vbatts/quay - Git - Batts Cloud

Archived

Author	SHA1	Message	Date
Jimmy Zelinskie	a42eb09a3e	util.license: make bp-modification a method	2016-10-17 21:43:45 -04:00
Jimmy Zelinskie	0c5400b7d1	enforce license across registry blueprints	2016-10-17 21:43:45 -04:00
Joseph Schorr	8fe29c5b89	Add license upload step to the setup flow Fixes #853	2016-10-17 21:43:15 -04:00
Joseph Schorr	b1c17b1a45	Fix messages API to not NPE show_if does not work on a method route	2016-10-17 17:43:12 -04:00
Charlton Austin	f45aac063e	Merge pull request #2005 from charltonaustin/fix_spacing_for_motd Moving the messages endpoint to something more generic, and making th…	2016-10-17 17:21:03 -04:00
Charlton Austin	8e5dc8d3db	Moving the messages endpoint to something more generic, and making the get visible all the time.	2016-10-17 16:23:48 -04:00
Joseph Schorr	18097a1bd6	Fix Link headers for pagination to match RFC Fixes part of #2002	2016-10-17 13:57:05 -04:00
Jake Moshenko	95ced00457	Merge pull request #1982 from jakedt/marsquito Write our users to Marketo as leads.	2016-10-14 16:30:03 -04:00
Jake Moshenko	f04b018805	Write our users to Marketo as leads.	2016-10-14 16:29:11 -04:00
Joseph Schorr	886489c666	Fix NPE raised if a vulnerability notification doesn't have a level filter Fixes #1990	2016-10-14 14:23:50 -04:00
Charlton Austin	97d644d95d	Adding in the delete api and the delete and create UI.	2016-10-13 10:40:52 -04:00
Charlton Austin	be916fb6ed	Merge pull request #1966 from charltonaustin/j_code_review_comments Adding in security tests and docs.	2016-10-11 09:50:47 -04:00
charltonaustin	5a4b702888	Adding in security tests and docs.	2016-10-11 09:30:37 -04:00
Jake Moshenko	7a3ee86e53	Merge pull request #1957 from jakedt/absolutecorruption Always use absolute URLs in Location headers.	2016-10-10 18:25:29 -04:00
Jake Moshenko	df1f35e9f9	Always use absolute URLs in Location headers. This works around docker/docker#15048	2016-10-10 16:30:24 -04:00
josephschorr	7fc33a9a57	Merge pull request #1965 from coreos-inc/condense-slack-notifications Less verbose notifications for QSS	2016-10-10 15:38:12 -04:00
Joseph Schorr	ebf4120326	Less verbose notifications for QSS Fixes #1914	2016-10-10 15:18:49 -04:00
charltonaustin	2739a40479	Removing validate annotation.	2016-10-10 15:15:28 -04:00
charltonaustin	f179320944	Adding in validate son request.	2016-10-10 14:15:09 -04:00
charltonaustin	14eb3005b6	Some fixes for code review.	2016-10-10 12:55:00 -04:00
charltonaustin	075e87089f	removing debug print statement	2016-10-10 09:36:59 -04:00
charltonaustin	1e733ddffb	Adding in a new message data model and the corresponding methods to in the API.	2016-10-07 15:56:58 -04:00
charltonaustin	002f533bf8	Creating message api.	2016-10-07 10:22:30 -04:00
charltonaustin	5264b64999	Adding in an endpoint for super user messages.	2016-10-06 17:33:32 -04:00
Joseph Schorr	ff0a292548	Handle unicode in entity search Fixes #1934	2016-10-04 21:56:47 +03:00
Jake Moshenko	2efaee6aef	Fix all of the sample notification calls.	2016-10-03 15:26:49 -04:00
Joseph Schorr	f72cb1d2ba	Fix tags API pagination and add a test	2016-10-03 22:06:31 +03:00
Jimmy Zelinskie	671dc73b82	Merge pull request #1924 from coreos-inc/manifestlogs v2: better manifest error messages	2016-10-03 10:32:49 -04:00
Jimmy Zelinskie	afa220a744	v2: add logs around InvalidManifest exception	2016-10-03 10:29:14 -04:00
Jimmy Zelinskie	6c6ef0f22a	v2: better manifest error messages	2016-10-03 10:13:39 -04:00
Joseph Schorr	0b7bb6d6c6	Fix issue in V1 registry code with accessing locations under HEAD Fixes #1922	2016-10-03 17:09:12 +03:00
Jimmy Zelinskie	fae9538467	notifications: another switch to repo attrdict Fixes #1919.	2016-10-01 16:44:19 -04:00
Jimmy Zelinskie	31b77cf232	rename auth.auth to auth.process This fixes some ambiguity around imports.	2016-09-29 15:24:57 -04:00
Jimmy Zelinskie	fc7301be0d	*: fix legacy imports This change reorganizes imports and renames the legacy flask extensions.	2016-09-28 20:17:14 -04:00
josephschorr	4943ae3d32	Merge pull request #1857 from coreos-inc/better-404 Better 404 (and 403) pages	2016-09-27 11:12:54 +02:00
Jimmy Zelinskie	44eca10c05	update interfaces to use ABC	2016-09-26 14:50:24 -04:00
Jimmy Zelinskie	ca883e5662	port label support to refactored v2 registry	2016-09-26 14:49:58 -04:00
Joseph Schorr	3c8b87e086	Fix verbs in manifestlist All registry_tests now pass	2016-09-26 14:49:58 -04:00
Jimmy Zelinskie	c35413d4f6	add boilerplate for verbs data interface	2016-09-26 14:49:23 -04:00
Jimmy Zelinskie	2e5a94bc0b	create key server data interface	2016-09-26 14:49:23 -04:00
Jimmy Zelinskie	c06d395f96	create interfaces for v1 and v2 data model	2016-09-26 14:49:23 -04:00
Joseph Schorr	db60df827d	Implement V2 interfaces and remaining V1 interfaces Also adds some tests to registry tests for V1 stuff. Note: All registry tests currently pass, but as verbs are not yet converted, the verb tests in registry_tests.py currently fail.	2016-09-26 14:49:04 -04:00
Jimmy Zelinskie	d67991987b	v1: refactor index	2016-09-26 14:48:42 -04:00
Jimmy Zelinskie	419779b9c5	v2/blob: remove references to docker client	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	c77a7bc0b9	v2/blob: _upload_chunk parse range header	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	9f743fd6cd	address PR comments	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	16b451437f	v2/blob: s/make_response/Response()	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	35579093ca	s/close_db_filter/CloseForLongOperation	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	b68e1b5efc	add "get_" prefix to all db read funcs	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	32a6c22b43	mv data/types image This change also merges formats into the new image module.	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	a516c08deb	v2: refactor auth to use data.types	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	3de6000428	v2: refactor blob.py to use data.types	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	21cbe0bd07	v2: mv _paginate paginate	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	3f722f880e	v2: add pagination decorator	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	5b630ebdb0	v2/manifest: refactor to use types	2016-09-26 14:48:05 -04:00
Jimmy Zelinskie	a5502b54f8	trackhelper: use data.types.Repository	2016-09-26 14:47:06 -04:00
Joseph Schorr	ea18790dfe	Get V1 registry code working with new model methods	2016-09-26 14:47:06 -04:00
Jimmy Zelinskie	8435c254c3	finish v1 registry refactor	2016-09-26 14:47:06 -04:00
Jimmy Zelinskie	c14437e54a	initial v1 refactor to use model methods	2016-09-26 14:47:06 -04:00
Jimmy Zelinskie	4f95a814c0	satisfy the pylint gods	2016-09-26 14:47:06 -04:00
josephschorr	ad4efba802	Merge pull request #1830 from coreos-inc/superuser-dashboard Add prometheus stats to enable better dashboarding	2016-09-26 17:19:22 +02:00
josephschorr	1a1a5f7240	Merge pull request #1854 from coreos-inc/invite Add feature flag to turn off requirement for team invitations	2016-09-22 11:36:58 -04:00
Joseph Schorr	6fffc22b8a	Fix build should_perform for empty JSON	2016-09-21 15:00:47 -04:00
Joseph Schorr	af79fde50d	Fix build notifications	2016-09-21 14:37:23 -04:00
Joseph Schorr	4d5c65e6d4	Better 404 (and 403) pages Fixes #1819	2016-09-21 13:54:21 -04:00
Joseph Schorr	25ed99f9ef	Add feature flag to turn off requirement for team invitations Fixes #1804	2016-09-20 16:45:00 -04:00
josephschorr	33bfe2678b	Merge pull request #1831 from coreos-inc/well-known Add well-known endpoint for Quay	2016-09-16 21:07:30 -04:00
josephschorr	349bd1e0fa	Merge pull request #1839 from coreos-inc/better-notifications Better notifications UI and features	2016-09-16 21:07:14 -04:00
Joseph Schorr	03d4445a02	Add notification filtering for builds based on ref regex Fixes #1835	2016-09-14 16:48:17 -04:00
Joseph Schorr	2fb43196c6	Add well-known endpoint for Quay Fixes #1790	2016-09-12 17:33:08 -04:00
Joseph Schorr	bda0311dbe	Allow build triggers to be invoked by any repo admin Fixes #1079	2016-09-09 17:21:14 -04:00
Joseph Schorr	3f2447d831	Make the frontend agnostic to why a trigger can be run manually	2016-09-09 16:54:46 -04:00
Joseph Schorr	c8a1b8abab	Add prom stats for repository push, pull and verb actions	2016-09-09 15:13:58 -04:00
Joseph Schorr	5d6876eb81	Remove old metrics dashboard It only applies to a single instance, making it fairly useless	2016-09-09 14:46:33 -04:00
Jake Moshenko	1d8b72235a	Add a helper method to Image to parse ancestor string.	2016-09-07 10:48:58 -04:00
josephschorr	cd8b45e25b	Merge pull request #1754 from coreos-inc/team-add-perms Better UI and permissions handling for robots and teams	2016-09-06 17:21:19 -04:00
Joseph Schorr	1b7b3ea41d	Make sure to filter starred repos to those visible to the user Fixes #1793	2016-08-31 14:08:31 -04:00
Joseph Schorr	357005e33f	Raise a 409 if we try to insert a tag twice at the same time Also fixes handling of labels for existing manifests Fixes #1775	2016-08-29 16:03:35 -04:00
Joseph Schorr	608ffd9663	Basic labels support Adds basic labels support to the registry code (V2), and the API. Note that this does not yet add any UI related support.	2016-08-26 15:24:26 -04:00
Joseph Schorr	391d70d9ec	Add repo permissions dialog for existing teams and robots Fixes #1686	2016-08-22 14:43:12 -04:00
Joseph Schorr	6ebb417923	Redesign the teams page to use a table Allows for faster loading and easier viewing of important information about teams	2016-08-22 14:42:54 -04:00
Ben Spoon	979d813551	Merge pull request #1736 from coreos-inc/analytics Analytics	2016-08-19 12:17:34 -07:00
Joseph Schorr	b459581637	Fix handling of dates in logs view - Fixes #1742 - Also fixes the time zone on the aggregated logs API	2016-08-17 16:27:06 -04:00
Joseph Schorr	193040a473	Fix tag links Fixes #1741	2016-08-17 15:06:10 -04:00
Ben Spoon	a706901405	analytics: add google analytics	2016-08-16 11:35:39 -07:00
Joseph Schorr	7f5b536ddb	Fix pagination of repositories Fixes #1725	2016-08-15 16:48:04 -04:00
Joseph Schorr	4f5b4e63f2	Really fix the hack (for now) on public repo pagination	2016-08-13 14:40:11 -04:00
Joseph Schorr	0a12c0cd34	Hack to temporarily fix pagination over public repos	2016-08-13 14:21:23 -04:00
Joseph Schorr	75e8af47e5	Switch Olark to Chatlio	2016-08-08 18:18:35 -04:00
Joseph Schorr	b7bde27b3c	Fix display for builds which have fully expired Fixes #1663	2016-08-04 11:13:32 -04:00
josephschorr	8bc0080aeb	Merge pull request #1672 from coreos-inc/off-by-one Fix off-by-one error in repo tags pagination	2016-08-03 15:00:23 -04:00
josephschorr	b662fad09e	Merge pull request #1670 from coreos-inc/blob-upload-logs Add additional logs for invalid blob upload	2016-08-02 14:55:44 -04:00
Joseph Schorr	dc22b50b56	Add missing requires_cors to build log archive URL Fixes #1671	2016-08-02 14:18:58 -04:00
Joseph Schorr	b1b0da7afd	Fix off-by-one error in repo tags pagination Fixes #1665	2016-08-02 14:17:33 -04:00
Joseph Schorr	a1a6647ea7	Add additional logs for invalid blob upload Fixes #1668	2016-08-02 12:15:30 -04:00
Joseph Schorr	cb9a99fc7b	Change user events tutorial Redis error to be an inline box Fixes #1653	2016-07-27 13:41:26 -07:00
Joseph Schorr	06d52f2c83	Fix handling of multi-part branches in the build triggers Fixes #1360	2016-07-26 13:41:13 -07:00
Joseph Schorr	0fe3e6510a	Prevent invalid tags on builds Fixes #1632	2016-07-25 17:50:35 -07:00
Joseph Schorr	cbf7c2bf44	Add better logging to blob uploads Fixes #1635	2016-07-20 17:53:43 -04:00
Joseph Schorr	4e1259b58a	Fix the Repository ID in pagination problem once and for all But.... ONCE AND FOR ALL! Note: Tested on SQLite, Postgres and MySQL	2016-07-14 17:09:52 -04:00
Joseph Schorr	e252ee07cb	Fix popularity metrics on list repos API	2016-07-06 16:15:54 -04:00
josephschorr	6bde6406c9	Merge pull request #1598 from coreos-inc/instance-key-id-health Add instance key ID to the health check endpoint	2016-07-05 15:45:47 -04:00
Joseph Schorr	a1009af61c	Move aggregator into its own repo and add it to the image	2016-07-05 15:39:51 -04:00
Joseph Schorr	7fddc61b8f	Add instance key ID to the health check endpoint Fixes #1429	2016-07-05 14:14:22 -04:00
Joseph Schorr	1eec6f53b2	Fix SQL error with pagination around Repositories Fixes #1591	2016-06-30 17:31:35 -04:00
Joseph Schorr	310ecd11cc	Handle user events Redis not working in tutorial Also does some basic restyling Fixes #1586	2016-06-28 17:04:31 -04:00
Joseph Schorr	38744c81c5	Change future entries in heat map to be empty	2016-06-23 17:08:11 -04:00
Joseph Schorr	853cca35f3	Change repo stats to use the RAC table and a nice UI	2016-06-22 15:06:53 -04:00
josephschorr	9e6a264f5f	Merge pull request #1523 from coreos-inc/verb-tag-cache-fix Add a uniqueness hash to derived image storage to break caching over …	2016-06-20 16:38:25 -04:00
Joseph Schorr	a43b741f1b	Add a uniqueness hash to derived image storage to break caching over tags This allows converted ACIs and squashed images to be unique based on the specified tag. Fixes #92	2016-06-20 16:34:52 -04:00
Joseph Schorr	9158fe38ee	Add Marketo munchkin tracking via angulartics	2016-06-20 16:22:30 -04:00
Jake Moshenko	a1cf12e460	Add a sitemap.txt for popular public repos and reference it from the robots.txt	2016-06-17 14:34:20 -04:00
Joseph Schorr	b73b534022	Disable hosted status on 500 pages Fixes #1547	2016-06-16 16:27:18 -04:00
josephschorr	614b9124ae	Merge pull request #1512 from coreos-inc/optimize-queries Optimize various queries	2016-06-16 14:22:59 -04:00
Jake Moshenko	746728ba24	Remove escaped_fragment snapshot rendering.	2016-06-14 12:53:10 -04:00
josephschorr	58bef472d9	Merge pull request #1526 from coreos-inc/superuser-grant Add ability for super users to take ownership of namespaces	2016-06-13 16:23:10 -04:00
Joseph Schorr	20816804e5	Add ability for super users to take ownership of namespaces Fixes #1395	2016-06-13 16:22:52 -04:00
josephschorr	92f0db8056	Merge pull request #1514 from coreos-inc/better-logs Only send heavy log-based stats for repository where required	2016-06-09 14:52:30 -04:00
Joseph Schorr	c3701cea7a	Only send heavy log-based stats for repository where required	2016-06-09 14:52:15 -04:00
Joseph Schorr	8177c39aff	Move privacy and TOS to Angular Fixes #1529	2016-06-09 13:45:37 -04:00
Joseph Schorr	8887f09ba8	Use the instance service key for registry JWT signing	2016-06-07 11:58:10 -04:00
Joseph Schorr	73cb3c00ec	Remove unused import	2016-06-03 13:33:22 -04:00
Joseph Schorr	9a747ca6a0	Have get_parent_images not join on placements The only case that needs the placements is in verbs, for which we use a new method	2016-06-03 13:33:15 -04:00
Joseph Schorr	53538f9001	Optimize get_tag_image query No caller uses the image placements or locations, so no need to load them.	2016-06-02 16:36:38 -04:00
josephschorr	cad8746f9d	Merge pull request #1502 from coreos-inc/image-replication Enable storage replication for V2 and add backfill tool	2016-06-02 15:02:53 -04:00
Joseph Schorr	12924784ce	Enable storage replication for V2 and add backfill tool Fixes #1501	2016-06-02 14:36:08 -04:00
Joseph Schorr	48213f9ff9	Reject manifest 2 earlier to make pushes faster	2016-06-02 12:46:20 -04:00
Jimmy Zelinskie	2317938bfa	Merge pull request #1496 from jzelinskie/ripRMS dockerfile: add check for GPL pip packages	2016-06-02 12:28:18 -04:00
josephschorr	a85c3ebff7	Merge pull request #1457 from coreos-inc/xauth Add support for direct granting of OAuth tokens and add tests	2016-06-01 12:07:12 -04:00
Joseph Schorr	04df2410ec	Add better errors if Redis is down Fixes #1497	2016-05-31 15:24:36 -04:00
Jimmy Zelinskie	70f794b0af	replace rfc3987 library with urlparse The former is GPL licensed.	2016-05-26 13:29:48 -04:00
Jake Moshenko	8323c51e6e	Extend registry auth to support notary JWTs.	2016-05-24 13:42:28 -04:00
josephschorr	fa3b342901	Merge pull request #1483 from coreos-inc/superuser-external-user Fix setup tool when binding to external auth	2016-05-23 17:17:45 -04:00
Joseph Schorr	7933aecf25	Add support for direct granting of OAuth tokens and add tests This allows a client (when authorized in a whitelist) to send direct credentials via a Basic auth header and therefore bypass the OAuth approval UI for that user.	2016-05-23 17:17:06 -04:00
Joseph Schorr	60bbca2185	Fix setup tool when binding to external auth We now query the external auth provider for the external service's identifier before adding the linking row into the database. This fixes the case where the external service resolves a different identifier for the same username. Fixes #1477	2016-05-23 17:11:36 -04:00
Joseph Schorr	f670c4c7a9	Change Signer to use the config provider and fix tests Fixes the broken ACI tests	2016-05-23 17:10:03 -04:00
Joseph Schorr	343a080833	Make security scan testing much faster	2016-05-05 13:55:24 -04:00
Jake Moshenko	9221a515de	Use the registry API for security scanning when the storage engine doesn't support direct download url	2016-05-04 18:04:06 -04:00
Joseph Schorr	73fa593d02	Various small fixes in prep for QE release	2016-05-04 15:20:27 -04:00
josephschorr	550b9cb2b3	Merge pull request #1428 from coreos-inc/clair-setup-new Implement setup tool support for Clair	2016-05-04 13:52:54 -04:00
Joseph Schorr	2cbdecb043	Implement setup tool support for Clair Fixes #1387	2016-05-04 13:40:50 -04:00
Joseph Schorr	6e2df3b339	Fix key server to not list expired keys Fixes the key server to not list expire keys and by default not return expired or unapproved keys unless explicitly requested. Fixes #1430	2016-05-03 17:58:47 -04:00
josephschorr	f0af2ca9c3	Merge pull request #1407 from coreos-inc/enterpriselanding Add Enterprise Landing page	2016-05-03 13:52:22 -04:00
Evan Cordell	2242c6773d	Add 'Automatic' ServiceKeyApprovalType	2016-04-29 14:10:33 -04:00
Evan Cordell	668ce2c7cd	Generate private key on startup	2016-04-29 14:10:33 -04:00
Joseph Schorr	6091db983b	Hide expired keys outside of their staleness window	2016-04-29 14:10:33 -04:00
Jimmy Zelinskie	726cb5fe6a	key server: 403 on expired approved keys (#1410 )	2016-04-29 14:09:37 -04:00
Joseph Schorr	4f63a50a17	Change account-less logs to use a user and not null This allows us to skip the migration	2016-04-29 14:09:37 -04:00
Jimmy Zelinskie	ca5794ba18	key server: use total_seconds() for cache headers	2016-04-29 14:09:37 -04:00
Joseph Schorr	5d6e5a42e8	Add delete logging and tests for logging	2016-04-29 14:09:09 -04:00
Jimmy Zelinskie	6aa7040f39	keyserver: add cache-control headers	2016-04-29 14:05:16 -04:00
Joseph Schorr	bc08ac2749	Fix timeouts in the JWT endpoint tests	2016-04-29 14:05:16 -04:00
Joseph Schorr	522cf68c5d	Lots of smaller fixes: - Add the rotation_duration to the keys API - Have the key service UI use the new rotation_duration field - Fix notification deletion lookup path - Add proper support for the new notification in the UI - Only delete expired keys after 7 days (configurable) - Fix angular digest loop - Fix unit tests - Regenerate initdb	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	d0bd70fb36	endpoints.web: add missing import	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	370ac3ecd0	service keys: add rotation_duration field	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	fca258d8bf	endpoints: remove /keys BitTorrent support should now be able to use the keyserver infrastructure instead.	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	9f4a4092da	keyserver: get signer kid from unverified headers	2016-04-29 14:05:16 -04:00
Joseph Schorr	08017c5111	Further UI updates	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	cfc15746a6	keyserver: tests!	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	d19eb16b45	keyserver: add generate key function The superuser API, initdb, and tests will all need this functionality.	2016-04-29 14:05:16 -04:00
Joseph Schorr	fb1dca4e94	Add API usage tests	2016-04-29 14:05:16 -04:00
Joseph Schorr	11ff3e9b59	keys ui WIP	2016-04-29 14:05:16 -04:00
Jimmy Zelinskie	136f92400f	key_server: remove s at the end of endpoint	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	e456228434	keyserver: insert rotation policy into metadata	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	885a41e6f5	key server: misc fixes to make jwtproxy work	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	50ad1bb6b1	key server: misc cleanup to get it working	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	c0ab45d335	key server: derive audience from host and scheme	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	93720bd0f4	superuser: proper view for approvals/keys	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	d277fe6741	add final service key config	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	c6b8b3ce8c	service_keys: s/get_keys/list_keys	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	0ec54fc70e	clear notifications on delete/replace service_key	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	42b5196b21	add notification path and use for service keys	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	97ae800e6c	canonicalize json	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	f406942984	converging on proper rotation	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	aaf9e83278	basically finish superuser key api	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	35ed73e195	rework superuser api	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	4079dba167	service keys: do all the right stuff	2016-04-29 13:38:25 -04:00
Jimmy Zelinskie	499bb16306	service key server wip	2016-04-29 13:38:25 -04:00
Joseph Schorr	c6f7dfa102	Add Enterprise Landing page Note: The design comes directparners.	2016-04-28 13:47:54 -04:00
Joseph Schorr	03489c22ad	Log the pushed tag and add IP address display Fixes #798	2016-04-20 13:00:21 -04:00
Evan Cordell	9a1d97216b	Switch error mimetype back to application/json	2016-04-18 17:42:08 -05:00
Evan Cordell	4d7843580f	Fix superuser page	2016-04-15 16:50:01 -04:00
josephschorr	cf04fedd6a	Merge pull request #1347 from coreos-inc/marketingtagman Add Google Tag Manager support to Quay	2016-04-13 16:50:36 -04:00
Evan Cordell	09064853ac	Merge pull request #1364 from ecordell/error-json-fixes Fix error-related issues	2016-04-13 13:32:00 -04:00
Evan Cordell	eb3e7eba88	Merge pull request #1351 from ecordell/document-201-swagger Swagger: document 201 responses for POST requests	2016-04-13 09:50:34 -04:00
Evan Cordell	e1b3312495	Add back `error_message` and `error_type` for backwards-compatibility	2016-04-13 09:11:40 -04:00
Evan Cordell	7b44beb1fd	Fix `WWW-Authenticate` header on 401	2016-04-13 09:01:42 -04:00
Evan Cordell	d67c4ba46c	Fix formatting in `endpoints/api/error.py`	2016-04-12 16:53:50 -04:00
Joseph Schorr	891f7d9213	Add Google Tag Manager support to Quay	2016-04-12 15:28:24 -04:00
Evan Cordell	1cdbd89120	Fix test (response validation in debug mode)	2016-04-12 07:56:58 -04:00
Evan Cordell	693a11c58e	Add RFC citation	2016-04-11 20:08:45 -04:00
Evan Cordell	7c361c07f9	Use ApiService to get error message	2016-04-11 17:31:30 -04:00
Evan Cordell	b5db41920f	Address review comments	2016-04-11 16:34:40 -04:00
Evan Cordell	eba75494d9	Use new error format for auth errors (factor exceptions into module)	2016-04-11 16:22:26 -04:00
Evan Cordell	9c08717173	Return application/problem+json format errors and provide error endpoint to dereference error codes.	2016-04-11 14:57:24 -04:00
Evan Cordell	d69d79d302	swagger: document 201 responses for POST requests	2016-04-07 09:26:28 -04:00
Joseph Schorr	a06bda5910	Never include Stripe checking in LDN Instead, we always load it from Stripe when billing is enabled. Also fixes our Stripe icon.	2016-04-01 14:10:11 -04:00
Joseph Schorr	a882055f62	Better error message for invalid recovery codes	2016-03-30 16:02:47 -04:00
Joseph Schorr	42e934d84f	Make notification lookup faster and fix repo pagination on Postgres	2016-03-30 14:46:31 -04:00
josephschorr	4aa079e743	Merge pull request #1247 from coreos-inc/useradminscopes Remove internal_only from some APIs now that we expose a user admin scope	2016-03-23 14:16:02 -04:00
Joseph Schorr	aa5587c93c	Fixes and added tests for the security notification worker Fixes #1301 - Ensures that the worker uses pagination properly - Ensures that the worker handles failure as expected - Moves marking the notification as read to after the worker processes it - Increases the number of layers requested to 100	2016-03-18 20:28:06 -04:00
Joseph Schorr	6a4584b87a	Add another test for security notification filtering	2016-03-17 12:59:27 -04:00
Joseph Schorr	57e5141fb5	Fix link-to-parent-with-different-blob issue and add a test	2016-03-14 15:35:18 -04:00
Jimmy Zelinskie	ea2e17cc11	v2: send proper scopes for authorization failures Fixes #1278.	2016-03-11 13:41:38 -05:00
Jimmy Zelinskie	bb46cc933d	use kwargs for parse_repository_name	2016-03-09 16:20:28 -05:00
Jake Moshenko	fe2cd240bc	Revert "Remove old search API which is no longer in use"	2016-03-07 10:07:41 -05:00
josephschorr	57430a18b4	Merge pull request #1224 from coreos-inc/removeoldsearch Remove old search API which is no longer in use	2016-03-04 12:05:07 -05:00
Joseph Schorr	85919cbc39	Fix error when constructing DownstreamIssue exception	2016-02-25 17:45:49 -05:00
Jimmy Zelinskie	c7904db30d	v2: always send www-authn headers on unauthorized Fixes #1254.	2016-02-25 17:09:29 -05:00
Joseph Schorr	f498e92d58	Implement against new Clair paginated notification system	2016-02-25 15:58:42 -05:00
Joseph Schorr	c0374d71c9	Refactor the security worker and API calls and add a bunch of tests	2016-02-25 12:29:41 -05:00
Quentin Machu	0183c519f7	Merge pull request #1253 from Quentin-M/clair2 Adapt securityworker, secscan API and Quay UI for Clair 1.0	2016-02-19 18:21:25 -05:00
Quentin Machu	4bd5996bbf	Adapt secscan API for Clair v1.0 Squash /vulnerabilities and /packages as it basically does the same action on Clair and we don't need both for Quay	2016-02-19 17:44:23 -05:00
josephschorr	11af123ba5	Merge pull request #1244 from coreos-inc/enableaci Add UI to the setup tool for enabling ACI conversion	2016-02-17 12:29:48 -05:00
Joseph Schorr	1940fd9939	Add UI to the setup tool for enabling ACI conversion Fixes #1211	2016-02-17 12:05:48 -05:00
Joseph Schorr	8d9f3309aa	Remove internal_only from some APIs now that we expose a user admin scope Fixes #1246	2016-02-16 16:50:33 -05:00
josephschorr	e8faa9f843	Merge pull request #939 from coreos-inc/user-admin Add user admin scope	2016-02-16 16:42:29 -05:00
josephschorr	81a36ee3b8	Merge pull request #1217 from coreos-inc/v2pagination Fix V2 catalog and tag pagination	2016-02-16 15:34:49 -05:00
josephschorr	ded0a27901	Merge pull request #1242 from coreos-inc/receiptemailsbug Fix schema for invoice email updating	2016-02-16 13:26:26 -05:00
Joseph Schorr	ecaa051791	Fix schema for invoice email updating Fixes #1209	2016-02-16 11:52:57 -05:00
Jake Moshenko	6e05920d6b	Delete bad manifests from the DB	2016-02-16 11:42:19 -05:00
Joseph Schorr	4b24556cb3	Check for the parent's ID in the updated ID map. Fixes #1240	2016-02-15 11:02:52 -05:00
Joseph Schorr	69262282fe	Make sure to encode all V1 metadata strings Fixes #1239	2016-02-15 10:57:20 -05:00
Jimmy Zelinskie	70aa7cc731	Merge pull request #1230 from jzelinskie/aci-head allow HEAD on ACI images	2016-02-12 16:29:12 -05:00
Jimmy Zelinskie	2b07b6d8a9	allow HEAD on ACI images Fixes #911.	2016-02-12 16:28:44 -05:00
Jake Moshenko	6454b5aeb7	Update the layer rename PR to preserve the original manifest	2016-02-12 16:25:47 -05:00
Joseph Schorr	abd2e3c234	V1 Docker ID <-> V2 layer SHA mismatch fix Fix handling of V1 Docker ID <-> V2 layer SHA mismatch by dynamically rewriting the manifest to use new synthesized IDs for all layers above the mismatch. Also adds a bunch of tests for this and other use cases, fixes a bug around manifest digest uniqueness and fixes the 5.5 migration for MySQL.	2016-02-12 17:39:27 +02:00
Quentin Machu	5c7f2a5c16	Remove abort(500) on checksum mismatch	2016-02-11 18:32:21 -05:00
josephschorr	a9c64545fa	Merge pull request #1228 from coreos-inc/v2storagevalidation Add a check that will fail if we try to mislink V1 layers	2016-02-11 22:49:33 +02:00
josephschorr	904b2d53d2	Merge pull request #1197 from coreos-inc/webpytest Tests for endpoints/web and some small fixes	2016-02-11 22:42:43 +02:00
Joseph Schorr	27f1cc0a13	Add a check that will fail if we try to mislink V1 layers Also logs some useful information	2016-02-11 22:40:00 +02:00
Joseph Schorr	1887dc879c	Remove old search API which is no longer in use	2016-02-10 15:02:27 +02:00
Joseph Schorr	db0eab0461	Fix V2 catalog and tag pagination	2016-02-10 00:25:33 +02:00
Jimmy Zelinskie	deadd5eee3	Merge pull request #1210 from jzelinskie/torrent-life extend torrent webseed lifetime to an hour	2016-02-09 14:51:26 -05:00
Jimmy Zelinskie	463dc98a42	return an error when writing manifest v2 schema2	2016-02-09 14:42:58 -05:00
Jimmy Zelinskie	e18dacd26b	extend torrent webseed lifetime to an hour	2016-02-08 17:57:28 -05:00
Joseph Schorr	6a8331d305	Tests for endpoints/web and some small fixes	2016-02-05 09:45:25 +02:00
Joseph Schorr	534ec9cb2b	Add pagination to the repository list API to make it better for public Fixes #1166	2016-02-01 22:42:44 +02:00
Jake Moshenko	9310fe1832	Convert some flask-login user methods to properties	2016-01-29 10:36:28 -05:00
Joseph Schorr	accc576a98	Fix V1 push URL to match Docker and fix registry tests	2016-01-29 16:42:15 +02:00
Jake Moshenko	018bf8c5ad	Refactor how parsed_args are passed to methods	2016-01-26 16:27:36 -05:00
Joseph Schorr	335c8eb3a9	Add 2 day TTL to page tokens	2016-01-26 14:04:03 -05:00
Joseph Schorr	b4bddacedb	Switch to Fernet crypto as per gtank's recommendation	2016-01-26 12:50:48 -05:00
Joseph Schorr	bd0a098282	Add ID-based pagination to logs using new decorators and an encrypted token Fixes #599	2016-01-26 12:50:48 -05:00
Joseph Schorr	a03f0f1970	Fix manifest content type Fixes #1168	2016-01-25 16:39:59 -05:00
josephschorr	b081e234f8	Merge pull request #1162 from coreos-inc/publicnocredauth Fix issue with Docker 1.8.3 and pulling public repos with no creds	2016-01-25 16:07:55 -05:00
Joseph Schorr	8cd38569d6	Fix issue with Docker 1.8.3 and pulling public repos with no creds We now return the valid subset of auth scopes requested. Adds a test for this case and adds testing of all returned JWTs in the V2 login tests	2016-01-25 15:54:17 -05:00
Jimmy Zelinskie	85ae1a2a0a	Merge pull request #1161 from jzelinskie/torrenthmac misc torrent changes	2016-01-22 23:02:44 -05:00
josephschorr	566a91f003	Merge pull request #1160 from coreos-inc/dockerv2authsucks Fix Docker Auth and our V2 registry paths to support library (i.e. namespace-less) repositories.	2016-01-22 16:00:30 -05:00
Joseph Schorr	e4ffaff869	Fix Docker Auth and our V2 registry paths to support library (i.e. namespace-less) repositories. This support is placed behind a feature flag.	2016-01-22 15:54:06 -05:00
Jimmy Zelinskie	e54b86c6eb	s/TORRENT/BITTORRENT	2016-01-22 15:52:28 -05:00
josephschorr	d00db518df	Merge pull request #1153 from coreos-inc/fixtutorial Fix tutorial by properly publishing user events for V2 API	2016-01-22 12:51:47 -05:00
josephschorr	cd81d1e4f5	Merge pull request #1156 from coreos-inc/torrentverb Add support for torrenting verbs	2016-01-20 18:15:52 -05:00
Joseph Schorr	7c572fd218	Add support for torrenting verbs Fixes #1130	2016-01-20 18:15:32 -05:00
Joseph Schorr	068301ef1f	Add more debugging statements to V2 auth Also fixes a spurious return	2016-01-20 18:06:46 -05:00
Joseph Schorr	22b8a562be	Fix tutorial by properly publishing user events for V2 API Fixes #1123	2016-01-20 13:42:30 -05:00
Jake Moshenko	5f10c3f7ed	Merge pull request #1149 from jakedt/notsoswift Improve swift path computations	2016-01-15 15:54:35 -05:00
Jake Moshenko	612098b645	Use the centrally initialized storage engine for verbs in master process	2016-01-15 15:35:04 -05:00
Jake Moshenko	3071152dd1	Fix the JWK to use base64 encoded bytes	2016-01-14 10:08:35 -05:00
Jimmy Zelinskie	de750defdb	s/RSA256/RS256	2016-01-13 12:59:53 -05:00
Jimmy Zelinskie	bcdbf0301d	add cache-control headers to /keys	2016-01-12 17:58:21 -05:00
Joseph Schorr	e4da61a05d	Fix piece hash calculation	2016-01-12 17:44:19 -05:00
Jake Moshenko	8ab6c8a22d	Fix torrent hash generation to work in mixed stacks	2016-01-11 16:43:46 -05:00
Jimmy Zelinskie	d21b4adc62	remove global for get_route_data	2016-01-08 16:43:15 -05:00
Jake Moshenko	1ae101c917	Address torrent feature review comments.	2016-01-08 16:38:21 -05:00
Jimmy Zelinskie	8a924aae4a	move jwk set URI to /keys	2016-01-08 16:22:31 -05:00
Jimmy Zelinskie	559a55b1de	add lru cache to _get_route_data()	2016-01-08 16:22:17 -05:00
Jake Moshenko	b9821290f6	Merge remote-tracking branch 'upstream/master' into torrent	2016-01-08 15:43:12 -05:00
Jake Moshenko	17d3b5e204	Fix a bug with torrent calculation on duplicate v2 uploads	2016-01-08 15:08:12 -05:00
josephschorr	269bd80f53	Merge pull request #1121 from coreos-inc/typofix2 Fix typo	2016-01-08 14:30:42 -05:00
Joseph Schorr	161475baaa	Break circular dependencies introduced by importing common in verbs	2016-01-08 13:54:40 -05:00
Jimmy Zelinskie	087c6828ad	add feature.BITTORRENT and jwk set URI	2016-01-07 19:07:23 -05:00
Jimmy Zelinskie	e8c0a8355f	only check repo usage when billing enabled	2016-01-07 14:34:19 -05:00
Jimmy Zelinskie	a089b3c383	torrent: don't get user when public repo	2016-01-07 14:16:21 -05:00
Joseph Schorr	cd204d8940	Fix typo	2016-01-06 15:00:36 -05:00
Jake Moshenko	476ac8cec9	Add piece hashing to verbs generated image storages	2016-01-06 12:01:15 -05:00
Jake Moshenko	9e2b6a312a	Fix typo in method name	2016-01-06 10:59:54 -05:00
Jake Moshenko	8f80d7064b	Hash v1 uploads for torrent chunks	2016-01-05 14:43:40 -05:00
Jake Moshenko	44fcc7e44b	Fix logic when deciding whether to hash for torrent	2016-01-05 12:13:26 -05:00
Jimmy Zelinskie	0f6c77caab	s/repository/repo_name	2016-01-04 16:17:51 -05:00
Jimmy Zelinskie	c780572e69	add public/private torrent swarms	2016-01-04 16:17:51 -05:00
Jimmy Zelinskie	4cb06525a4	finish implementing torrent verb	2016-01-04 16:17:51 -05:00
Jake Moshenko	ce8fcbeaae	Update the pieces to use base64 encoded binary	2016-01-04 16:17:51 -05:00
Jake Moshenko	fe87d3c796	Hash and track layer file chunks for torrenting	2016-01-04 16:17:51 -05:00
Jimmy Zelinskie	6f6c82a217	implement torrent verb	2016-01-04 16:16:40 -05:00
josephschorr	f748d4348d	Merge pull request #1106 from coreos-inc/billingemail Add support for custom billing invoice email address	2016-01-04 14:34:30 -05:00
josephschorr	0ca01e5ae4	Merge pull request #1105 from coreos-inc/qeversion Show version number next to copyright in QE	2016-01-03 17:57:11 -05:00
Jimmy Zelinskie	a967340aad	update format_date to handle December	2016-01-01 18:59:27 -05:00
josephschorr	28eb31ed36	Merge pull request #1102 from coreos-inc/deleteimagediff Delete the image diff feature	2015-12-29 14:47:38 -05:00
josephschorr	6371f5e9be	Merge pull request #1107 from coreos-inc/errorresponsetype Switch error messages to have content type JSON	2015-12-29 12:26:35 -05:00
Joseph Schorr	31a8a0fba4	Better UX when recovering organization emails Fixes #291	2015-12-28 15:25:31 -05:00
Joseph Schorr	2f3d77157b	Switch error messages to have content type JSON Fixes #893	2015-12-28 14:17:44 -05:00
Joseph Schorr	10efa96009	Add support for custom billing invoice email address Fixes #782	2015-12-28 13:59:50 -05:00
Joseph Schorr	be61730224	Show version number next to copyright in QE Fixes #672	2015-12-28 13:27:32 -05:00
Joseph Schorr	ab166c4448	Delete the image diff feature Fixes #1077	2015-12-23 13:08:01 -05:00
Joseph Schorr	327258c83e	Add namespace to be returned by docker search Fixes #956	2015-12-17 16:38:06 -05:00
Jake Moshenko	3fda6696e5	Merge pull request #1069 from jakedt/trackhostname Trackhostname	2015-12-16 14:08:55 -05:00
Jake Moshenko	d5bebe2149	Add the hostname to mixpanel requests.	2015-12-16 13:43:31 -05:00
Jake Moshenko	766d60493f	Add the ability to blacklist v2 for specific versions	2015-12-15 18:27:10 -05:00
Joseph Schorr	ca7d36bf14	Handle empty scopes and always send the WWW-Authenticate header, as per spec Fixes #1045	2015-12-15 14:59:47 -05:00
Joseph Schorr	ea9ebb98e6	Sample repo pulls in V2 Fixes #1058	2015-12-14 17:41:16 -05:00
Joseph Schorr	54095eb5cb	Handle the common case of one chunk when calculating the uncompressed size Reference #992	2015-12-14 15:27:48 -05:00
josephschorr	1323da20e3	Merge pull request #1050 from coreos-inc/v2betterlogging Make our JWT subjects better and log using the info	2015-12-14 15:24:39 -05:00
Silas Sewell	881fd53714	Merge pull request #1056 from coreos-inc/dont-hide-ioerror Handle IOErrors in v2 uploads	2015-12-14 14:46:46 -05:00
Joseph Schorr	4a4eee5e05	Make our JWT subjects better and log using the info Fixes #1039	2015-12-14 14:00:33 -05:00
Silas Sewell	2dcc1f13a6	Handle IOErrors in v2 uploads	2015-12-14 11:58:24 -05:00
Joseph Schorr	d963f7174a	Change manifest delete to mark tag as dead and log	2015-12-10 15:45:53 -05:00
Jake Moshenko	9f13bb8960	Fix the overlap condition on resumed uploads	2015-12-10 13:14:11 -05:00
josephschorr	37dec895ce	Merge pull request #987 from coreos-inc/multimanifest Make manifest generation safe for multiple callers	2015-12-08 14:12:39 -05:00
josephschorr	6c897a7c22	Merge pull request #1035 from coreos-inc/closeforlong Close for long operation before we upload chunks	2015-12-07 14:22:29 -05:00
Joseph Schorr	bcd7f45905	Close for long operation before we upload chunks	2015-12-07 14:11:56 -05:00
Joseph Schorr	b8bd92a64f	Handle 404s on blob uploads Fixes #1033	2015-12-07 12:30:28 -05:00
Joseph Schorr	ee0eb80c8f	Fix blob content types Fixes #990	2015-12-04 16:13:58 -05:00
josephschorr	32fae5533c	Merge pull request #1022 from coreos-inc/manifestexc Only write exceptions for manifest gen when a tag exists	2015-12-04 14:32:06 -05:00
Silas Sewell	d28768f792	Make eventConfig required in create notification	2015-12-03 18:28:07 -05:00
Joseph Schorr	c324ebd7f6	Only write exceptions for manifest gen when a tag exists Fixes #1019 Currently, we just raise an exception to the logs regardless, which can make it appear as if there is an issue (when there isn't).	2015-12-03 16:04:17 -05:00
Silas Sewell	8781cf6e11	Increase nginx proxy timeout and close db before storage operation	2015-12-03 11:19:39 -05:00
Silas Sewell	664a2951cc	Don't send content-length when redirecting v2 blob Fixes #1012	2015-12-02 21:28:11 -05:00
Quentin Machu	8a539c4bc1	Fix security notification perform condition As defined in util/secscan/api.py, Critical < High < Medium < Low < Negligible < Unknown. We have to send the notification if the expected level is higher than the vulnerability level, not the opposite.	2015-11-30 13:54:34 -05:00
josephschorr	dc1f6c2d87	Merge pull request #974 from coreos-inc/derivedfix Derived image fixes	2015-11-25 11:57:16 -05:00
Joseph Schorr	6ed705be15	Make manifest generation safe for multiple callers Fixes #985	2015-11-24 18:38:29 -05:00
josephschorr	0dbd19a236	Merge pull request #976 from coreos-inc/incidentaltests Add login tests and fix scope security issue	2015-11-24 13:42:06 -05:00
Joseph Schorr	75a91f0f92	Add login tests and fix scope security issue	2015-11-24 13:39:16 -05:00
Joseph Schorr	762cd56e64	Change derived storage to be based on image Fixes #971	2015-11-24 12:44:07 -05:00
josephschorr	1eb019cd16	Merge pull request #970 from coreos-inc/disableverbcaching Disable derived image storage entirely until we fix it to be by image…	2015-11-23 23:56:51 -05:00
Joseph Schorr	5d3aa2a2b9	Disable derived image storage entirely until we fix it to be by image, not storage	2015-11-23 23:49:46 -05:00
Joseph Schorr	a0e597f957	Send Docker-Content-Digest headers on GET requests Fixes #955	2015-11-23 13:56:34 -05:00
Joseph Schorr	5c8eea2728	Log when pulls occur in V2 Fixes #958	2015-11-20 21:30:03 -05:00
Jake Moshenko	0c44949017	Return a 401 when doing a login with bad credentials	2015-11-20 18:37:52 -05:00
Joseph Schorr	b49435bfee	Fix track_and_log for grant-ed users	2015-11-19 17:41:27 -05:00
Jake Moshenko	b564492ea7	Improve the performance of fetching manifest blobs by checksum.	2015-11-19 11:01:47 -05:00
Jake Moshenko	e01f5ce06e	Re-enable squashed caching	2015-11-18 22:05:07 -05:00
Jake Moshenko	39d799b1aa	Fix anonymous repository pulls	2015-11-18 20:11:06 -05:00
Jake Moshenko	c27f91f7cf	Fix token pushes for v2 auth, tokens have no user	2015-11-18 19:18:12 -05:00
Matt Jibson	f02bb3caee	Add user admin scope Also remove unused scope decorator. fixes #890	2015-11-18 12:01:40 -05:00
Silas Sewell	f3dafd50e4	Fix squash pull after v2 merge	2015-11-17 18:25:43 -05:00
Jake Moshenko	7205bf5e7f	Merge pull request #885 from jakedt/python-registry-v2 Python registry v2 mega merge	2015-11-16 16:15:40 -05:00
Matt Jibson	d5fb8cafd4	Don't expose unnamed API operations fixes #861	2015-11-16 15:40:33 -05:00
Jake Moshenko	4cc619f4ca	Clean up v2 branch to no longer warn about readiness	2015-11-16 14:42:43 -05:00
Jake Moshenko	0459c3bc54	Merge remote-tracking branch 'upstream/master' into python-registry-v2	2015-11-16 14:22:54 -05:00
Jake Moshenko	52125bbfed	Fix gc by using the v1/v2 storage location helper everywhere	2015-11-16 14:13:37 -05:00
Joseph Schorr	32a799a067	Remove code that adds images to the image diff queue	2015-11-13 12:42:43 -05:00
Joseph Schorr	db1fae4cfc	Fix security scan endpoint status	2015-11-13 01:06:18 -05:00
Joseph Schorr	b7206a8cfc	Remove file added accidentally by merge	2015-11-12 22:03:13 -05:00
Joseph Schorr	7816b0c657	Merge master into vulnerability-tool	2015-11-12 21:52:47 -05:00
Joseph Schorr	3b3f101ea6	Vulnerability UI part 2 Fixes #860 Fixes #855	2015-11-12 16:59:36 -05:00
Jake Moshenko	44d06b0c2e	Fix v1 backward compatibility	2015-11-12 16:22:19 -05:00
Joseph Schorr	76ce63895f	New Quay Sec UI and fix some small bugs Fixes #855	2015-11-11 18:15:58 -05:00
Jake Moshenko	ab340e20ea	Merge remote-tracking branch 'upstream/master' into python-registry-v2	2015-11-11 16:41:40 -05:00
Jake Moshenko	a1ccd860e7	Merge pull request #823 from coreos-inc/phase3-11-07-2015 Phase3 11 07 2015	2015-11-11 14:22:19 -05:00
Joseph Schorr	ca7d736db2	Only send vulnerability events if the minimum priority is gte to that specified Fixes #770	2015-11-10 16:05:55 -05:00
Joseph Schorr	888ec17538	Recover by email needs to allow anon access to its endpoints	2015-11-10 15:41:19 -05:00
Jimmy Zelinskie	8e2868737b	rename secscan_endpoint and move db close to API	2015-11-10 15:22:31 -05:00
Jimmy Zelinskie	d651ea4b48	initial security notification worker	2015-11-10 15:22:30 -05:00
Silas Sewell	e826b14ca4	Merge pull request #725 from coreos-inc/setup-tool-georeplication superuser: add storage replication config	2015-11-09 17:43:38 -05:00
Silas Sewell	5000b1621c	superuser: add storage replication config	2015-11-09 17:34:22 -05:00
Joseph Schorr	a69c9e12fd	Update quay sec code to fix problems identified in previous review - Change get_repository_images_recursive to operate over a single docker image and storage uuid - Move endpoints/sec to endpoints/secscan - Change notification system to work with new Quay-sec format Fixes #768	2015-11-09 17:14:35 -05:00
Quentin Machu	16c364a90c	Rename secscan_endpoint where required, fix index and indentation	2015-11-09 15:18:42 -05:00
Matt Jibson	5d9999d1f7	Merge pull request #791 from mjibson/clear-repo-notifications Remove error notification when user deletes repos	2015-11-09 14:46:51 -05:00
Joseph Schorr	02e2bef943	Fix hardcoded priority	2015-11-09 12:51:05 -05:00
Joseph Schorr	b408cfd2cc	Ready for demo	2015-11-09 12:51:05 -05:00
Joseph Schorr	407eaae137	WIP: Towards sec demo	2015-11-09 12:50:39 -05:00
Joseph Schorr	fb3d0fa27d	Add a SecEndpoint class and move all the cert and config handling in there	2015-11-09 12:49:19 -05:00
Joseph Schorr	87c56d1caa	Add vulnerabilities and packages API to Quay Fixes #564	2015-11-09 12:49:19 -05:00
Jake Moshenko	7efa6265bf	Merge branch 'newchanges' into python-registry-v2	2015-11-06 18:24:32 -05:00
Jake Moshenko	c2fcf8bead	Merge remote-tracking branch 'upstream/phase4-11-07-2015' into python-registry-v2	2015-11-06 18:18:29 -05:00
Jake Moshenko	4314882fa0	Reverse the order of get_parent_images	2015-11-06 17:47:08 -05:00
Jake Moshenko	ad93425ead	Stop writing to v1 checksum on ImageStorage	2015-11-06 16:40:04 -05:00
Jake Moshenko	75f917f592	Stop reading the v1 checksums from storage	2015-11-06 16:17:12 -05:00
Joseph Schorr	cfa03951e1	Add a SecScanEndpoint class and move all the cert and config handling in there	2015-11-06 15:22:18 -05:00
Joseph Schorr	e4508fc0d0	Add vulnerabilities and packages API to Quay Fixes #564	2015-11-06 15:22:18 -05:00
Joseph Schorr	0f3db709ea	Add a vulnerability_found event for notice when we detect a vuln Fixes #637 Note: This PR does not actually raise the event; it merely adds support for it	2015-11-06 15:22:18 -05:00
Jake Moshenko	3d0bcbaaeb	Move v1 checksums to image and track v2 separately	2015-11-06 15:17:55 -05:00
Matt Jibson	f4b57eff96	Set and use ETag headers Also set no-cache exactly as github recommends. The removed @no_cache decorater used "Cache-Control:no-cache, no-store, must-revalidate", but just no-cache should be sufficient, and should certainly work correctly with github. See: https://github.com/github/markup/issues/224#issuecomment-48532178 fixes #712	2015-11-06 12:15:15 -05:00
Quentin Machu	da1fe7d48b	Merge pull request #790 from Quentin-M/set4O4 Define nginx v2 vhost & properly set 404 status code	2015-11-04 16:32:11 -05:00
josephschorr	11be448d75	Merge pull request #773 from coreos-inc/imageload Never load the full repo image list	2015-11-04 16:29:20 -05:00
Matt Jibson	4d81567a0c	Remove error notification when user deletes repos Also prevent duplicate notifications of that type. fixes #493	2015-11-04 16:11:15 -05:00
Joseph Schorr	4f41f79fa8	Never load the full repo image list Always make smaller queries per tag to ensure we scale better Fixes #754	2015-11-04 15:53:00 -05:00
Quentin Machu	c1fa22d9b0	Define nginx v2 vhost & properly set 404 status code Fixes #777	2015-11-04 14:56:18 -05:00
josephschorr	c3a4c36df7	Merge pull request #761 from coreos-inc/fixtoomanylogin Move decorator for TooManyLoginAttempts into general decorated module	2015-11-04 12:29:01 -05:00
Joseph Schorr	d4646e459e	Disable 404, as it is breaking V2 API checks	2015-11-04 02:47:33 -05:00
Joseph Schorr	95c47fe250	Fix layer ordering in verbs	2015-11-03 14:43:47 -05:00
Joseph Schorr	5e1cd2b2ad	Move decorator for TooManyLoginAttempts into general decorated module Currently, this is missing in gunicorn_registry which causes 500s when user logins become throttled	2015-11-03 12:16:01 -05:00
Joseph Schorr	f6a53f7cc5	Change all Quay.io references to Quay, fix tour and change logo Fixes #741	2015-11-02 14:37:48 -05:00
josephschorr	4ae940aede	Merge pull request #660 from coreos-inc/superuser Superuser Panel Improvements	2015-10-30 14:32:16 -04:00
Quentin Machu	3f35265858	Merge pull request #683 from Quentin-M/whoops-404 Add 404 page	2015-10-30 14:30:20 -04:00
Jake Moshenko	1666ac50fe	Filter down the signing key to only public portion	2015-10-26 16:40:19 -04:00
Jake Moshenko	2c10d28afc	Merge remote-tracking branch 'upstream/master' into python-registry-v2	2015-10-26 14:44:16 -04:00
Jake Moshenko	fc55730db8	Add a feature flag to advertise v2 endpoints	2015-10-26 14:20:51 -04:00
Jake Moshenko	9da64f3aba	Stop writing to deprecated columns for image data.	2015-10-24 14:45:15 -04:00
Joseph Schorr	7bac042954	Fix verbs for merged changes to image and image storage Fixes #698	2015-10-23 15:49:31 -04:00
Jimmy Zelinskie	e973289397	Revert "Revert "Merge pull request #682 from jzelinskie/revertrevert"" This reverts commit `278bc736e3`.	2015-10-23 15:26:33 -04:00
Jake Moshenko	e7a6176594	Merge remote-tracking branch 'upstream/v2-phase4' into python-registry-v2	2015-10-22 16:59:28 -04:00
Jimmy Zelinskie	278bc736e3	Revert "Merge pull request #682 from jzelinskie/revertrevert" This reverts commit `627ad25c9c`, reversing changes made to `31c392fecc`.	2015-10-22 16:02:07 -04:00
Jake Moshenko	ce94931540	Stop writing to deprecated columns for image data.	2015-10-22 12:14:39 -04:00
Quentin Machu	adb744089e	Add 404 page Fixes coreos-inc/quay#677	2015-10-21 18:40:15 -04:00
josephschorr	5dae970787	Merge pull request #681 from coreos-inc/userorg Return user orgs when making a call via OAuth	2015-10-21 16:41:43 -04:00
Joseph Schorr	5d8121e060	Return user orgs when making a call via OAuth Fixes #673	2015-10-21 16:40:31 -04:00
Jimmy Zelinskie	39cfe77d42	Revert "Merge pull request #557 from coreos-inc/revert-migration" This reverts commit `c4f938898a`, reversing changes made to `7ad2522dbe`.	2015-10-21 15:29:57 -04:00
Joseph Schorr	147b7b26b4	Fix is_public in repo list Fixes #678	2015-10-21 14:13:39 -04:00
Matt Jibson	b4554f4d14	Verify signed manifests fixes #394	2015-10-20 02:08:45 -04:00
Joseph Schorr	5941f3937c	Enable async GC for all Fixes #569	2015-10-19 14:22:41 -04:00
Joseph Schorr	d464af4cce	Add ability to update superusers via the UI Fixes #634	2015-10-16 15:41:18 -04:00
Joseph Schorr	a37b9394d9	Add org email address to orgs list	2015-10-16 15:17:51 -04:00
Joseph Schorr	ad5beab3ef	Disable superuser functions around users when not using DB auth	2015-10-16 15:14:49 -04:00
josephschorr	d3857e509f	Merge pull request #643 from coreos-inc/nullimage Check and handle NULL image_size	2015-10-15 13:26:13 -04:00
Joseph Schorr	fe79d5fb66	Check and handle NULL image_size Fixes #613	2015-10-15 13:25:54 -04:00
josephschorr	24b54f1e34	Merge pull request #615 from coreos-inc/queriesunite Unionize the mega query - It needed more performance-based benefits	2015-10-15 13:17:01 -04:00
Joseph Schorr	c9daf7d8a9	Add additional tests for repo visibility and further simplify the query for perf	2015-10-15 12:12:57 -04:00
Jimmy Zelinskie	7c1547221d	raise a 520 for any GitLab timeouts	2015-10-13 17:34:08 -04:00
Jimmy Zelinskie	9818481b08	limit logs to a maximum number of pages	2015-10-06 14:13:23 -04:00
josephschorr	3e7a95407b	Merge pull request #598 from coreos-inc/limitbadquery Prevent unlimited insane query from running and fix tests	2015-10-05 21:29:35 -04:00
Silas Sewell	c6da322ec1	Merge pull request #597 from coreos-inc/tag-validation Update tag validation	2015-10-05 21:10:55 -04:00
Silas Sewell	dd3d939b31	Update tag validation Fixes #536	2015-10-05 19:32:10 -04:00
Joseph Schorr	dd804816ba	Prevent unlimited insane query from running and fix tests Fixes #591	2015-10-05 17:11:49 -04:00
Joseph Schorr	8ca92d6828	Remove old search API and switch V1 search to use the new search system	2015-10-05 14:36:43 -04:00
Joseph Schorr	f393236c9f	Add repo name check to V2 Fixes #592	2015-10-05 14:19:52 -04:00
Joseph Schorr	d0dc8fe45d	Add endpoint security tests for the V2 endpoints Fixes #581	2015-10-02 14:01:12 -04:00
Joseph Schorr	35c35d9913	Load images and storage references in bulk during V1 synthesize Currently, we perform multiple queries for each layer, making it much slower (especially cross-region) Fixes #413	2015-09-29 17:53:39 -04:00
Joseph Schorr	f44ca79391	Add _catalog endpoint as specified by V2 API Fixes #391	2015-09-29 16:02:19 -04:00
Joseph Schorr	decdaa4c79	New tests and small fixes while comparing against the V2 spec Fixes #391	2015-09-29 15:18:48 -04:00
Silas Sewell	9000169b53	Revert "Merge pull request #491 from jakedt/migratebackp2" This reverts commit `7ad2522dbe`, reversing changes made to `a0b191ffa1`.	2015-09-28 16:09:22 -04:00
Joseph Schorr	2e694dd3f0	Move Docker V2 key to be loaded from file or generated on server load Fixes #394	2015-09-28 15:43:51 -04:00
Joseph Schorr	09f8ad695b	Fix resumable upload support and add another test	2015-09-28 12:17:17 -04:00
josephschorr	7ad2522dbe	Merge pull request #491 from jakedt/migratebackp2 Migrate image data back phase 2	2015-09-26 15:11:46 -04:00
Joseph Schorr	4dc30d6321	Remove yaml and switch to JSON because yaml is so slow	2015-09-24 16:17:42 -04:00
Joseph Schorr	a283c8d8ec	Add a check to ensure repository names are valid according to an extended set of rules. Fixes #534	2015-09-24 11:55:08 -04:00
Joseph Schorr	49b575afb6	Start refactoring of the trigger system: - Move each trigger handler into its own file - Add dictionary helper classes for easier reading and writing of dict-based data - Extract the web hook payload -> internal representation building for each trigger system - Add tests for this transformation - Remove support for Github archived-based building	2015-09-21 16:36:48 -04:00
Jake Moshenko	26cea9a07c	Merge remote-tracking branch 'upstream/master' into python-registry-v2	2015-09-17 16:16:27 -04:00
Jake Moshenko	8baacd2741	Migrate old data to new locations, read only new.	2015-09-17 15:47:13 -04:00
josephschorr	c801965626	Merge pull request #492 from coreos-inc/nofreelunch UI and API fixes for disallowing private repo count abuse	2015-09-16 17:53:11 -04:00
Silas Sewell	a8183ed87b	Sample pull_repo events	2015-09-15 18:41:48 -04:00
Joseph Schorr	fbfe7fdb54	Make change repo visibility and create repo raise a 402 when applicable We now check the user or org's subscription plan and raise a 402 if the user attempts to create/make a repo private over their limit	2015-09-15 14:33:35 -04:00
Jake Moshenko	b56de3355c	Migrate data back to Image in preparation for v2	2015-09-15 11:53:31 -04:00
Jake Moshenko	9c3ddf846f	Some fixes and tests for v2 auth Fixes #395	2015-09-10 15:38:57 -04:00
Joseph Schorr	fd3a21fba9	Add Kubernetes configuration provider which writes config to a secret Fixes #145	2015-09-10 12:19:59 -04:00
Joseph Schorr	88a04441de	Extract the config provider into its own sub-module	2015-09-10 12:19:59 -04:00
josephschorr	edef283697	Merge pull request #447 from coreos-inc/ronon Add support for Dex to Quay	2015-09-10 11:42:01 -04:00
Jimmy Zelinskie	d55ab78fbe	fix pagination of tags in API Fixes #461.	2015-09-09 15:52:21 -04:00
Joseph Schorr	c0286d1ac3	Add support for Dex to Quay Fixes #306 - Adds support for Dex as an OAuth external login provider - Adds support for OIDC in general - Extract out external logins on the JS side into a service - Add a feature flag for disabling direct login - Add support for directing to the single external login service - Does not yet support the config in the superuser tool	2015-09-04 17:05:06 -04:00
Joseph Schorr	48cf33a8c1	Add missing superuser aggregate logs endpoint Reference: `d47d28ea4e/Screen-Shot-2015-09-04-at-11-04-41.png`	2015-09-04 16:48:32 -04:00
Jake Moshenko	210ed7cf02	Merge remote-tracking branch 'upstream/master' into python-registry-v2	2015-09-04 16:32:01 -04:00
Jake Moshenko	8269d4ac90	Checkpoint implementing PATCH according to Docker	2015-09-03 16:26:02 -04:00
Joseph Schorr	42dba8655c	Fix auth and add V2 tests!	2015-09-03 12:21:21 -04:00
Matt Jibson	a821ad2b01	Return an error on failed S3 uploads The previous change to this file didn't raise the error up to stream_write, and so the complete_upload function still ran because the loop was only broken. It errored because the data was already canceled. This is better than what we had before, which was to silently fail but report success (even internally to ourselves!) on bad image upload. This means we discovered a bug where a user could have failed during image upload, but quay would write that image to the repository, potentially writing broken images to S3.	2015-09-01 15:53:32 -04:00
josephschorr	62ea4a6cf4	Merge pull request #191 from coreos-inc/carmen Add automatic storage replication	2015-09-01 15:04:36 -04:00
Joseph Schorr	724b1607d7	Add automatic storage replication Adds a worker to automatically replicate data between storages and update the database accordingly	2015-09-01 14:53:32 -04:00
Joseph Schorr	51c507d02d	Add back the ability to retrieve information for an org member directly Fixes #427	2015-08-31 16:45:24 -04:00
Jake Moshenko	398202e6fc	Implement some new methods on the storage engines.	2015-08-27 11:29:19 -04:00
josephschorr	4fa37a46d1	Merge pull request #408 from coreos-inc/python-registry-v2-notfun Change to return a proper manifest URL	2015-08-26 16:17:25 -04:00
josephschorr	9d1296da38	Merge pull request #407 from coreos-inc/python-registry-v2-pushevent Spawn the repo_push event in V2	2015-08-26 16:13:02 -04:00
Joseph Schorr	9842857b89	Change to return a proper manifest URL	2015-08-26 14:14:59 -04:00
Joseph Schorr	aa90caa97e	Spawn the repo_push event in V2 Fixes #403	2015-08-25 16:02:21 -04:00
Joseph Schorr	84458811d5	Rename wrap_with_hash to a more generic wrap_with_handler	2015-08-25 15:53:13 -04:00
Joseph Schorr	767be0798f	Fix V1 tests due to a typo Fixes #397	2015-08-25 14:31:25 -04:00
Joseph Schorr	31fdb94436	Enable rate limiting of V2 requests	2015-08-25 14:18:34 -04:00
Joseph Schorr	f2252f0726	Add a temporary multiplier for the Docker size -> uncompressed size	2015-08-25 13:49:36 -04:00
Joseph Schorr	1450b7e84c	Fix verbs support in V2	2015-08-24 12:05:09 -04:00
Joseph Schorr	cf030e2a98	Save the compressed image size on blob upload completion	2015-08-24 12:05:09 -04:00
Joseph Schorr	d246e68e68	Move shared V1/V2 code into common methods and fix verbs	2015-08-24 12:05:09 -04:00
Joseph Schorr	0e93dbb832	Fix image API for V2 images	2015-08-24 12:05:09 -04:00
Jake Moshenko	b998eca8e5	Fix the tests for registry v2 changes.	2015-08-24 11:59:12 -04:00
josephschorr	b8bfed915d	Merge pull request #382 from coreos-inc/manytags Limit the number of branches and tags loaded to 30	2015-08-21 14:36:43 -04:00
Joseph Schorr	b6502d9302	Limit the number of branches and tags loaded to 30 Fixes #380	2015-08-21 14:07:20 -04:00
Matt Jibson	2ea784cd6d	Send SSL client certs on webhook notifications This allows clients that provide a HTTPS webook endpoint a way to verify that the source of the notification came from quay.io. Needed for the kubernetes auto deployer so it can verify the request. And apparently others have also wanted this.	2015-08-19 13:53:34 -04:00
Joseph Schorr	dead054b43	Fix image API for V2 images	2015-08-19 13:35:47 -04:00
Jimmy Zelinskie	523dc912f7	Merge pull request #372 from coreos-inc/notifyui Better notifications UI	2015-08-17 17:13:24 -04:00
Jimmy Zelinskie	239f76d39f	Merge pull request #368 from coreos-inc/buildarchive Allow builds to be started with an external archive URL	2015-08-17 17:09:14 -04:00
Joseph Schorr	84276ee945	Better notifications UI Fixes #369	2015-08-17 17:08:58 -04:00
Joseph Schorr	f092c00621	Allow builds to be started with an external archive URL Fixes #114	2015-08-17 17:01:49 -04:00
Jake Moshenko	2fd1d5969e	Merge pull request #351 from mjibson/more-metrics More metrics	2015-08-17 13:09:08 -04:00
Joseph Schorr	bc4e07343e	Fix PATCH semantics due to recent API changes	2015-08-13 15:35:37 -04:00
Joseph Schorr	f50ea3329a	Fix URL scheme on the authenticate header	2015-08-13 14:44:42 -04:00
Joseph Schorr	17d3bed835	Fix small NPE in BB trigger code	2015-08-13 12:28:48 -04:00
Jake Moshenko	e1b3e9e6ae	Another huge batch of registry v2 changes Add patch support and resumeable sha Implement all actual registry methods Add a simple database generation option	2015-08-12 16:41:12 -04:00
Matt Jibson	b483209862	Wrap API and registry requests with common metric timings Record response times, codes, and rollup non-2XX responses.	2015-08-12 12:16:00 -04:00
Joseph Schorr	09bb98f161	Really fix the build trigger schema and add a test for it	2015-08-11 17:17:18 -04:00
Jimmy Zelinskie	7d6c6ba8e8	Merge pull request #316 from jzelinskie/read-tags tag history requires READ instead of WRITE	2015-08-07 13:26:04 -04:00
Joseph Schorr	7ea4c7d17e	Add missing JSON schema for 'refs' and 'branch_name' Fixes #325	2015-08-07 13:01:49 -04:00
Joseph Schorr	aab8866345	Fix accidental rename of key	2015-08-06 13:21:52 -04:00
Joseph Schorr	ea25538646	MySQL and Postgres complain about the group by, so calculate dates ourselves	2015-08-06 12:52:55 -04:00
Joseph Schorr	d34afde954	Fix logs view and API - We needed to use an engine-agnostic way to extract the days - Joining with the LogEntryKind table has horrible performance in MySQL, so do it ourselves - Limit to 50 logs per page	2015-08-05 17:47:03 -04:00
Jimmy Zelinskie	411d4e7abb	tag history requires READ instead of WRITE Fixes #315.	2015-08-05 17:09:34 -04:00
Jake Moshenko	65f982577d	Merge pull request #289 from coreos-inc/swaggerfix Fix swagger errors	2015-08-04 10:23:05 -04:00
Jimmy Zelinskie	b5b6076b4a	Merge pull request #303 from coreos-inc/docsearch Add documentation search to the main search bar	2015-08-03 17:19:48 -04:00
Joseph Schorr	8a8955d234	Add documentation search to the main search bar	2015-08-03 17:15:53 -04:00
josephschorr	f772bd0c9e	Merge pull request #300 from coreos-inc/toomanyutils Refactor the util directory to use subpackages.	2015-08-03 16:18:55 -04:00
Jake Moshenko	18100be481	Refactor the util directory to use subpackages.	2015-08-03 16:04:19 -04:00
Jimmy Zelinskie	8e6a0fbbee	Merge pull request #294 from coreos-inc/logsload Switch to using an aggregated logs query and infinite scrolling	2015-08-03 14:52:04 -04:00
Joseph Schorr	5c1d195a19	Fix swagger errors Fixes #287	2015-08-03 14:10:15 -04:00
Joseph Schorr	3d6c92901c	Switch to using an aggregated logs query and infinite scrolling This should allow users to work with large logs set. Fixes #294	2015-07-31 16:38:02 -04:00
Joseph Schorr	4160b720f9	UI and API improvements for working with large repositories - Change the tag check bar to only select the current page (by default), but allow for selecting ALL tags - Limit the number of tags compared in the visualization view to 10 - Fix the multiselect dropdown to limit itself to 10 items selected - Remove saving the selected tags in the URL, as it is too slow and overloads the URLs in Chrome when there are 1000+ tags selected - Change the images API to not return locations: By skipping the extra join and looping, it made the /images API call 10x faster (in hand tests) Fixes #292 Fixes #293	2015-07-31 16:31:29 -04:00
Joseph Schorr	a916177c16	Fix broken imports	2015-07-29 18:28:58 -04:00
Joseph Schorr	572d6ba53c	Fix broken tests	2015-07-29 14:21:29 -04:00
Joseph Schorr	11c7994398	Fix 500 on logout	2015-07-28 15:47:04 -04:00
Joseph Schorr	80e2739b41	Manually load GHE org repos if none returned by default Fixes #276	2015-07-28 14:01:22 -04:00
Joseph Schorr	5d243bb45f	Fix potential NPE	2015-07-24 12:12:30 -04:00
Joseph Schorr	c3f269ee23	Add migration for BitBucket web hooks This needs to added only after we roll out #255	2015-07-23 14:45:12 -04:00
Joseph Schorr	f6311b09fe	Fix NPE in BitBucket V2 handling code	2015-07-23 14:06:35 -04:00
Jimmy Zelinskie	fee8bf8607	Merge pull request #255 from coreos-inc/betterbb Change to use the new BitBucket webhooks	2015-07-23 13:36:07 -04:00
Joseph Schorr	3c6f13da56	Change to use the new BitBucket webhooks BitBucket has deprecated services (which will be removed in approx 6 months), and they don't even really work all that well anyway. Fixes #251	2015-07-23 12:09:17 -04:00
Jimmy Zelinskie	2c29dc048d	Merge pull request #260 from coreos-inc/githubfix GitHub api now returns ALL the visible repositories for user	2015-07-22 13:53:58 -04:00
Joseph Schorr	69ca34161c	GitHub api now returns ALL the visible repositories for user Change the code to simply filter the single list returned, rather than reloading the org repos again	2015-07-22 13:50:46 -04:00
Joseph Schorr	687bab1c05	Support invite codes for verification of email Also changes the system so we don't apply the invite until it is called explicitly from the frontend Fixes #241	2015-07-22 13:41:27 -04:00
Jake Moshenko	5d86fa80e7	Merge pull request #197 from coreos-inc/keystone Add Keystone Auth	2015-07-22 13:38:47 -04:00
Joseph Schorr	38a6b3621c	Automatically link the superuser account to federated service for auth When the user commits the configuration, if they have chosen a non-DB auth system, we now auto-link the superuser account to that auth system, to ensure they can login again after restart.	2015-07-22 13:37:23 -04:00
Joseph Schorr	a0c4e72f13	Clean up the repository list API and loads stars with it We load stars with the same list API now so that we get the extra metadata needed in the repo list (popularity and last modified)	2015-07-22 13:05:02 -04:00
Joseph Schorr	a397bb7af6	Update to new-style format	2015-07-21 15:39:23 -04:00
Joseph Schorr	60b05a0493	Fix string concats Issue found here: https://app.getsentry.com/quayio/production/group/72831901/	2015-07-21 15:04:50 -04:00
Joseph Schorr	5f2729f41f	Fix logic bug in param check	2015-07-20 17:04:06 -04:00
Jake Moshenko	679044574a	Merge pull request #231 from coreos-inc/smallfix Small API fixes	2015-07-20 13:45:24 -04:00
Joseph Schorr	33b54218cc	Refactor the users class into their own files, add a common base class for federated users and add a `verify_credentials` method which only does the verification, without the linking. We use this in the superuser verification pass	2015-07-20 11:39:59 -04:00
Jake Moshenko	f2508fb48a	Have the auth realm url computed based on the request url.	2015-07-17 11:56:15 -04:00
Jake Moshenko	bc29561f8f	Fix and templatize the logic for external JWT AuthN and registry v2 Auth. Make it explicit that the registry-v2 stuff is not ready for prime time.	2015-07-17 11:56:15 -04:00
Jake Moshenko	3efaa255e8	Accidental refactor, split out legacy.py into separate sumodules and update all call sites.	2015-07-17 11:56:15 -04:00
Jake Moshenko	bea8b9ac53	More changes for registry-v2 in python. Implement the minimal changes to the local filesystem storage driver and feed them through the distributed storage driver. Create a digest package which contains digest_tools and checksums. Fix the tests to use the new v1 endpoint locations. Fix repository.delete_instance to properly filter the generated queries to avoid most subquery deletes, but still generate them when not explicitly filtered.	2015-07-17 11:50:41 -04:00
Jake Moshenko	acbcc2e206	Start of a v2 API.	2015-07-17 11:50:41 -04:00
Joseph Schorr	7a548ea101	Fix queries for repository list popularity and action count Before this change, we used extremely inefficient outer joins as part of a single query of lookup, which was spiking our CPU usage to nearly 100% on the query. We now issue two separate queries for popularity and action account, by doing a lookup of the previously found IDs. Interestingly enough, because of the way the queries are now written, MySQL can actually do both queries directly from the indicies, which means they each occur in approx 20ms! Verified by local tests, postgres tests, and testing on staging with monitoring of our CPU usage during lookup	2015-07-17 00:08:27 +03:00
Jake Moshenko	c64e490059	Merge pull request #136 from coreos-inc/syslogviewfix Fix logs view in superuser panel	2015-07-15 18:22:23 -04:00
Jake Moshenko	f5ee7a6697	Make the scopes dynamic based on app config.	2015-07-15 18:13:15 -04:00
Joseph Schorr	f6a9afce90	Change abort to NotFound so it is properly formatted into JSON	2015-07-14 11:34:45 +03:00
Joseph Schorr	e04c22867c	Switch logs to use a single comprehension	2015-07-13 12:45:08 +03:00
Joseph Schorr	3a59c99b08	Add a secondary tab to Teams for managing org members Also adds the ability to completely remove a user from an organization (repo permissions and teams), in a single click Fixes #212	2015-07-02 17:06:36 +03:00
josephschorr	cb238f8764	Merge pull request #207 from coreos-inc/squashperm Have the fetch tag dialog show a warning for robot accounts without access	2015-07-02 10:23:14 +03:00
Jake Moshenko	ba067048d8	Merge pull request #203 from coreos-inc/encpass Add encrypted password output in the superuser API	2015-07-01 12:40:05 -04:00
Joseph Schorr	b535e222b8	Have the fetch tag dialog show a warning for robot accounts without access Before this change, we'd show the squash pulling command with the proper credentials, but it then 403s on the end user.	2015-07-01 19:37:52 +03:00
Joseph Schorr	b91b60e83d	Add encrypted password output in the superuser API When creating a user or changing their password, we now also return an encrypted form of the password, so API callers can pass it along	2015-07-01 19:29:42 +03:00
Joseph Schorr	f06fed32b8	Fix build ID key on build queued event	2015-07-01 17:48:43 +03:00
josephschorr	7aeaf2344e	Merge pull request #200 from coreos-inc/tagapilimit Add pagination support to tag history API	2015-06-30 22:09:09 +03:00
Jake Moshenko	411ddceee0	Merge pull request #195 from coreos-inc/tidy Delete all the old UI code and branches for new UI	2015-06-30 14:34:43 -04:00
Joseph Schorr	f7f10f4a6d	Add pagination support to tag history API Fixes #198	2015-06-30 19:44:43 +03:00
Joseph Schorr	87efcb9e3d	Delegated superuser API access Add a new scope for SUPERUSER that allows delegated access to the superuser endpoints. CA needs this so they can programmatically create and remove users.	2015-06-30 11:08:26 +03:00
Joseph Schorr	81bb76d3df	Fix spelling mistakes	2015-06-29 21:38:01 +03:00
Joseph Schorr	2b1bbcb579	Add a table view to the repos list page Fixes #104	2015-06-29 21:12:53 +03:00
Jimmy Zelinskie	756d6784ca	Merge pull request #192 from coreos-inc/sqlssl Allow SSL cert for the database to be configured	2015-06-29 13:33:31 -04:00
Jake Moshenko	6e6b3c675f	Merge pull request #28 from coreos-inc/swagger2 Switch to Swagger v2	2015-06-29 12:18:10 -04:00
Joseph Schorr	dc5af7496c	Allow superusers to disable user accounts	2015-06-29 18:40:52 +03:00
Jimmy Zelinskie	442cbed087	Merge pull request #186 from coreos-inc/changelog Remove container usage tab and replace with changlog view	2015-06-29 10:06:07 -04:00
Joseph Schorr	33039e9bc4	New layout cleanup: Remove second GH trigger path	2015-06-29 12:18:21 +03:00
Joseph Schorr	b8c74bbb17	Remove container usage tab and replace with changlog view Fixes #179	2015-06-29 11:07:46 +03:00
Joseph Schorr	bb07d0965f	Allow SSL cert for the database to be configured This change adds a field for the SSL cert for the database in the setup tool. Fixes #89	2015-06-29 08:08:10 +03:00
Joseph Schorr	cd5cb4b767	NPE fix	2015-06-28 10:44:58 +03:00
Joseph Schorr	07439328a4	Remove `user_exists` endpoint from all auth systems	2015-06-23 17:33:51 -04:00
Jake Moshenko	ccebba8f51	Clean up headers and whitespace.	2015-06-23 17:10:03 -04:00
Joseph Schorr	9887c9c163	Remove ability to create Quay users from the Docker CLI	2015-06-22 17:12:05 -04:00
Jimmy Zelinskie	66450d4810	Merge pull request #152 from coreos-inc/branchtag Allow manual triggering of both branches and tags	2015-06-22 15:37:03 -04:00
Joseph Schorr	ce6474c6b5	Robots API for users should not be internal-only	2015-06-22 15:14:10 -04:00
Joseph Schorr	3fb2a33ee7	Fix the API service to use the new Swagger description form	2015-06-22 15:13:26 -04:00
Joseph Schorr	143036be9c	Allow manual triggering of both branches and tags Fixes #100	2015-06-19 14:38:26 -04:00
Joseph Schorr	2c46665415	Optimize the generate_headers check to skip the permissions load when we don't need it	2015-06-19 14:02:51 -04:00
Joseph Schorr	ec22bc0662	Raise a proper deactivation exception on bad credentials	2015-06-19 13:05:42 -04:00
Jimmy Zelinskie	82287926ab	Merge pull request #140 from coreos-inc/eventinfo Add more build information to the events and have better messaging	2015-06-17 16:49:59 -04:00
Jake Moshenko	34c06b0932	Merge pull request #133 from coreos-inc/alembichealth Add health check endpoint to verify that the locally running DB revis…	2015-06-17 15:04:19 -04:00
Joseph Schorr	fe70139daa	Allow GitHub triggers to be removed if OAuth token is invalid	2015-06-17 13:25:01 -04:00
Joseph Schorr	9b974f6b80	Add more build information to the events and have better messaging Fixes #79	2015-06-16 23:16:36 -04:00
Joseph Schorr	7b94e37c95	Clarify why we use features.BILLING as the feature flag on the route	2015-06-16 17:43:02 -04:00
Joseph Schorr	48ee4671a7	Some additional fixes when testing this branch	2015-06-16 15:46:58 -04:00
Joseph Schorr	91c829bd14	Merge branch 'master' into gitfix	2015-06-16 15:18:24 -04:00
Joseph Schorr	33b31a2451	Fix logs view in superuser panel This seems to have been broken ever since we moved to syslog	2015-06-15 20:55:23 -04:00
Joseph Schorr	6e0dc1df08	Add health check endpoint to verify that the locally running DB revision matches that of the database Fixes #132	2015-06-15 15:55:30 -04:00
Jake Moshenko	860c7faf61	Merge pull request #127 from coreos-inc/vatotax Add support for custom fields in billing invoices	2015-06-12 16:51:46 -04:00
Joseph Schorr	e7fa560787	Add support for custom fields in billing invoices Customers (especially in Europe) need the ability to add Tax IDs, VAT IDs, and other custom fields to their invoices. Fixes #106	2015-06-12 16:45:01 -04:00
Joseph Schorr	da120a1ef2	Handle the case where GH auth fails on a trigger request Fixes #124	2015-06-12 16:34:13 -04:00
Joseph Schorr	88aa5a0830	Switch BitBucket code to always use the latest commit Before this change, we'd use the first commit, which could be incorrect if there are multiple commits in a single push Fixes #99	2015-06-11 14:12:01 -04:00
Joseph Schorr	44f49a43dd	Fix creation of repositories when having a creator permission This fixes the grants on a user's session when creating a repository with only the creator permission Fixes #117	2015-06-10 16:12:42 -04:00
Jake Moshenko	e09d84b3c8	Merge pull request #55 from coreos-inc/oauthdeny Fix OAuth redirect for denial action when generating for internal tokens	2015-06-05 14:00:16 -04:00
Jake Moshenko	2a2414d6af	Merge pull request #60 from coreos-inc/jwtauthentication Add support for an external JWT-based authentication system	2015-06-05 13:37:42 -04:00
Joseph Schorr	8aac3fd86e	Add support for an external JWT-based authentication system This authentication system hits two HTTP endpoints to check and verify the existence of users: Existance endpoint: GET http://endpoint/ with Authorization: Basic (username:) => Returns 200 if the username/email exists, 4 otherwise Verification endpoint: GET http://endpoint/ with Authorization: Basic (username:password) => Returns 200 and a signed JWT with the user's username and email address if the username+password validates, 4 otherwise with the body containing an optional error message The JWT produced by the endpoint must be issued with an issuer matching that configured in the config.yaml, and the audience must be "quay.io/jwtauthn". The JWT is signed using a private key and then validated on the Quay.io side with the associated public key, found as "jwt-authn.cert" in the conf/stack directory.	2015-06-05 13:20:10 -04:00
josephschorr	63f289a8cb	Merge pull request #59 from jzelinskie/custom-git-fix triggers: metadata.commit_sha -> metadata.commit	2015-06-02 16:10:26 -04:00
Joseph Schorr	477a3fdcdc	Add a test to verify that all important blueprints have all their methods decorated This ensures that we don't accidentally add a blueprint method without either explicitly blacklisting or whitelisting anonymous access	2015-06-02 15:56:44 -04:00
Jimmy Zelinskie	e01bdd4ab0	triggers: metadata.commit_sha -> metadata.commit This resolves an issue where the custom-git trigger's public facing schema was not the same as the internal metadata schema. Instead of breaking users, we rework the internal metadata schema to be the same as the custom-git JSON schema. This commit also updates everything that used `metadata.commit_sha` including the test database.	2015-06-02 15:32:28 -04:00
Joseph Schorr	075c75d031	Change to always granting a signed token if there is a valid user OR if there is valid permissions on a repository This fixes the issue whereby attempting to pull a public repository as an authenticated user with anonymous access disabled caused an unexpected 401. This change also adds tests for a few other use cases to verify we haven't broken anything.	2015-06-02 15:16:22 -04:00
Joseph Schorr	c0e995c1d4	Merge branch 'master' into nolurk	2015-06-02 13:55:16 -04:00
Jake Moshenko	42da017d69	Merge pull request #48 from coreos-inc/nobots Change API calls that expect non-robots to explicitly filter	2015-06-02 12:31:19 -04:00
Joseph Schorr	5516911de9	Fix OAuth redirect for denial action when generating for internal tokens	2015-06-02 12:25:59 -04:00
Joseph Schorr	25ee46f5a2	Fix bitbucket triggers when the branch tag filter removes all branches	2015-06-01 15:35:59 -04:00
Joseph Schorr	fdd43e2490	Change API calls that expect non-robots to explicitly filter Before this change, we'd filter in the UI but calls to the API could allow robots accounts where we only expect real users	2015-05-26 17:47:33 -04:00
Joseph Schorr	b3ea4ecaa2	Remove unneeded mime type set; jsonify does this for us	2015-05-26 17:30:10 -04:00
Joseph Schorr	9888c3ad9b	Add an endpoint for downloading the logs of a build.	2015-05-26 17:24:18 -04:00
Joseph Schorr	ecabf086ea	Add missing newline at end of decorators.py	2015-05-26 16:48:59 -04:00
Joseph Schorr	374d1d7e89	Fix case where the auth token was not written properly for BitBucket	2015-05-26 13:40:21 -04:00
Joseph Schorr	855f3a3e4d	Have the verifyUser endpoint use the same confirm_existing_user method This will prevent us from encountering the same problem as the generated encrypted password issue when using LDAP	2015-05-22 16:26:26 -04:00
Joseph Schorr	b0d763b5ff	Fix encrypted password generator to use the LDAP username, not the Quay username. Currently, we use the Quay username via `verify_user` when we go to create the encrypted password. This is only correct if Quay has not generated its own different username for the LDAP user, and fails if it has. We therefore add a new method `confirm_existing_user`, which looks up the federated login for the LDAP user and then runs the auth flow using that username.	2015-05-20 16:37:09 -04:00
Jimmy Zelinskie	7bed404302	Merge pull request #33 from coreos-inc/branchregex Add some more debug logging around bitbucket triggers and add some te…	2015-05-20 14:22:33 -04:00
Joseph Schorr	eb773e40a2	Add some more debug logging around bitbucket triggers and add some tests to verify we properly handle trigger branch filters	2015-05-20 14:18:12 -04:00
Jimmy Zelinskie	fe3f0dc10b	custom-git: accept commit SHAs 7+ chars in length	2015-05-20 12:53:43 -04:00
Joseph Schorr	54992c23b7	Add a feature flag for disabling unauthenticated access to the registry in its entirety.	2015-05-19 17:52:44 -04:00
Joseph Schorr	2379af71f8	Parse the client secret properly	2015-05-18 15:01:37 -04:00
Joseph Schorr	fb8e718c44	Fix OAuth 2 handler to support retrieving parameters from other places; various OAuth client (such as the Go library) send the values in the request body or even the Auth header	2015-05-18 12:38:39 -04:00
Joseph Schorr	0bc1c29dff	Switch the Python side to Swagger v2	2015-05-14 16:47:38 -04:00
Joseph Schorr	28bd9af4ff	Fix tutorial	2015-05-13 14:55:39 -04:00
Joseph Schorr	0e86fc80ca	Fix bitbucket trigger to use the specified branch name before the default branch	2015-05-13 13:55:44 -04:00
Joseph Schorr	3e1abba284	Add ability for super users to rename and delete organizations	2015-05-11 18:03:25 -04:00
Joseph Schorr	1c41d34b7c	Add ability for superusers to change user emails	2015-05-11 14:38:10 -04:00
Joseph Schorr	de6267700e	Fix bugs with the custom git trigger and make error reporting better	2015-05-10 13:38:47 -04:00
Joseph Schorr	f858caf6cd	Only return the team and repo permissions when listing robots when we absolutely need them.	2015-05-08 16:43:07 -04:00
Joseph Schorr	c767aafcd6	Make the repository API faster by only checking the log entries table once for each kind of entry, rather than twice. We make use of a special subquery-like syntax, which allows us to count those entries that are both 30 days only and 1 day old in the same query. This was tested successfully on MySQL, Postgres and Sqlite.	2015-05-07 22:49:11 -04:00
Joseph Schorr	3627de103c	Minimize the queries used when retrieve builds. Previously, we'd call out to SQL extra times per build.	2015-05-07 21:11:15 -04:00
Joseph Schorr	8eb9c376cd	Add constructors for the QuayDeferredPermissionUser so that we can avoid extraneous DB lookups of the user whenever we already have the object	2015-05-07 15:04:12 -04:00
Joseph Schorr	a46d367276	Remove unneeded repo filter	2015-05-06 20:55:17 -04:00
Joseph Schorr	e647d91e8b	Switch the repos page to use a single API call, rather than one per namespace + one for star repos	2015-05-06 19:15:03 -04:00
Joseph Schorr	2d83e5c7e7	Change to using the SSH url; git urls cannot be used with private repos on GitHub	2015-05-06 12:23:46 -07:00
Joseph Schorr	65d0332176	Skip bitbucket trigger if there is no commit branch and no commit tag	2015-05-05 09:40:23 -07:00
Joseph Schorr	df2883bfb6	Fix variable access error	2015-05-03 18:15:11 -07:00
Joseph Schorr	ff89cc9f1d	Fix key issue in gitlab	2015-05-03 18:08:14 -07:00
Jimmy Zelinskie	b3bf947af5	gitlab: consistent commit for _prepare_build	2015-05-03 17:58:30 -07:00
Joseph Schorr	0b990677a0	More code cleanup and fix bug around can_admin in the trigger_view	2015-05-03 11:02:05 -07:00
Joseph Schorr	d07f9f04e9	UI and code improvements to make working with the multiple SCMs easier	2015-05-03 10:38:11 -07:00
Joseph Schorr	f091aaa07e	Get basic support for GitLab working in the UI	2015-05-03 09:58:48 -07:00
Joseph Schorr	e3aededcbc	Merge branch 'master' into gitlab	2015-05-03 12:13:09 -04:00
Jimmy Zelinskie	3ac884beb4	gitlab oauth	2015-05-02 17:54:48 -04:00
Jimmy Zelinskie	7426a540dd	initial gitlab angular stuff	2015-05-02 13:31:54 -04:00
Jimmy Zelinskie	d21fbb1204	endpoints.trigger: address gitlab PR comments	2015-05-01 23:35:54 -04:00
Jimmy Zelinskie	ae83da75ce	endpoints.trigger: initial gitlab handler	2015-05-01 20:30:55 -04:00
Joseph Schorr	b8785dfc04	Fix github login to use the github auth endpoint	2015-05-01 12:58:50 -04:00
Joseph Schorr	c14368fc66	Fix typo	2015-04-30 16:47:16 -04:00
Joseph Schorr	b96e35b28c	Merge master into bitbucket	2015-04-30 15:52:08 -04:00
Joseph Schorr	b7317f894b	UI fixes for all the new trigger stuff	2015-04-30 15:33:19 -04:00
Jimmy Zelinskie	ded28f6b30	redirect ac-discovery=1 to the index This is a temp fix because rkt doesn't follow redirects.	2015-04-30 13:03:50 -04:00
Joseph Schorr	60036927c9	Really disallow usage of the same account for an org as the one being converted. Before, you could do so via email.	2015-04-29 20:30:37 -04:00
Joseph Schorr	d5c70878c5	Get build preparation working for bitbucket and do a lot of code cleanup around this process across all the triggers. Note: tests are not yet updated.	2015-04-29 17:04:52 -04:00
Jimmy Zelinskie	edd0ba4cdb	endpoints.verbs: 202 for unfinished aci sigs	2015-04-29 15:33:20 -04:00
Joseph Schorr	6479f8ddc9	Work In Progress! Get the full activation and deactivation cycle working for bitbucket.	2015-04-28 18:15:12 -04:00
Joseph Schorr	5cc91ed202	Work in progress: bitbucket support	2015-04-24 18:36:48 -04:00
Joseph Schorr	01698e8d16	Fix OAuth 500 error	2015-04-24 16:42:31 -04:00
Joseph Schorr	c480fb2105	Work in progress: bitbucket support	2015-04-24 15:13:08 -04:00
Jimmy Zelinskie	852aa33101	endpoints.trigger: activate: ret private config	2015-04-23 18:16:09 -04:00
Jimmy Zelinskie	2a13eade80	Merge pull request #22 from coreos-inc/git git's a pretty cool guy	2015-04-23 17:33:36 -04:00
Jimmy Zelinskie	aa1658f0c7	endpoints.trigger: more logical comment blocks	2015-04-23 14:02:05 -04:00
Jimmy Zelinskie	07b730c7ad	generic trigger credentials	2015-04-22 17:07:16 -04:00
Joseph Schorr	d6a1493d52	Fix build logs on Safari by having the client JS handle the redirect manually, rather than the browser itself; Safari doesn't support 302 redirects to another domain inside an XHR.	2015-04-22 15:16:59 -04:00
Jimmy Zelinskie	cfcd636cc0	only send build config to admins	2015-04-22 14:30:06 -04:00
Jimmy Zelinskie	9703850e8f	enforce short SHAs throughout build pipeline	2015-04-22 13:22:04 -04:00
Jimmy Zelinskie	133ed7190e	trigger: validate that the commit is a short SHA	2015-04-22 11:24:04 -04:00
Jimmy Zelinskie	02498d72ba	almost all PR discussion fixes	2015-04-21 18:04:25 -04:00
Joseph Schorr	f1ea20315a	Finish mobilification of org view	2015-04-20 14:00:10 -04:00
Joseph Schorr	62770674d4	Switch to a 0.5 modifier	2015-04-20 13:00:56 -04:00
Joseph Schorr	ae55b8dd0e	Make the search action not return scores of zero if there is no character matching	2015-04-20 13:00:38 -04:00
Joseph Schorr	16e05e83b1	Score based on the robot short name	2015-04-20 12:51:47 -04:00
Jimmy Zelinskie	93cd459460	Merge branch 'master' into git	2015-04-20 10:58:49 -04:00
Joseph Schorr	d1e2d072ea	Add unit tests and a stronger restriction on the revert API call	2015-04-19 15:43:16 -04:00
josephschorr	56b5d7ddfb	Merge pull request #21 from coreos-inc/greatscott Working time machine	2015-04-19 15:16:09 -04:00
Jimmy Zelinskie	ba2cb08904	Merge branch 'master' into git	2015-04-16 17:38:35 -04:00
Joseph Schorr	f19d2f684e	Add ability to revert tags via time machine	2015-04-16 17:18:00 -04:00
Joseph Schorr	3cd11c8f45	GitHub login fixes: - Allow for case insensitivity in the org name list - Remove the check for verified email addresses when under Enterprise; it isn't supported there.	2015-04-16 12:17:39 -04:00
Jimmy Zelinskie	2236270741	add webhook URL to custom trigger dialog	2015-04-16 12:06:48 -04:00
Jimmy Zelinskie	0c3becd204	endpoints.api.trigger: clarify token->write_token	2015-04-16 12:06:05 -04:00
Jimmy Zelinskie	3798c5f377	trigger: return non-json metadata	2015-04-15 17:02:53 -04:00
Jimmy Zelinskie	bd57c6a8fb	trigger: custom git payload JSON schema	2015-04-15 16:52:46 -04:00
Joseph Schorr	f8c80f7d11	Add a history view to the tags page. Next step will add the ability to revert back in time	2015-04-15 15:21:09 -04:00
Joseph Schorr	703f48f194	Add auto-redirect to user and org pages for the new layout	2015-04-10 15:35:23 -04:00
Joseph Schorr	1df025b57e	Change search to use a set of queries for repo lookup rather than a single monolithic query, in the hopes that this will make things significantly faster and actually useable. The individual queries have been tested by hand on MySQL, but the real test will be staging	2015-04-10 15:27:37 -04:00
Joseph Schorr	0be0aed17d	Move the repo sorting by pull count into the main matching query, to both make it more accurate and make the search faster	2015-04-09 14:41:59 -04:00
Joseph Schorr	396cba64e6	Fix search to return better results by searching for robots and namespaces in different queries.	2015-04-09 12:57:20 -04:00
Joseph Schorr	4f4bb05621	Fix search SQL issues	2015-04-08 17:41:08 -04:00
Jimmy Zelinskie	ed88e76843	custom trigger: tag with git sha	2015-04-08 16:56:47 -04:00
Joseph Schorr	19e25ac340	Merge branch 'master' into bing	2015-04-08 15:23:36 -04:00
Joseph Schorr	d09f2f6e22	Get the new context-sensitive new menu working	2015-04-07 18:33:43 -04:00
Joseph Schorr	40a6892a49	Add search tests	2015-04-07 14:05:12 -04:00
Joseph Schorr	1b56567268	Make sure also include teams from organizations that the user admins	2015-04-07 13:45:49 -04:00
Joseph Schorr	a34d56045f	Add scoring based on the string distance	2015-04-07 12:32:23 -04:00
Joseph Schorr	951b0cbab8	Start on new interactive search	2015-04-06 19:17:18 -04:00
Jimmy Zelinskie	c8b931609e	unsupported alert for robot selection	2015-04-06 14:53:54 -04:00
Jimmy Zelinskie	d0f5808a62	trigger: fix custom tags	2015-04-03 17:20:30 -04:00
Jimmy Zelinskie	f782764ba5	trigger: add commit_sha to json schema	2015-04-03 17:20:30 -04:00
Joseph Schorr	4cb7921c3a	Make sure to show public repos on the user and orgs pages	2015-04-03 14:55:09 -04:00
Joseph Schorr	094f91fb8b	Fix the tutorial's user events	2015-04-03 12:13:33 -04:00
Joseph Schorr	036c8e56e0	Add proper error handling when the config volume is mounted in a read-only state.	2015-04-02 18:54:09 -04:00
Joseph Schorr	f67eeee8c8	Start conversion of the user admin/view	2015-04-02 16:34:41 -04:00
Joseph Schorr	5fc8e632d6	Redo the permissions table to have different sections for users and robot accounts	2015-04-01 14:23:39 -04:00
Joseph Schorr	5cd500257d	Merge branch 'master' into orgview	2015-04-01 13:56:49 -04:00
Joseph Schorr	fde9666647	Add the team membership to the robots view	2015-04-01 13:56:30 -04:00
Joseph Schorr	1f5e6df678	- Fix tests - Add new endpoints for retrieving the repo permissions for a robot account - Have the robots list return the number of repositories for which there are permissions - Other UI fixes	2015-03-31 18:50:43 -04:00
Joseph Schorr	9018cf14eb	Better UI for the permissions table in the repository, as well as fix some other avatar issues	2015-03-31 14:36:09 -04:00
Joseph Schorr	27a9b84587	Switch avatars to be built out of CSS and only overlayed with the gravatar when a non-default exists	2015-03-30 17:55:04 -04:00
Jimmy Zelinskie	7d1d53ebcb	custom trigger: initial setup wizard	2015-03-27 17:07:06 -04:00
Jimmy Zelinskie	fba61d96dc	callbacks: add proper custom git callback	2015-03-27 11:22:07 -04:00
Joseph Schorr	384d6083c4	Make sure to conduct login after the password change now that the session will be invalidated for the user	2015-03-26 20:04:32 -04:00
Jimmy Zelinskie	998c6007cd	trigger: initial custom git trigger	2015-03-26 16:20:53 -04:00
Joseph Schorr	aaf1b23e98	Address CL concerns and switch to a real encryption system	2015-03-26 15:10:58 -04:00
Joseph Schorr	e4b659f107	Add support for encrypted client tokens via basic auth (for the docker CLI) and a feature flag to disable normal passwords	2015-03-25 18:43:12 -04:00
Joseph Schorr	2459b6b467	Start on new org view	2015-03-25 15:31:05 -04:00
Jimmy Zelinskie	cd1b003ca6	buildcomponent: handle builds without resource_key	2015-03-23 15:46:23 -04:00
Joseph Schorr	85d6500daa	Merge resistanceisfutile into master	2015-03-23 15:39:08 -04:00
Jimmy Zelinskie	d29c8d60c7	trigger: pass trigger into manual_start & handle_trigger_request	2015-03-23 12:14:47 -04:00
Joseph Schorr	049148cb87	Work in progress: new image view	2015-03-20 17:46:02 -04:00
Jimmy Zelinskie	b851986cf5	add git_url to metadata, add git to buildargs	2015-03-19 18:09:27 -04:00
Jimmy Zelinskie	f6f93e9079	consolidate everything into one GitHub trigger	2015-03-19 17:12:27 -04:00
Jimmy Zelinskie	80ae3fd310	trigger-service: specific callback URLs for GH-git	2015-03-19 15:13:03 -04:00
Jimmy Zelinskie	e1def540da	endpoints.callbacks: add github-git service URL	2015-03-19 15:07:02 -04:00
Jimmy Zelinskie	89efb9f62c	endpoints.trigger: rm unused import	2015-03-19 14:37:09 -04:00
Jimmy Zelinskie	e6a7156657	triggers: gen ssh keypair outside of activate() This keeps the private key from ever being exposed to the client.	2015-03-19 14:31:01 -04:00
Jimmy Zelinskie	5a29218c5c	Merge branch 'master' into git	2015-03-19 12:10:34 -04:00
Jimmy Zelinskie	e4ebfc95bb	endpoints.trigger: reminder to rm keys from config	2015-03-19 12:05:49 -04:00
Jimmy Zelinskie	1594b92f71	endpoints: initial github trigger that uses keys	2015-03-18 17:33:43 -04:00
Joseph Schorr	ab2331a486	Performance improvements for the repo API and the new repo UI	2015-03-18 14:47:53 -04:00
Joseph Schorr	56be893d7e	Fix Github Trigger handling when there is no committer	2015-03-17 16:54:18 -04:00
Joseph Schorr	699cb9a5da	Fix last modified date time handling for tags with no date times, and fix the sort ordering	2015-03-17 16:49:22 -04:00
Joseph Schorr	3c305beeea	Merge branch 'tagview'	2015-03-16 17:14:43 -04:00
Joseph Schorr	333e0acd6d	Add the builds tab	2015-03-13 15:34:28 -07:00

... 12 13 14 15 16 ...

2229 commits