This commit disables XSRF check for "service/token" so that when
containerd sends `POST` it will not return 403 and containerd can
fallback to `GET` to complete the workflow.
Fixes#10305
Signed-off-by: Daniel Jiang <jiangd@vmware.com>
1, Leverage go v1.13 new error feature
2, Define genernal error OCI format, so that /v2 API could return a OCI compatible error
Signed-off-by: wang yan <wangyan@vmware.com>
1. Define the controller/manager interface for artifact and tag
2. Provide a null implementation for artifact manager
Signed-off-by: Wenkai Yin <yinw@vmware.com>
This commit adds several handlers to handle registry requests, some of the handlers aren't implemented yet, will be done later
Signed-off-by: Wenkai Yin <yinw@vmware.com>
Seperate the HasAdminRole(In DB) with the privileges from external auth, and use user.HasAdminPrivilege to check
Signed-off-by: stonezdj <stonezdj@gmail.com>
1. Change parameter in Keyword Body Of Admin Push Signed Image to an
optional one.
2. Loose the restriction for Quotas error message verification.
3. Get cert for notary from API instead of local file.
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
Nigthly test case failures always caused by filter issue, as Shijun
adviced, it's better to use repository filter in the list above.
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
Add notary remove signature test case in nightly
1. Update E2E image Dockerfile for adding notary CLI;
2. Add test case of remove notary signature.
Signed-off-by: Danfeng Liu (c) <danfengl@vmware.com>
In order to replace travis.
Implement 5 CI jobs
- UTTEST
- APITEST_DB
- APITEST_LDAP
- OFFLINE
- UI_UT
Signed-off-by: Ziming Zhang <zziming@vmware.com>
* Updated doc to include Limited Guest
* Added example for limited guest.
* Updated vulnerability scanning docs for 1.10.
* Updated GC docs to reflect new position in UI
* Updated project quota doc to reflect new position in UI
* Added some doc about tag immutability
* Fixed index
* Formatting
* Added new replication endpoints
* Added project quota webhook
* Review comments from Alex
* Clarified Clair requirement for additional scanners
* Some formatting and edits in vulnerability section
* Updated tag retention doc to reflect new UI
* Updated tag immutability to reflect new UI
* New screencaps
* Updated robot accounts doc for new UI and rewrote
* Formatting
* Updated webhooks doc for new UI
* Formatting
* Updated Logs doc for new UI
* Formatting
* New screencaps
* Added tag immutability to permissions document
* Corrected immutability permissions
* Added explanation for project quotas
* Fixed typo
* Linked to new compatibility list document
* Comments from Alex
* Comments from Steven and Wang
* Removed mention of the ellipsis in project menu
* Reverting some screencaps to remove ellipsis
* Reverted log screencaps to remove ellipsis
* Minor rewording
* Fixed caps
* More cap fixing
* Added info about self-registration, rewrote db auth doc
* Attempting to document *.asc key
* Added that negligible vulnerabilities are ignored, rewrote
* Formatting
* Added scanner permissions to table
* Clarified labelling and replication
* Rewrote replication docs
* Formatting
* Typo
* Rearranged content
* Updated ASC key docs
* formatting
* Minor rewording
* Rewrote LDAP section
* minor edits
* Added OIDC groups, rewrote OIDC docs
* formatting
* Mentioned memberof for OIDC.
* Comments from steven
* Added info about insecure registries
* Added tag immutability example
* Removed UAA from install guide
* Cleaned up headers
* More clean up of headers
* Recommended not to use UAA
* Added user-generated CLI secret
* Adding stray screencap
This commits does some basic init work for supporting OCI:
1. Create the artifact and tag model
2. Create database tables
Signed-off-by: Wenkai Yin <yinw@vmware.com>
