Brad Ison
87e55870b7
Add script for fixing missing admin permissions
...
Adds a util script to find and fix repositories in user namespaces
that are missing admin permissions for the owning user. These admin
permissions are required, but were missing in some cases. See:
https://github.com/coreos-inc/quay/pull/2998
2018-02-13 16:23:17 -05:00
josephschorr
846deb75fe
Merge pull request #2902 from coreos-inc/joseph.schorr/QS-51/azure-blob-store
...
Add support for Azure Blob Storage
2018-02-07 11:34:29 -05:00
josephschorr
61363f0ffc
Merge pull request #2997 from coreos-inc/joseph.schorr/QUAY-818/verify-schema
...
Add test to verify that all defined config fields are found in the schema
2018-02-06 16:39:24 -05:00
josephschorr
2bdcd7f64f
Merge pull request #2998 from coreos-inc/joseph.schorr/QUAY-826/create-transaction
...
Make sure to add primary repo permissions under a transaction
2018-02-06 15:32:42 -05:00
Joseph Schorr
5490e64669
Fill out schema and schema whitelist
2018-02-06 15:27:01 -05:00
Joseph Schorr
7893ef6acc
Add test to ensure that all config.py properties are defined in the config schema
2018-02-06 15:26:31 -05:00
Joseph Schorr
5a2f6f6faf
Add exception if relative path is given to Azure storage engine
2018-02-06 13:48:40 -05:00
Joseph Schorr
de47b13c24
Add superuser config for Azure blob storage
2018-02-06 13:48:40 -05:00
Joseph Schorr
d488517b36
Implement storage driver for Azure Blob Storage
2018-02-06 13:48:40 -05:00
Joseph Schorr
da0fa2e0d2
Make sure to add primary repo permissions under a transaction
...
Should prevent a repository from being created under a user's namespace without a corresponding admin permission
Fixes https://jira.coreos.com/browse/QUAY-826
2018-02-06 11:20:40 -05:00
Brad Ison
cc26eefd2f
Merge pull request #2989 from bison/docker-compose
...
Add docker-compose configuration for dev
2018-02-06 10:50:36 -05:00
Brad Ison
620cf76c58
Add docker-compose configuration
2018-02-05 12:03:50 -05:00
josephschorr
00ae24cb2f
Merge pull request #2996 from coreos-inc/josephschorr/QUAY-819/app-specific-expiration
...
We cannot cache the full expiration for an app specific token, as it would include the datetime when the cache is created, rather than `now`
2018-02-02 16:39:40 -05:00
Joseph Schorr
6228ab5a51
We cannot cache the full expiration for an app specific token, as it would include the datetime when the cache is created, rather than now
...
Fixes https://jira.coreos.com/browse/QUAY-819
2018-02-02 16:11:59 -05:00
josephschorr
944e9e9f1f
Merge pull request #2983 from coreos-inc/joseph.schorr/QUAY-781/login-binding
...
Enable setting the login binding field for Github and Google login
2018-02-02 15:34:53 -05:00
josephschorr
9f7b08d0ff
Merge pull request #2993 from coreos-inc/joseph.schorr/QUAY-797/pagination-size
...
Allow size of pages in V2 api to be configurable
2018-02-02 15:21:15 -05:00
Joseph Schorr
eae9175950
Allow size of pages in V2 api to be configurable
2018-02-02 13:54:41 -05:00
josephschorr
ccef3bffe9
Merge pull request #2978 from coreos-inc/joseph.schorr/QS-117/gunicorn-worker-count
...
Make gunicorn worker count scale automatically and be configurable
2018-02-02 13:46:17 -05:00
josephschorr
0486fe6314
Merge pull request #2909 from coreos-inc/joseph.schorr/QS-56/bad-service-key
...
Better handling of instance key failure in Quay
2018-02-02 13:44:47 -05:00
josephschorr
e2693ac390
Merge pull request #2994 from coreos-inc/fix-syslog
...
Fix syslog for updated phusion base image
2018-02-02 13:44:37 -05:00
Joseph Schorr
da9b05fa4a
Remove syslog check lines from all services
2018-02-02 13:38:25 -05:00
Joseph Schorr
bbdf9e074c
Add metrics for tracking when instance key renewal succeeds and fails, as well as when instance key *lookup* fails
2018-02-02 11:14:42 -05:00
Joseph Schorr
a927ce3e0f
Have boot.py verify that the existing instance's service key is valid and regenerate if it is not
...
This prevents the scenario where a container is restarted after an outage and therefore runs with a bad key
2018-02-02 11:14:00 -05:00
Joseph Schorr
c1cc52f58b
Add a health check for the instance key
...
If the key expires or disappears, the node will now go unhealthy, taking it out of service and preventing downtime
2018-02-02 11:14:00 -05:00
Joseph Schorr
0f49d787eb
Fix syslog for updated phusion base image
...
Syslog is now started outside of the normal init process
2018-02-02 10:52:18 -05:00
Joseph Schorr
4cd3d110db
Make gunicorn worker count scale automatically and be configurable
...
Fixes https://jira.coreos.com/browse/QS-117
2018-02-02 10:34:19 -05:00
josephschorr
6514bf229f
Merge pull request #2973 from coreos-inc/joseph.schorr/QS-116/cloudfront-storage
...
Add support for configuring cloudfront storage
2018-02-02 10:14:28 -05:00
josephschorr
e051c3a125
Merge pull request #2992 from coreos-inc/joseph.schorr/QUAY-813/no-config-yaml
...
Remove config.yaml from built container and add a script to detect in case its added back in the future
2018-02-01 11:44:09 -05:00
Joseph Schorr
493b278de8
Remove the deploy
directory from the code base, as it is not necessary AND it contains an (old) copy of our development config, which should never have been checked into this repository in the first place
2018-02-01 11:24:34 -05:00
josephschorr
1b065c27e0
Merge pull request #2991 from coreos-inc/joseph.schorr/QUAY-807/disable-build-ui
...
Hide build-related UI elements when builds are disabled
2018-01-31 19:00:10 -05:00
Joseph Schorr
43d74d808c
Add a script which explicitly detects for the presence of config.yaml in the built container, and fails if it is there
...
This will prevent any leakage of config.yaml's into the built image
2018-01-31 18:56:50 -05:00
Joseph Schorr
1b707660de
Hide build-related UI elements when builds are disabled
...
Fixes https://jira.coreos.com/browse/QUAY-807
2018-01-31 18:09:38 -05:00
josephschorr
bc8e8f60e7
Merge pull request #2988 from coreos-inc/joseph.schorr/QUAY-774/update-base-image
...
Update phusion base image to newest version
2018-01-31 11:40:04 -05:00
Joseph Schorr
b0f656731c
Add support for configuring CloudFront storage engine
...
Fixes https://jira.coreos.com/browse/QS-116
2018-01-31 11:22:14 -05:00
josephschorr
9cd7093130
Merge pull request #2990 from coreos-inc/joseph.schorr/QUAY-806/oidc-icon
...
Change positioning and sizing of external login buttons to be nicer looking, using flex box
2018-01-31 11:15:28 -05:00
josephschorr
fd1237cff9
Merge pull request #2974 from coreos-inc/joseph.schorr/QS-118/manifest-write-query
...
Audit the number of SQL queries we make in writing manifests, and significantly reduce in the common case
2018-01-31 11:08:33 -05:00
Joseph Schorr
868a3df2d8
Change positioning and sizing of external login buttons to be nicer looking, using flex box
...
Fixes https://jira.coreos.com/browse/QUAY-806
2018-01-31 11:05:42 -05:00
Joseph Schorr
bd75909647
Update phusion base image to newest version
...
Fixes https://jira.coreos.com/browse/QUAY-774
2018-01-30 13:45:18 -05:00
josephschorr
5e82538fd5
Merge pull request #2986 from coreos-inc/temp-name-fix
...
Temp revert dot fix because it applies to repo names as well on pull
2018-01-26 14:44:57 -05:00
Joseph Schorr
462500a389
Temp revert dot fix because it applies to repo names as well on pull
2018-01-26 14:43:37 -05:00
josephschorr
acf41ca1c8
Merge pull request #2985 from coreos-inc/fix-pooled-args-non-pooled
...
Remove unsupported DB connection arguments for non-pooled DB handler
2018-01-26 13:37:40 -05:00
Joseph Schorr
182c4594e7
Remove unsupported DB connection arguments for non-pooled DB handler
2018-01-26 13:37:08 -05:00
josephschorr
4e4faeb9ed
Merge pull request #2984 from coreos-inc/fix-api-error
...
Fix NPE when app specific tokens are not enabled
2018-01-26 13:19:37 -05:00
Joseph Schorr
8714ad6fe3
Fix NPE when app specific tokens are not enabled
2018-01-26 13:18:32 -05:00
Jake Moshenko
6d2e18fa78
Merge pull request #2982 from coreos-inc/jakedt-mac-bootstrap
...
Update the mac dev env instructions
2018-01-25 15:24:24 -05:00
Joseph Schorr
498c29ca89
Enable setting the login binding field for Github and Google login
...
Right now, this is mostly a cut and paste job, which is a bit ugly, but works. Longer term, I've filed https://jira.coreos.com/browse/QUAY-801 to remove the custom code for Github and Google and, instead, support them generically as part of our OIDC provider setup
Fixes https://jira.coreos.com/browse/QUAY-781
2018-01-25 15:21:37 -05:00
Jake Moshenko
b08d56dc1e
Update the mac dev env instructions
...
Don't need pip-rehash anymore, and should probably recommend docker for mac.
2018-01-25 15:18:43 -05:00
Joseph Schorr
9e16a989f5
Audit the number of SQL queries we make in writing manifests, and significantly reduce in the common case
...
Instead of 41 queries now for the simple manifest, we are down to 14.
The biggest changes:
- Only synthesize the V1 image rows if we haven't already found them in the database
- Thread the repository object through to the other model method calls, and use it instead of loading again and again
2018-01-25 11:10:43 -05:00
IvanCherepov
c228734978
Generates HTML documentation explaining all of configuration fields ( #2952 )
...
* create HTML documentation explaining all of schema's configuration fields
2018-01-24 14:09:29 -05:00
josephschorr
e2c1547df6
Merge pull request #2980 from coreos-inc/joseph.schorr/QS-125/dot-names
...
Disallow dots in repository names to fix reflected text "attack"
2018-01-23 14:51:23 -05:00