1
0
mirror of https://github.com/docker/docs.git synced 2026-11-06 12:54:24 +03:00
Commit Graph

1915 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy
eadda460db Merge pull request #726 from docker/rethink-timeouts
Increase timeout for RethinkDB (default is 0), remove extra wait
2016-05-09 14:38:18 -07:00
Ying Li
6081e96224 Merge pull request #727 from cyli/save-root-role-only-on-rotate
Do not save old root roles until the first root rotation
2016-05-09 14:35:24 -07:00
Ying Li
2699ced85e Simplify even further and only save the previous role during a root rotation
so that in the saved roles named "root.version", the version is the latest
version for which that root role was valid.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 14:10:25 -07:00
Riyaz Faizullabhoy
6c87dbe4c6 Remove wait after dbCreate
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-09 13:25:07 -07:00
Ying Li
2f43fa66cc Shift the code that saves the roles around to be slightly more clear what
roles it's saving and why.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 12:02:48 -07:00
Ying Li
9d717780d2 Do not save old root roles until the first root rotation
Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-09 11:30:08 -07:00
Riyaz Faizullabhoy
a69f9b85e4 Make default 60s timeout for rethindkb (default is 0)
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-06 17:46:17 -07:00
David Lawrence
61ac085a26 Merge pull request #709 from docker/passphrase-caching-delegation
Be less strict for password caching for delegation keys
2016-05-05 17:03:15 -07:00
David Lawrence
64290ecfa9 Merge pull request #721 from docker/rethink-ca-flag
Add driver-tls-ca flag for rethink
2016-05-05 17:01:40 -07:00
Riyaz Faizullabhoy
b3ac5b62dc Add driver-tls-ca flag for rethink
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-05 15:52:49 -07:00
David Lawrence
905736adc7 Merge pull request #708 from docker/signer-rethink-cleanup
Allow for configurable notary signer db name, check allowed backends
2016-05-05 15:29:00 -07:00
David Lawrence
3dd79962fa Merge pull request #715 from docker/rethink-bump
Update RethinkDB to 2.3.0, gorethink to v2
2016-05-05 11:39:58 -07:00
David Lawrence
be2020b484 Merge pull request #719 from docker/rethink-client-certs
Add client key and cert to rethink client tls config
2016-05-05 11:30:13 -07:00
Ying Li
1f8e5d5863 Merge pull request #718 from twistlock/static_compile
Enable notary client static compile
2016-05-05 10:50:14 -07:00
Liron Levin
26cbc805e1 Enable notary client static compile
Update pkcs11 package (missing -ldl in LDFLAGS)

Signed-off-by: Liron Levin <liron@twistlock.com>
2016-05-05 11:12:50 +03:00
Riyaz Faizullabhoy
29e65f6d9a Add client key and cert to rethink client tls config
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-04 20:49:31 -07:00
Riyaz Faizullabhoy
8d08576222 Merge pull request #716 from cyli/fix-signer-interface
Fix signer interface to conform to expected cryptoservice behavior
2016-05-04 12:04:25 -07:00
Riyaz Faizullabhoy
7977c6a965 Merge pull request #713 from twistlock/list_targets_basic_auth
Enable basic authentication for list command
2016-05-04 11:50:57 -07:00
Ying Li
b10e89e0c0 Fix signer to conform to expected signed.CryptoService behavior.
In interface tests, account for the fact that the signer doesn't keep track of roles yet.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-04 11:45:40 -07:00
Liron Levin
f5ce3d1eb0 Enable providing username/password for read operations
Currently notary fails to authenticate private Docker repositories.
That is, notary fetch a token from `auth.docker.io` but receives 401
(since basic authentication is required to fetch the bearer token for
private Docker repositories).

Since the `AuthenticationHandler` succeed, we must retry the entire flow
with a different handler.

Signed-off-by: Liron Levin <liron@twistlock.com>
2016-05-04 19:43:45 +03:00
Riyaz Faizullabhoy
6bd4f94199 add positive test for passphrase caching
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-03 18:10:48 -07:00
Ying Li
b83fd7842b Add a general interface test for signed.CryptoService specifying expected interface behavior.
Apply it to cryptoservice.CryptoService and signed.client.NotarySigner.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-05-03 17:00:55 -07:00
Riyaz Faizullabhoy
d08ecc770f Update RethinkDB to 2.3.0, gorethink to v2
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-03 15:47:30 -07:00
Riyaz Faizullabhoy
46a37c0fa7 Allow for password caching for delegation keys with non-delegation PEM names
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-02 10:28:54 -07:00
Riyaz Faizullabhoy
5659554801 Allow for configurable notary signer db name, actually check allowed backends on setup
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-05-02 10:11:01 -07:00
Ying Li
134bdbcb90 Merge pull request #698 from docker/codecov.yml
Add a codecov config file that disables project and changes statuses
2016-04-29 14:24:01 -07:00
Riyaz Faizullabhoy
35010659eb Merge pull request #695 from docker/size-const
Add const for max size -1 for GetMeta
2016-04-29 09:53:10 -07:00
Ying Li
f2f9e6169a Add a codecov config file that disables project and changes statuses
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-29 09:42:29 -07:00
Riyaz Faizullabhoy
7e6c15d7e1 Rename constant
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:33:45 -07:00
Riyaz Faizullabhoy
fa1ead35e2 More occurrences of -1 and fixup comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:32:10 -07:00
Riyaz Faizullabhoy
4bd5c10fc8 Add const for max size -1 for GetMeta
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-04-29 09:31:02 -07:00
Ying Li
c2219d664e Merge pull request #705 from docker/docs-fix
Docs fix
2016-04-28 18:00:59 -07:00
Ying Li
177711137f Fix service architecture tables that were misformatted, and re-link sequence diagram.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-28 13:19:03 -07:00
Ying Li
27469f01fe Fix metadata sequence diagram that was missing arrows.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-28 13:18:24 -07:00
Ying Li
2166f84543 Merge pull request #704 from SvenDowideit/use-docs-base-oss
convert docs Dockerfiles to use docs/base:oss
2016-04-28 10:56:56 -07:00
Riyaz Faizullabhoy
b54934f353 Merge pull request #703 from SvenDowideit/fix-image-path
Use markdown to link to image, so the published result shows it
2016-04-28 09:11:28 -07:00
Sven Dowideit
8ab3937e9f convert docs Dockerfiles to use docs/base:oss
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au>
2016-04-28 12:57:26 +00:00
Sven Dowideit
52e6017dcb Use markdown to link to image, so the published result shows it
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au>
2016-04-28 03:17:12 +00:00
Ying Li
9da826a775 Merge pull request #694 from HuKeping/docs-fix
Docs: some review
2016-04-27 19:57:20 -07:00
HuKeping
5b78101dca Revert "Docs: review service_architecture.md"
This reverts commit 76698409744c8a02e2fb7a5d1843d8425f9ba417.

Relative discussion:
https://github.com/docker/notary/pull/694#discussion-diff-60949918R30

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
5c2faf0da8 Docs: update some tips and comments
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
4a45f8aede Docs: some review on README
It seems it should be "apt-get install libtool" not "libtool-dev".

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
6dc80bde93 Docs: review docs/advanced_usage.md
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
04ba393efb Docs: some review on reference/commond-configs
The reason why we'd like to fail the start when a wrong debug level
was provided, please take a look at:

https://github.com/docker/notary/pull/389

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
5194c4bd8b Docs: review service_architecture.md
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
HuKeping
c6359fa505 Docs: fix some broken link
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-04-28 09:27:05 +08:00
Ying Li
f5b4b5f810 Merge pull request #580 from docker/builder
Bottleneck TUF Repo validation by using a builder to create one in the client and server
2016-04-27 15:17:06 -07:00
Ying Li
117124e6da Address review comments:
- fix a spelling mistake and rename the builder retroactive-checksum-check functions
- on client update bootstrapping, we should not validate the root on disk against any trust pinning configuration

Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-27 14:45:37 -07:00
Riyaz Faizullabhoy
b494088c7f Merge pull request #699 from endophage/remove_encrypted_package
removed encrypted package. legacy from flynnn, we don't use it
2016-04-27 14:19:06 -07:00
Ying Li
3a313b1dc9 Convert all use of copyKeys to testutils.CopyKeys
Signed-off-by: Ying Li <ying.li@docker.com>
2016-04-27 14:14:39 -07:00