Commit Graph

9444 Commits

Author SHA1 Message Date
DQ
def4f4af52 Fix: chart repo response code inconsistent
Response code should consistent whether namespace is existed or not

Signed-off-by: DQ <dengq@vmware.com>
2020-06-11 12:22:24 +08:00
Will Sun
81e07f45fb
Merge pull request #12193 from AllForNothing/release-2.0.0
[Cherry-pick]Fix UI issues with label target 2.0.1
2020-06-11 12:03:12 +08:00
AllForNothing
eee35d947d Fix UI issues with label target 2.0.1
Signed-off-by: AllForNothing <sshijun@vmware.com>
2020-06-11 11:31:45 +08:00
Yogi_Wang
d3629f036b [fix][ui] about dialog Icon cutoff in safari
fix #12144
env 10.78.96.167
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2020-06-11 10:19:48 +08:00
Daniel Jiang
810dfa51a4
Merge pull request #12201 from reasonerjt/unknown-serverity-lower-2.0
Lower the severity of a "Unknown" vulnerability
2020-06-10 20:29:51 +08:00
jwangyangls
fab5e060a6
Merge pull request #12198 from jwangyangls/popup-unauthorized-2.0.0
[cherry-pick][fix][unauthorized] Support show relogin when unauthorized  in popup modal
2020-06-10 15:30:31 +08:00
Daniel Jiang
88233881cc Lower the severity of a "Unknown" vulnerability
This commit lower the actual severity of "Unknown" vulnerability to the
same level of "None"

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2020-06-10 15:26:52 +08:00
Yogi_Wang
1923c4ea33 [fix][unauthorized] Support show relogin when unauthorized in popup modal
1.support show relogin when unauthorized  in popup modali
2.change change member role error handle
3.change helm chart service error handle
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2020-06-10 14:04:10 +08:00
Daniel Jiang
df82d5fe81
Change status code for projects API (#12185)
Update to projects API so it will not differentiate if a project
does not exist or the user doesn't have permission to access it.

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2020-06-09 20:03:41 +08:00
Daniel Jiang
6a65b27c19
Merge pull request #12184 from AllForNothing/release-2.0.0
[Cherry-pick]Remove test button for webhook
2020-06-09 14:51:24 +08:00
AllForNothing
1577932348 Remove test button for webhook
Signed-off-by: AllForNothing <sshijun@vmware.com>
2020-06-09 08:42:12 +08:00
Daniel Pacak
0187ccf174 fix(trivy): Bump up Trivy adapter to v0.11.0
This commit bumps up Trivy to resolve the following issues reported
in the aquasecurity/harbor-scanner-trivy repository:

- https://github.com/aquasecurity/harbor-scanner-trivy/issues/114
- https://github.com/aquasecurity/harbor-scanner-trivy/issues/108

Note that this adapter vendors in Trivy v0.9.0 which has changed
the algorithm for qualifying severities. Previous versions of Trivy
preferred NVD scores, whereas this version will use vendor score
whenever it's possible.

We believe it's more suitable approach for qualifying severities.
Even though this change might impact vulnerability summaries in
some cases, the total number of vulnerabilities should stay the
same.

Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
2020-06-08 11:48:37 +02:00
Steven Zou
d5120602d3
Merge pull request #12159 from danielpacak/fix/issue_11964/trivy_handle_unknown_os_cherry_pick_v2.0.0
[cherry-pick]: fix(trivy): Handle gracefully scratch and slim images
2020-06-08 17:13:10 +08:00
Daniel Jiang
b507999ca4
Merge pull request #12164 from reasonerjt/disable-webhook-test-2.0
Remove the API to test a webhook - Cherry pick to 2.0 branch
2020-06-05 18:13:55 +08:00
Daniel Jiang
ce597acfb9 Remove the API to test a webhook
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2020-06-05 13:46:42 +08:00
Daniel Pacak
7bfaeedd16 fix(trivy): Handle gracefully scratch and slim images
This commit bumps up Trivy to 0.7.0 and Trivy adapter service to 0.10.0
in order to handle scratch and slim images, for which we cannot detect
the underlying operating system.

Resolves: #11964

Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>
2020-06-05 00:31:11 +02:00
Steven Zou
55198593bc
Merge pull request #12128 from steven-zou/fix/js_stop_job_issue_2.0
fix(jobservice):mismatch status issue when stopping job
2020-06-03 21:03:23 +08:00
Steven Zou
6453843f84 fix(jobservice):mismatch status issue when stopping job
CHERRY_PICK to 2.0

- returnning nil instead of error when trying to stop a job that has been in the final status(Error/Success/Stopped)
- do enhancements to the periodic job unschedule func
- fix a UT nil ptr issue

Signed-off-by: Steven Zou <szou@vmware.com>
2020-06-03 18:21:47 +08:00
Will Sun
b6aaf425ac
Merge pull request #12108 from AllForNothing/release-2.0.0
[Cherry-pick]Fix bugs with label 'target 2.0.1'
2020-06-03 14:53:01 +08:00
AllForNothing
281cdb9943 Fix bugs with label 'target 2.0.1'
Signed-off-by: AllForNothing <sshijun@vmware.com>
2020-06-03 11:30:20 +08:00
Qian Deng
6d0b3516fb
Merge pull request #12076 from ninjadq/add_timeout_in_nginx_config_2_0
Add timeout on nginx configs
2020-06-03 06:57:46 +08:00
jwangyangls
d324eb00d4
Merge pull request #12119 from jwangyangls/fix-issue-add-label-2.0.1
[cherry-pick][fix]   issue in front ui 2.0.1
2020-06-02 16:36:30 +08:00
Yogi_Wang
d152652c33 [fix] issue in front ui 2.0.1
1.fix add label issue
2.fix unauthorized user can contrl page
Signed-off-by: Yogi_Wang <yawang@vmware.com>
2020-06-02 15:50:25 +08:00
Daniel Jiang
03cd758aad
Merge pull request #12044 from wy65701436/release-2.0.0-clair
Update Clair to v2.1.3
2020-06-02 10:26:52 +08:00
Daniel Jiang
537ede9a9d
Merge pull request #12105 from reasonerjt/fix-pgsql-healthcheck-2.0
Update health check script for harbor-db (#12103) - cherrypick to 2.0
2020-06-01 15:24:21 +08:00
Daniel Jiang
700a027eb8 Update health check script for harbor-db (#12103)
This patch remove the trailing space of the hostname introduced by
`hostname -i`.

The trailing space will cause resolution error after this patch is
applied to glibc in photon:
https://github.com/vmware/photon/blob/2.0/SPECS/glibc/glibc-fix-CVE-2019-10739.patch

Signed-off-by: Daniel Jiang <jiangd@vmware.com>
2020-06-01 11:09:48 +08:00
Daniel Jiang
05484695ca
Merge pull request #12073 from ninjadq/upgrade_chart_museum_version_2_0
Enhance: Upgrade chartmuseum version
2020-06-01 11:00:12 +08:00
Wenkai Yin(尹文开)
351dc1a82e
Merge pull request #12097 from chlins/cherry-pick/replication-pull-blob-content-length
[CHERRY-PICK]fix(replication): ignore the problem of not getting Content-Length fr…
2020-05-29 16:53:05 +08:00
chlins
b70c952983 fix(replication): ignore the problem of not getting Content-Length from the pull blob api
Signed-off-by: chlins <chlins.zhang@gmail.com>
2020-05-29 11:47:21 +08:00
He Weiwei
110c32ca39
Merge pull request #12083 from heww/fix-issue-11951-in-2.0.x
[Cherry pick]fix(cve-whitelist): fix panic in `Get` method of whitelist manager
2020-05-28 15:22:55 +08:00
He Weiwei
ebde7b1bb6 fix(cve-whitelist): fix panic in Get method of whitelist manager
Closes #11951

Signed-off-by: He Weiwei <hweiwei@vmware.com>
2020-05-27 14:09:11 +00:00
DQ
56ecb77462 Add timount on nginx configs
set timeout to 900

Signed-off-by: DQ <dengq@vmware.com>
2020-05-27 17:50:36 +08:00
DQ
a380904288 Enhance: Upgrade chartmuseum version
Upgrade chartmuseum version 0.12.0

Signed-off-by: DQ <dengq@vmware.com>
2020-05-27 16:10:46 +08:00
Leo Le Bouter
d9a4f278dd Update Clair to v2.1.3
This release adds ubuntu support for newer releases and fixes an issue where RHEL updaters bailed to quickly.

https://github.com/quay/clair/releases/tag/v2.1.3
Signed-off-by: Leo Le Bouter <leo.lebouter-ext@aphp.fr>
2020-05-26 15:57:52 +08:00
danfengliu
2856dcc140
Merge pull request #11942 from danfengliu/cherry-pick-2.0-updata-nightly-tests
Enhance verificaton for tag retention pytest
2020-05-20 11:08:22 +08:00
Maosheng Ren
99112b8caa
Merge pull request #11968 from steven-zou/fix/broken_readme
doc(readme):update readme to fix broken content
2020-05-19 14:20:58 +08:00
Steven Zou
dcd07516b8 doc(readme):update readme to fix broken content
- add architecture section
- update API section
- remove additional tools section
- update compatibility list section
- update the relevant compatibility list document
- update broken image paths in readme

Signed-off-by: Steven Zou <szou@vmware.com>
2020-05-19 11:51:01 +08:00
Michael Michael
b9c7cc8747
Merge pull request #11958 from xaleeks/cherry-pick-sth
fixed install guide broken link in readme
2020-05-17 04:35:47 -05:00
xaleeks
09dc45298c fixed install guide broken link in readme
Signed-off-by:  xaleeks <xalex@vmware.com>
Signed-off-by: xaleeks <xalex@vmware.com>
2020-05-17 05:27:47 -04:00
danfengliu
ff616c02da Enhance verificaton for tag retention pytest
1. Modify scan related keywords, some of keywords are not effective.

Signed-off-by: danfengliu <danfengl@vmware.com>
2020-05-15 15:26:37 +08:00
He Weiwei
787f664961
Merge pull request #11928 from heww/cherry-pick-pr-11927
[Cherry pick]docs(scan): fix broken image link for limited successful status
2020-05-14 12:10:37 +08:00
He Weiwei
27a1aa7bd3 docs(scan): fix broken image link for limited successful status
Signed-off-by: He Weiwei <hweiwei@vmware.com>
2020-05-14 03:20:50 +00:00
xaleeks
f9f1d574b8
Merge pull request #11923 from steven-zou/doc/add_arch_diagram
doc(arch):add 2.0 arch diagram
2020-05-13 21:32:09 -04:00
Steven Zou
67b0da33c2 doc(arch):add 2.0 arch diagram
Signed-off-by: Steven Zou <szou@vmware.com>
2020-05-13 23:22:01 +08:00
He Weiwei
ceae393978
Merge pull request #11920 from heww/cherry-pick-pr-11897
[Cherry pick]docs(scan): add docs about image index scanning
2020-05-13 20:20:36 +08:00
He Weiwei
f79c199804
Merge pull request #11919 from heww/cherry-pick-pr-11902
[Cherry pick]docs(helm-chart): add docs for OCI-compatible helm charts
2020-05-13 20:20:21 +08:00
He Weiwei
0e85719868
Merge pull request #11921 from heww/cherry-pick-pr-11916
[Cherry pick]docs(configurtions): add docs for configurations of trivy scanner
2020-05-13 20:20:09 +08:00
Wang Yan
ffc3869aaa
update document of tag immutability for v2.0.0 (#11918)
Signed-off-by: wang yan <wangyan@vmware.com>
2020-05-13 20:04:18 +08:00
Qian Deng
ebcd7593ff
Merge pull request #11899 from ninjadq/release-2.0.0
[cherry pick] Add doc for internal tls
2020-05-13 20:01:41 +08:00
DQ
1aa6af69fb Add doc for internal tls
1. Add md file
2. Update index

Signed-off-by: DQ <dengq@vmware.com>
2020-05-13 19:29:56 +08:00