Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								522cf68c5d 
								
							 
						 
						
							
							
								
								Lots of smaller fixes:  
							
							... 
							
							
							
							- Add the rotation_duration to the keys API
- Have the key service UI use the new rotation_duration field
- Fix notification deletion lookup path
- Add proper support for the new notification in the UI
- Only delete expired keys after 7 days (configurable)
- Fix angular digest loop
- Fix unit tests
- Regenerate initdb 
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								370ac3ecd0 
								
							 
						 
						
							
							
								
								service keys: add rotation_duration field  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								6577ac3e62 
								
							 
						 
						
							
							
								
								mv JWK-canonicalization util.security.fingerprint  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								4020ab9f55 
								
							 
						 
						
							
							
								
								service keys: delete notifications by prefix  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								08017c5111 
								
							 
						 
						
							
							
								
								Further UI updates  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								a4a01e76c0 
								
							 
						 
						
							
							
								
								Fix up the migration to include the additional changes needed  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								d19eb16b45 
								
							 
						 
						
							
							
								
								keyserver: add generate key function  
							
							... 
							
							
							
							The superuser API, initdb, and tests will all need this functionality. 
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								fb1dca4e94 
								
							 
						 
						
							
							
								
								Add API usage tests  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								11ff3e9b59 
								
							 
						 
						
							
							
								
								keys ui WIP  
							
							
							
						 
						
							2016-04-29 14:05:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								885a41e6f5 
								
							 
						 
						
							
							
								
								key server: misc fixes to make jwtproxy work  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								5cdc7812dc 
								
							 
						 
						
							
							
								
								migration.sh: update to reflect timing  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								50ad1bb6b1 
								
							 
						 
						
							
							
								
								key server: misc cleanup to get it working  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								c79bb14049 
								
							 
						 
						
							
							
								
								service keys: fix stale query  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								86df0124c1 
								
							 
						 
						
							
							
								
								service keys: join with approvals  
							
							... 
							
							
							
							Also fixes a bug where we weren't reassigning the query after adding a
WHERE. 
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								dff59b4a39 
								
							 
						 
						
							
							
								
								service key migration  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								c6b8b3ce8c 
								
							 
						 
						
							
							
								
								service_keys: s/get_keys/list_keys  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								0ec54fc70e 
								
							 
						 
						
							
							
								
								clear notifications on delete/replace service_key  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								42b5196b21 
								
							 
						 
						
							
							
								
								add notification path and use for service keys  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								f406942984 
								
							 
						 
						
							
							
								
								converging on proper rotation  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								aaf9e83278 
								
							 
						 
						
							
							
								
								basically finish superuser key api  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								35ed73e195 
								
							 
						 
						
							
							
								
								rework superuser api  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								4079dba167 
								
							 
						 
						
							
							
								
								service keys: do all the right stuff  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								6ecff950ab 
								
							 
						 
						
							
							
								
								service keys: add txs and select4update  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								499bb16306 
								
							 
						 
						
							
							
								
								service key server wip  
							
							
							
						 
						
							2016-04-29 13:38:25 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									josephschorr 
								
							 
						 
						
							
							
							
							
								
							
							
								9e88b1413d 
								
							 
						 
						
							
							
								
								Merge pull request  #1325  from coreos-inc/blobuncompressedsize  
							
							... 
							
							
							
							Fix uncompressed size for blob store and add test 
							
						 
						
							2016-04-28 13:15:33 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								7239c465bf 
								
							 
						 
						
							
							
								
								improve stale cutoff id perf ( #1392 )  
							
							
							
						 
						
							2016-04-20 15:03:06 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									josephschorr 
								
							 
						 
						
							
							
							
							
								
							
							
								b0cc55276f 
								
							 
						 
						
							
							
								
								Merge pull request  #1373  from coreos-inc/orgconvert  
							
							... 
							
							
							
							Org conversion improvements 
							
						 
						
							2016-04-19 16:16:35 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								5585e16c90 
								
							 
						 
						
							
							
								
								Merge pull request  #1356  from jzelinskie/actionlogarchive  
							
							... 
							
							
							
							logrotateworker: save to storage via userfiles 
							
						 
						
							2016-04-15 13:57:11 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								3d190b786f 
								
							 
						 
						
							
							
								
								userfiles: make handler optional  
							
							
							
						 
						
							2016-04-15 13:56:07 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								c604dbd0f6 
								
							 
						 
						
							
							
								
								Fix permissions when converting a user to an org  
							
							... 
							
							
							
							Fixes  #1366  
						
							2016-04-14 17:39:45 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								1009362d26 
								
							 
						 
						
							
							
								
								Have recovery auto-verify the user  
							
							... 
							
							
							
							Fixes  #1355  
						
							2016-04-08 13:41:16 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jake Moshenko 
								
							 
						 
						
							
							
							
							
								
							
							
								bd5b44cbd2 
								
							 
						 
						
							
							
								
								Move the sequence fixer to a separate tool which can be run  
							
							
							
						 
						
							2016-04-01 13:46:13 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									josephschorr 
								
							 
						 
						
							
							
							
							
								
							
							
								edb157c5cb 
								
							 
						 
						
							
							
								
								Merge pull request  #1294  from coreos-inc/partialperms  
							
							... 
							
							
							
							Change permissions to only load required by default 
							
						 
						
							2016-03-30 16:40:40 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								42e934d84f 
								
							 
						 
						
							
							
								
								Make notification lookup faster and fix repo pagination on Postgres  
							
							
							
						 
						
							2016-03-30 14:46:31 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								0dffdb87c9 
								
							 
						 
						
							
							
								
								Fix uncompressed size for blob store and add test  
							
							
							
						 
						
							2016-03-29 14:16:56 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								a3aa4592cf 
								
							 
						 
						
							
							
								
								Change permissions to only load required by default  
							
							... 
							
							
							
							Permissions now load just the namespace and/or repository permissions requested, with a fallback to a full permissions load if necessary. 
							
						 
						
							2016-03-28 16:33:32 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jake Moshenko 
								
							 
						 
						
							
							
							
							
								
							
							
								eed07722cb 
								
							 
						 
						
							
							
								
								Add even larger plans for enterprises on SaaS  
							
							
							
						 
						
							2016-03-21 16:38:34 -04:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jake Moshenko 
								
							 
						 
						
							
							
							
							
								
							
							
								fe2cd240bc 
								
							 
						 
						
							
							
								
								Revert "Remove old search API which is no longer in use"  
							
							
							
						 
						
							2016-03-07 10:07:41 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								b5d904f373 
								
							 
						 
						
							
							
								
								Merge pull request  #1218  from jzelinskie/logrotate5ever  
							
							... 
							
							
							
							vastly simplify log rotation 
							
						 
						
							2016-03-04 13:48:21 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									josephschorr 
								
							 
						 
						
							
							
							
							
								
							
							
								57430a18b4 
								
							 
						 
						
							
							
								
								Merge pull request  #1224  from coreos-inc/removeoldsearch  
							
							... 
							
							
							
							Remove old search API which is no longer in use 
							
						 
						
							2016-03-04 12:05:07 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								f498e92d58 
								
							 
						 
						
							
							
								
								Implement against new Clair paginated notification system  
							
							
							
						 
						
							2016-02-25 15:58:42 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								c0374d71c9 
								
							 
						 
						
							
							
								
								Refactor the security worker and API calls and add a bunch of tests  
							
							
							
						 
						
							2016-02-25 12:29:41 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Quentin Machu 
								
							 
						 
						
							
							
							
							
								
							
							
								0183c519f7 
								
							 
						 
						
							
							
								
								Merge pull request  #1253  from Quentin-M/clair2  
							
							... 
							
							
							
							Adapt securityworker, secscan API and Quay UI for Clair 1.0 
							
						 
						
							2016-02-19 18:21:25 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Quentin Machu 
								
							 
						 
						
							
							
							
							
								
							
							
								e5da33578c 
								
							 
						 
						
							
							
								
								Adapt security worker for Clair v1.0 (except notifications)  
							
							
							
						 
						
							2016-02-19 17:44:14 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								abd2e3c234 
								
							 
						 
						
							
							
								
								V1 Docker ID <-> V2 layer SHA mismatch fix  
							
							... 
							
							
							
							Fix handling of V1 Docker ID <-> V2 layer SHA mismatch by dynamically rewriting the manifest to use new synthesized IDs for all layers above the mismatch. Also adds a bunch of tests for this and other use cases, fixes a bug around manifest digest uniqueness and fixes the 5.5 migration for MySQL. 
							
						 
						
							2016-02-12 17:39:27 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									josephschorr 
								
							 
						 
						
							
							
							
							
								
							
							
								a9c64545fa 
								
							 
						 
						
							
							
								
								Merge pull request  #1228  from coreos-inc/v2storagevalidation  
							
							... 
							
							
							
							Add a check that will fail if we try to mislink V1 layers 
							
						 
						
							2016-02-11 22:49:33 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								27f1cc0a13 
								
							 
						 
						
							
							
								
								Add a check that will fail if we try to mislink V1 layers  
							
							... 
							
							
							
							Also logs some useful information 
							
						 
						
							2016-02-11 22:40:00 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jake Moshenko 
								
							 
						 
						
							
							
							
							
								
							
							
								59a6f5bc77 
								
							 
						 
						
							
							
								
								Replace incompatible MySQL 5.5 server_default  
							
							
							
						 
						
							2016-02-11 15:07:16 -05:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Joseph Schorr 
								
							 
						 
						
							
							
							
							
								
							
							
								1887dc879c 
								
							 
						 
						
							
							
								
								Remove old search API which is no longer in use  
							
							
							
						 
						
							2016-02-10 15:02:27 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jimmy Zelinskie 
								
							 
						 
						
							
							
							
							
								
							
							
								ee705fe7a9 
								
							 
						 
						
							
							
								
								vastly simplify log rotation  
							
							
							
						 
						
							2016-02-09 18:20:14 -05:00