05:00
Jimmy Zelinskie
8e2868737b rename secscan_endpoint and move db close to API 2015-11-10 15:22:31 -05:00
Jimmy Zelinskie
270010105d add security notification worker to init 2015-11-10 15:22:30 -05:00
Jimmy Zelinskie
da31714fb5 specify securityworker skip message 2015-11-10 15:22:30 -05:00
Jimmy Zelinskie
52962b3732 close db connections when calling out to clair 2015-11-10 15:22:30 -05:00
Jimmy Zelinskie
954d988452 pylint: ignore constant names and too many locals 2015-11-10 15:22:30 -05:00
Jimmy Zelinskie
d651ea4b48 initial security notification worker 2015-11-10 15:22:30 -05:00
Jimmy Zelinskie
dc476470fe add secscan notification queue 2015-11-10 15:22:30 -05:00
josephschorr
189762694f Merge pull request #837 from coreos-inc/vulnerability-tool-fixquery
Update quay sec code to fix problems identified in previous review
2015-11-09 18:29:23 -05:00
Joseph Schorr
a69c9e12fd Update quay sec code to fix problems identified in previous review
- Change get_repository_images_recursive to operate over a single docker image and storage uuid
- Move endpoints/sec to endpoints/secscan
- Change notification system to work with new Quay-sec format

Fixes #768
2015-11-09 17:14:35 -05:00
Quentin Machu
16c364a90c Rename secscan_endpoint where required, fix index and indentation 2015-11-09 15:18:42 -05:00
Quentin Machu
fa0897faae Merge pull request #831 from Quentin-M/vulnerability-tool
Remove checksum from Clair's worker and adjust line length
2015-11-09 14:55:46 -05:00
Quentin Machu
7dbe15e339 Remove checksum from Clair's worker and adjust line length 2015-11-09 14:31:24 -05:00
Joseph Schorr
02e2bef943 Fix hardcoded priority 2015-11-09 12:51:05 -05:00
Joseph Schorr
b408cfd2cc Ready for demo 2015-11-09 12:51:05 -05:00
Joseph Schorr
75173d5573 Base DB with notification 2015-11-09 12:51:05 -05:00
Joseph Schorr
136ab28f17 Base demo DB 2015-11-09 12:51:05 -05:00
Joseph Schorr
8c144397e9 WIP: UI for QuaySec 2015-11-09 12:50:39 -05:00
Joseph Schorr
75dfec7875 Fix endpoint 2015-11-09 12:50:39 -05:00
Joseph Schorr
7fa4fe08e7 Fix worker 2015-11-09 12:50:39 -05:00
Joseph Schorr
407eaae137 WIP: Towards sec demo 2015-11-09 12:50:39 -05:00
Joseph Schorr
fb3d0fa27d Add a SecEndpoint class and move all the cert and config handling in there 2015-11-09 12:49:19 -05:00
Joseph Schorr
87c56d1caa Add vulnerabilities and packages API to Quay
Fixes #564
2015-11-09 12:49:19 -05:00
Joseph Schorr
d7ace69fe3 Add a vulnerability_found event for notice when we detect a vuln
Fixes #637

Note: This PR does *not* actually raise the event; it merely adds support for it
2015-11-09 12:49:19 -05:00
Quentin Machu
37118423a5 Add support for Quay's vulnerability tool 2015-11-09 12:49:19 -05:00
Jake Moshenko
c97bc0d8d0 Merge pull request #829 from jakedt/migratelogs
Add debug logs to migrations
2015-11-09 11:16:22 -05:00
Jake Moshenko
b9fce4f5d0 Add debug logs to migrations 2015-11-09 11:12:23 -05:00
Quentin Machu
56a147b695 Merge pull request #827 from Quentin-M/fixmighead
Fix migration 57dad559ff2d's header
2015-11-08 22:05:19 -05:00
Quentin Machu
ade664036c Fix migration 57dad559ff2d's header
Fixes #825
2015-11-08 15:22:15 -05:00
Jake Moshenko
b526e2a3cd Merge pull request #822 from coreos-inc/phase2-11-07-2015
Phase2 11 07 2015
2015-11-08 13:21:59 -05:00
Jake Moshenko
3a4200956d Merge pull request #820 from coreos-inc/phase1-11-07-2015
Phase1 11 07 2015
2015-11-08 13:14:23 -05:00
josephschorr
ed0160dd4d Merge pull request #821 from coreos-inc/phase1-11-07-2015-fixtest
Phase1 11 07 2015 fixtest
2015-11-08 13:12:23 -05:00
Joseph Schorr
8463514a09 Fix delete_user call to remove all user data 2015-11-08 13:10:01 -05:00
Joseph Schorr
8019994462 Merge branch 'phase1-11-07-2015' of github.com:coreos-inc/quay into phase1-11-07-2015 2015-11-07 21:16:34 -05:00
Jake Moshenko
90dd76806c Merge pull request #813 from jakedt/phase2-11-07-2015
Stop reading the v1 checksums from storage
2015-11-06 16:36:07 -05:00
Jake Moshenko
75f917f592 Stop reading the v1 checksums from storage 2015-11-06 16:17:12 -05:00
Jake Moshenko
fd3f88f489 Re-enable parent id backfill, use new backfill style 2015-11-06 16:17:12 -05:00
Jake Moshenko
9036ca2f2f Backfill the v1 checksums from imagestorage 2015-11-06 16:17:12 -05:00
Jimmy Zelinskie
0e4d749f89 Merge pull request #814 from jzelinskie/fixmigrations
resolve migration branches and run initdb
2015-11-06 16:15:57 -05:00
Jimmy Zelinskie
d5e7f6bea7 resolve migration branches and run initdb 2015-11-06 16:10:31 -05:00
Jake Moshenko
08f22a0aae Merge pull request #812 from jakedt/phase2-11-07-2015
Re-enable parent id backfill, use new backfill style
2015-11-06 15:58:57 -05:00
Jake Moshenko
79c89ba11d Re-enable parent id backfill, use new backfill style 2015-11-06 15:45:39 -05:00
Matt Jibson
d8c0d243f4 Merge pull request #811 from mjibson/mjibson-key
Update mjibson ssh key
2015-11-06 15:44:23 -05:00
Matt Jibson
2325328bbd Update mjibson ssh key 2015-11-06 15:34:52 -05:00
Jake Moshenko
88b9e80cbb Backfill the v1 checksums from imagestorage 2015-11-06 15:28:44 -05:00
Jimmy Zelinskie
f3c3e684a1 prepare branch to be merged into phase1-11-07-2015
This removes the checksum backfill, removes the migration that runs the
backfills, and defaults the security scan feature off.
2015-11-06 15:22:18 -05:00
Quentin Machu
af4511455f Remove .distinct() from these queries 2015-11-06 15:22:18 -05:00