1
0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00
Commit Graph

1924 Commits

Author SHA1 Message Date
David Lawrence
658a25c4ef Merge pull request #724 from HuKeping/cli
Feature: Introduce some flags on notary verify
2016-05-10 09:04:40 -07:00
David Lawrence
90d767b27c Merge pull request #728 from twistlock/automate_password
Enable using notary client list op with user name/passwords in scripts
2016-05-10 09:01:35 -07:00
Liron Levin
019b4b02e1 Add is terminal check to tuf.go (enable using notary client with username/passwords in scripts)
Same behavior as `/passphrase/passphrase.go` (line 104)

Signed-off-by: Liron Levin <liron@twistlock.com>
2016-05-10 10:46:13 +03:00
HuKeping
31a5ebcf4b From riyazdf's review
Prior to this patch, if we provide a value to the output flag, we
write both to the file as well as stdout which is not consistent
with the flag description and also not the intended.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
HuKeping
0f5d22f95f Add test for those helper functions
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
HuKeping
3b2d9e969f Add a file to keep all the helper functions
To prevent the tuf.go growing even more bigger, and refactor some code.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
HuKeping
747a296e86 Introduce flag --quiet on notary verify
If --quiet(-q for short) was provided, we output nothing except errors.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
HuKeping
75ac7f6f72 Introduce flag --output on notary verify
If --output(-o for short) was provided, we write to a file,
instead of STDOUT.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
HuKeping
e48b027ac3 Introduce flag --input on notary verify
If --input(-i for short) was provided, we read the from a file,
instead of STDIN.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-05-10 09:51:45 +08:00
Riyaz Faizullabhoy
eadda460db Merge pull request #726 from docker/rethink-timeouts
Increase timeout for RethinkDB (default is 0), remove extra wait
2016-05-09 14:38:18 -07:00
Ying Li
6081e96224 Merge pull request #727 from cyli/save-root-role-only-on-rotate
Do not save old root roles until the first root rotation
2016-05-09 14:35:24 -07:00
Ying Li
2699ced85e Simplify even further and only save the previous role during a root rotation
so that in the saved roles named "root.version", the version is the latest
version for which that root role was valid.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 14:10:25 -07:00
Riyaz Faizullabhoy
6c87dbe4c6 Remove wait after dbCreate
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-09 13:25:07 -07:00
Ying Li
2f43fa66cc Shift the code that saves the roles around to be slightly more clear what
roles it's saving and why.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 12:02:48 -07:00
Ying Li
9d717780d2 Do not save old root roles until the first root rotation
Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 11:30:08 -07:00
Riyaz Faizullabhoy
a69f9b85e4 Make default 60s timeout for rethindkb (default is 0)
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-06 17:46:17 -07:00
David Lawrence
61ac085a26 Merge pull request #709 from docker/passphrase-caching-delegation
Be less strict for password caching for delegation keys
2016-05-05 17:03:15 -07:00
David Lawrence
64290ecfa9 Merge pull request #721 from docker/rethink-ca-flag
Add driver-tls-ca flag for rethink
2016-05-05 17:01:40 -07:00
Riyaz Faizullabhoy
b3ac5b62dc Add driver-tls-ca flag for rethink
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-05 15:52:49 -07:00
David Lawrence
905736adc7 Merge pull request #708 from docker/signer-rethink-cleanup
Allow for configurable notary signer db name, check allowed backends
2016-05-05 15:29:00 -07:00
David Lawrence
3dd79962fa Merge pull request #715 from docker/rethink-bump
Update RethinkDB to 2.3.0, gorethink to v2
2016-05-05 11:39:58 -07:00
David Lawrence
be2020b484 Merge pull request #719 from docker/rethink-client-certs
Add client key and cert to rethink client tls config
2016-05-05 11:30:13 -07:00
Ying Li
1f8e5d5863 Merge pull request #718 from twistlock/static_compile
Enable notary client static compile
2016-05-05 10:50:14 -07:00
Liron Levin
26cbc805e1 Enable notary client static compile
Update pkcs11 package (missing -ldl in LDFLAGS)

Signed-off-by: Liron Levin <liron@twistlock.com>
2016-05-05 11:12:50 +03:00
Riyaz Faizullabhoy
29e65f6d9a Add client key and cert to rethink client tls config
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-04 20:49:31 -07:00
Riyaz Faizullabhoy
8d08576222 Merge pull request #716 from cyli/fix-signer-interface
Fix signer interface to conform to expected cryptoservice behavior
2016-05-04 12:04:25 -07:00
Riyaz Faizullabhoy
7977c6a965 Merge pull request #713 from twistlock/list_targets_basic_auth
Enable basic authentication for list command
2016-05-04 11:50:57 -07:00
Ying Li
b10e89e0c0 Fix signer to conform to expected signed.CryptoService behavior.
In interface tests, account for the fact that the signer doesn't keep track of roles yet.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-04 11:45:40 -07:00
Liron Levin
f5ce3d1eb0 Enable providing username/password for read operations
Currently notary fails to authenticate private Docker repositories.
That is, notary fetch a token from `auth.docker.io` but receives 401
(since basic authentication is required to fetch the bearer token for
private Docker repositories).

Since the `AuthenticationHandler` succeed, we must retry the entire flow
with a different handler.

Signed-off-by: Liron Levin <liron@twistlock.com>
2016-05-04 19:43:45 +03:00
Riyaz Faizullabhoy
6bd4f94199 add positive test for passphrase caching
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-03 18:10:48 -07:00
Ying Li
b83fd7842b Add a general interface test for signed.CryptoService specifying expected interface behavior.
Apply it to cryptoservice.CryptoService and signed.client.NotarySigner.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-03 17:00:55 -07:00
Riyaz Faizullabhoy
d08ecc770f Update RethinkDB to 2.3.0, gorethink to v2
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-03 15:47:30 -07:00
Riyaz Faizullabhoy
46a37c0fa7 Allow for password caching for delegation keys with non-delegation PEM names
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-02 10:28:54 -07:00
Riyaz Faizullabhoy
5659554801 Allow for configurable notary signer db name, actually check allowed backends on setup
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-02 10:11:01 -07:00
Ying Li
134bdbcb90 Merge pull request #698 from docker/codecov.yml
Add a codecov config file that disables project and changes statuses
2016-04-29 14:24:01 -07:00
Riyaz Faizullabhoy
35010659eb Merge pull request #695 from docker/size-const
Add const for max size -1 for GetMeta
2016-04-29 09:53:10 -07:00
Ying Li
f2f9e6169a Add a codecov config file that disables project and changes statuses
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-29 09:42:29 -07:00
Riyaz Faizullabhoy
7e6c15d7e1 Rename constant
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:33:45 -07:00
Riyaz Faizullabhoy
fa1ead35e2 More occurrences of -1 and fixup comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:32:10 -07:00
Riyaz Faizullabhoy
4bd5c10fc8 Add const for max size -1 for GetMeta
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:31:02 -07:00
Ying Li
c2219d664e Merge pull request #705 from docker/docs-fix
Docs fix
2016-04-28 18:00:59 -07:00
Ying Li
177711137f Fix service architecture tables that were misformatted, and re-link sequence diagram.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-28 13:19:03 -07:00
Ying Li
27469f01fe Fix metadata sequence diagram that was missing arrows.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-28 13:18:24 -07:00
Ying Li
2166f84543 Merge pull request #704 from SvenDowideit/use-docs-base-oss
convert docs Dockerfiles to use docs/base:oss
2016-04-28 10:56:56 -07:00
Riyaz Faizullabhoy
b54934f353 Merge pull request #703 from SvenDowideit/fix-image-path
Use markdown to link to image, so the published result shows it
2016-04-28 09:11:28 -07:00
Sven Dowideit
8ab3937e9f convert docs Dockerfiles to use docs/base:oss
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au>
2016-04-28 12:57:26 +00:00
Sven Dowideit
52e6017dcb Use markdown to link to image, so the published result shows it
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au>
2016-04-28 03:17:12 +00:00
Ying Li
9da826a775 Merge pull request #694 from HuKeping/docs-fix
Docs: some review
2016-04-27 19:57:20 -07:00
HuKeping
5b78101dca Revert "Docs: review service_architecture.md"
This reverts commit 76698409744c8a02e2fb7a5d1843d8425f9ba417.

Relative discussion:
https://github.com/docker/notary/pull/694#discussion-diff-60949918R30

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
5c2faf0da8 Docs: update some tips and comments
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00