docker/docs
1
0
Fork 0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00
Code Activity
1,800 Commits 92 Branches 28 Tags
4c52b3801ff75f28fa4afceddc3736163dab2582
Commit Graph

1800 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
David Lawrence
4c52b3801f Merge pull request #685 from docker/docs-update 
Update doc diagrams
 2016-04-19 13:49:03 -07:00
Riyaz Faizullabhoy
a840012e88 Merge pull request #624 from docker/trust-pinning 
Trust pinning configuration
 2016-04-19 13:38:51 -07:00
Riyaz Faizullabhoy
ab4751d4a7 Check that leaf cert is first in bundle 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:47:19 -07:00
Ying Li
5576e01649 Use cdn.rawgit.com links for doc svgs rather than relative links 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-19 11:16:30 -07:00
Riyaz Faizullabhoy
26a95ef5a3 Handle cert bundles as key IDs 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:56 -07:00
David Lawrence
4776700215 add test for using a pinned cert ID when the root Public field has a bundle with intermediates 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-19 11:01:56 -07:00
Riyaz Faizullabhoy
94a2e3a741 Change config to disable_tofu instead of tofu 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:56 -07:00
Riyaz Faizullabhoy
8c9424f051 Allow for multiple pinned certs per gun 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
bbf51108c0 Rename certs package to trustpinning 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
60faca0661 Use most specific CA prefix for pinning 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
86d9e081fb Refactor initialization for trust pinning, intermediate cert handling 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
b5534779df Include trust pinning flow diagram 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
df3bd7dba6 Refactor out trust pinning check 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
c2f5753630 Update CA pinning logic to include intermediates, add positive test case 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
2d065f241d Change config parsing, add helpers to clean up config usage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
043f84aa62 Documentation for config, clean up tests 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:55 -07:00
Riyaz Faizullabhoy
7d6fdc08cd Update function description for expected behavior, groundwork for config 
in validation

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-19 11:01:54 -07:00
Ying Li
09f8171708 Update the diagrams to label the client, server, signer, and DBs 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-19 10:58:41 -07:00
David Lawrence
b8c005c304 Merge pull request #647 from docker/rethinkdb 
Rethinkdb support for server+signer
 2016-04-19 10:51:17 -07:00
David Lawrence
ae133606ad pass checksum to GetOrCreateSnapshot. One timestamp test now obsolete as we always regenerate a timestamp when regenerating a snapshot, other test has one error change because we now look for an explicit checksum, hence writing incorrect data to DB for the snapshot results in a rather than a 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-18 22:07:11 -07:00
David Lawrence
3e5d6d1f31 review from Hukeping 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-18 20:57:45 -07:00
Riyaz Faizullabhoy
db2e625341 Transaction-logic for rethink 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-18 17:41:06 -07:00
Riyaz Faizullabhoy
db5d1b6fb8 Write ack and read mode for linearizability on tuf_files table 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-18 15:06:29 -07:00
Riyaz Faizullabhoy
4385f46d90 Fix compose indentation for rdb3 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-18 14:34:21 -07:00
Riyaz Faizullabhoy
9bab389db1 Allow for tls CA file to have path relative to config for consistency 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-18 09:51:41 -07:00
Riyaz Faizullabhoy
b04a5c00e0 Add more tests and restructure 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-15 10:25:22 -07:00
Riyaz Faizullabhoy
f3854dc390 Add unit tests, remove auth key, cleanup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:05 -07:00
Riyaz Faizullabhoy
11a4a060a6 Use 3 rethink db containers for high availability 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:05 -07:00
Riyaz Faizullabhoy
309096e2fa Make integration test compose file configurable 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:05 -07:00
Riyaz Faizullabhoy
cb86cf5d1a Add additional check and cleanups to integration test 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
David Lawrence
edef1cd5c8 tweaking consistent store tests 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:04 -07:00
David Lawrence
92c17b754c make notary-signer tests work and add test for signer bootstrap 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
5d8bcee97b Update migration syntax, add integration test for rethink 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
7f615da94f Fix signer rethink health check query 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
b11a0b9f42 Fix docker compose commands for rethink migration 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
29e5b7d449 Add docstrings to fix lint 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
0088233c93 Fix get key queries in signer 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
97dcdaf91f Use explicit string slices for secondary index lookup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:04 -07:00
Riyaz Faizullabhoy
01a988a817 Empty result handling, and err checking 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:03 -07:00
David Lawrence
6ace616c34 bugfixes for rethink integration 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
David Lawrence
fbe14c1a35 rethinkdb doesn't actually support composite primary keys 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
David Lawrence
33f5255c8d need a passthrough bootstrap on TufMetaStore 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
David Lawrence
227092b942 tweak how we do service aliasing, doesn't appear to work in anymore 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
67d1847cb3 Remove authkey usage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:03 -07:00
David Lawrence
66d6b347d8 cert fixtures for rethink 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
David Lawrence
db9fbc3e4b adding rethink compose setup 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
d86227642a Add bootstrapper for signer 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:03 -07:00
Riyaz Faizullabhoy
ee02a50e31 Add privatekeys table to bootstrapping, some cleanup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:02 -07:00
Riyaz Faizullabhoy
d95891e54f Caching logic for TufMetaStorage 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-14 19:38:02 -07:00
David Lawrence
b196a803e2 updating use of indices and queries 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2016-04-14 19:38:02 -07:00