docker/docs
1
0
Fork 0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00
Code Activity
1,911 Commits 92 Branches 28 Tags
2699ced85e59f1793b9b175d9060dc8be495d708
Commit Graph

458 Commits

Author SHA1 Message Date
David Lawrence
61ac085a26 Merge pull request #709 from docker/passphrase-caching-delegation 
Be less strict for password caching for delegation keys
 2016-05-05 17:03:15 -07:00
David Lawrence
905736adc7 Merge pull request #708 from docker/signer-rethink-cleanup 
Allow for configurable notary signer db name, check allowed backends
 2016-05-05 15:29:00 -07:00
David Lawrence
3dd79962fa Merge pull request #715 from docker/rethink-bump 
Update RethinkDB to 2.3.0, gorethink to v2
 2016-05-05 11:39:58 -07:00
David Lawrence
be2020b484 Merge pull request #719 from docker/rethink-client-certs 
Add client key and cert to rethink client tls config
 2016-05-05 11:30:13 -07:00
Riyaz Faizullabhoy
29e65f6d9a Add client key and cert to rethink client tls config 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-05-04 20:49:31 -07:00
Liron Levin
f5ce3d1eb0 Enable providing username/password for read operations 
Currently notary fails to authenticate private Docker repositories.
That is, notary fetch a token from `auth.docker.io` but receives 401
(since basic authentication is required to fetch the bearer token for
private Docker repositories).

Since the `AuthenticationHandler` succeed, we must retry the entire flow
with a different handler.

Signed-off-by: Liron Levin <liron@twistlock.com>
 2016-05-04 19:43:45 +03:00
Riyaz Faizullabhoy
6bd4f94199 add positive test for passphrase caching 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-05-03 18:10:48 -07:00
Riyaz Faizullabhoy
d08ecc770f Update RethinkDB to 2.3.0, gorethink to v2 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-05-03 15:47:30 -07:00
Riyaz Faizullabhoy
46a37c0fa7 Allow for password caching for delegation keys with non-delegation PEM names 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-05-02 10:28:54 -07:00
Riyaz Faizullabhoy
5659554801 Allow for configurable notary signer db name, actually check allowed backends on setup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-05-02 10:11:01 -07:00
HuKeping
5c2faf0da8 Docs: update some tips and comments 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-28 09:27:05 +08:00
Riyaz Faizullabhoy
01bbd532c6 Update update logic to error out on corrupted previous root metadata 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-26 16:59:22 -07:00
Ying Li
be82a0a5f4 Merge pull request #687 from cyli/error-refactor 
Remove a redundant ErrChecksumMismatch error in tuf/client
 2016-04-20 16:57:01 -07:00
Ying Li
053c2a5a79 Remove a redundant ErrChecksumMismatch error in tuf/client, since we 
already have a ErrMismatchedChecksum in tuf/data/errors.

Also, have the CheckHashes function take a role name so that the
ErrMismatchedChecksum error can include the role name.

Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-20 11:08:03 -07:00
HuKeping
be03c1a9dc Add some test 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:48:02 +08:00
HuKeping
b3686803c1 Pass to components exactly what they want instead of using global variable 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:46:23 +08:00
HuKeping
3f1806d70b Move helper function bootstrap to its own file 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:28:59 +08:00
HuKeping
ae889ad37a Move the configuration for TLS to its own file. 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:25:17 +08:00
HuKeping
8725f6a4c7 Move the configuration for API servers to its own file. 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:18:02 +08:00
HuKeping
3501c0edf5 Move the setUpCryptoservices to its own file. 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 20:06:51 +08:00
HuKeping
a80c539ce8 Move the passphraseRetriever to its own file. 
Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 19:42:38 +08:00
HuKeping
dc147d12c4 Add a source file to hold the configuration things for signer 
Let's name it config.go

Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-20 19:42:38 +08:00
Ying Li
1367311d41 Update client warning to be more clear about why you need to keep your root key past initial root rotation. 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-19 15:14:14 -07:00
Ying Li
0f5a40e591 Use askConfirm rather than processing 'yes' or 'no' input manually everywhere. 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-19 15:14:14 -07:00
Ying Li
2c26ccb118 Warn users before they rotate the root key with the CLI 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-19 15:14:14 -07:00
Riyaz Faizullabhoy
8d357d44cd Error unit tests for bad cli input, include trustpinning merge 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 13:59:58 -07:00
Riyaz Faizullabhoy
26c1ce1865 Include addhash command in config and insufficient arg tests 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 13:39:26 -07:00
Riyaz Faizullabhoy
1abf013e69 Add positive integration test 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 13:39:26 -07:00
Riyaz Faizullabhoy
2f7d8f9774 addhash command with multihash functionality 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 13:39:26 -07:00
Riyaz Faizullabhoy
94a2e3a741 Change config to disable_tofu instead of tofu 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:56 -07:00
Riyaz Faizullabhoy
8c9424f051 Allow for multiple pinned certs per gun 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
60faca0661 Use most specific CA prefix for pinning 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
c2f5753630 Update CA pinning logic to include intermediates, add positive test case 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
2d065f241d Change config parsing, add helpers to clean up config usage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
7d6fdc08cd Update function description for expected behavior, groundwork for config 
in validation

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:54 -07:00
David Lawrence
3e5d6d1f31 review from Hukeping 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-18 20:57:45 -07:00
Riyaz Faizullabhoy
b04a5c00e0 Add more tests and restructure 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-15 10:25:22 -07:00
Riyaz Faizullabhoy
f3854dc390 Add unit tests, remove auth key, cleanup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:05 -07:00
David Lawrence
92c17b754c make notary-signer tests work and add test for signer bootstrap 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:04 -07:00
David Lawrence
33f5255c8d need a passthrough bootstrap on TufMetaStore 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
67d1847cb3 Remove authkey usage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
d86227642a Add bootstrapper for signer 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
d95891e54f Caching logic for TufMetaStorage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:02 -07:00
David Lawrence
b196a803e2 updating use of indices and queries 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:02 -07:00
Riyaz Faizullabhoy
30f356f940 Use consistent meta storage for server binary 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:02 -07:00
Riyaz Faizullabhoy
f8a67f8af0 Add rethink init for signer config 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:02 -07:00
David Lawrence
b8c62731a6 adding bootstrapping and config update for notary server 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:02 -07:00
David Lawrence
045721250f rethink server implementation 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:02 -07:00
Ying Li
cea46f7c3e Change root cert rotation to be root key rotation instead 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-13 22:12:53 -07:00
Ying Li
54d1cb1855 Revert "Implement new (notary cert rotate) command." 
This reverts commit 684c17867740e77460f2940d3d76023f7a9647ed, and extra cert rotate test changes

Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-13 11:48:36 -07:00