docker/quay
1
0
Fork 0
mirror of https://github.com/quay/quay.git synced 2026-01-29 08:42:15 +03:00
Code Activity
11,965 Commits 2,636 Branches 136 Tags
dmage-patch-1
Commit Graph

11965 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Oleg Bulatov
2a39ffd5ca Create codeql.yml 2024-02-05 15:30:29 +01:00
dependabot[bot]
116f19b177 build(deps): bump cryptography from 41.0.4 to 41.0.6 (#2514) 
Bumps [cryptography](https://github.com/pyca/cryptography) from 41.0.4 to 41.0.6.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/41.0.4...41.0.6)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:12:51 +01:00
dependabot[bot]
0ea33dc303 build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 in /config-tool (#2455) 
build(deps): bump github.com/spf13/cobra in /config-tool

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:12:26 +01:00
dependabot[bot]
4a1e44f95d build(deps): bump oslo-i18n from 3.25.1 to 6.2.0 (#2501) 
Bumps [oslo-i18n](https://docs.openstack.org/oslo.i18n/latest) from 3.25.1 to 6.2.0.

---
updated-dependencies:
- dependency-name: oslo-i18n
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:11:54 +01:00
dependabot[bot]
5e1a54a585 build(deps-dev): bump browserify-sign from 4.2.1 to 4.2.2 in /web (#2439) 
Bumps [browserify-sign](https://github.com/crypto-browserify/browserify-sign) from 4.2.1 to 4.2.2.
- [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/crypto-browserify/browserify-sign/compare/v4.2.1...v4.2.2)

---
updated-dependencies:
- dependency-name: browserify-sign
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:11:19 +01:00
dependabot[bot]
2f8efdaa8e build(deps): bump websocket-client from 0.57.0 to 1.7.0 (#2525) 
Bumps [websocket-client](https://github.com/websocket-client/websocket-client) from 0.57.0 to 1.7.0.
- [Release notes](https://github.com/websocket-client/websocket-client/releases)
- [Changelog](https://github.com/websocket-client/websocket-client/blob/master/ChangeLog)
- [Commits](https://github.com/websocket-client/websocket-client/compare/v0.57.0...v1.7.0)

---
updated-dependencies:
- dependency-name: websocket-client
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:10:51 +01:00
dependabot[bot]
da2ffe762f build(deps): bump github.com/minio/minio-go/v7 from 7.0.63 to 7.0.66 in /config-tool (#2563) 
build(deps): bump github.com/minio/minio-go/v7 in /config-tool

Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.63 to 7.0.66.
- [Release notes](https://github.com/minio/minio-go/releases)
- [Commits](https://github.com/minio/minio-go/compare/v7.0.63...v7.0.66)

---
updated-dependencies:
- dependency-name: github.com/minio/minio-go/v7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-02-05 15:09:46 +01:00
Marcus Kok
2ab7dc29f4 marketplace: add support for quantity from subscriptions api (PROJQUAY-6551) (#2633) 
* Adds handling for when a subscription returned from the subscription watch api has a quantity greater than 1. Number of private repos should be correctly calculated using the quantity.

* Updates ui so that subscriptions can only be added to an org as a group, i.e. a subscription with quantity = 2 cannot be split across organizations.
 2024-01-29 15:21:30 -05:00
Oleg Bulatov
6d5e6293e3 chore: use oci_model directly without proxy object (#2618) 2024-01-26 15:27:27 +01:00
Brandon Caton
03b7fec211 ui: implementing github and gitlab build triggers (PROJQUAY-6585) (#2614) 
Adds the creation of GitHub and GitLab build triggers.
 2024-01-25 13:00:51 -05:00
Daniel Messer
40bcd1f141 ui: allow for regular expressions to be used in search (PROJQUAY-6597) (#2611) 
allow regex search and simplify search input

---------

Signed-off-by: dmesser <dmesser@redhat.com>
 2024-01-22 21:11:44 +01:00
Ivan Bazulic
46d1322ca7 api: Return layer compressed size with manifest request (PROJQUAY-6616) (#2627) 
Previously, we weren't returning the total compressed layer size (in bytes) which is part of the manifest table. This makes it cumbersome to identify the real size of an image via `api/v1/repository/{LOCATION}/manifest/{manifestref}` endpoint since only individual layer sizes were returned and the total would then need to be manually summed over each individual layer. With this change, the API endpoint will return the compressed size of all layers if we're referencing a real image, if a reference points to an OCI index or a manifest list, the returned size will be 0.
 2024-01-22 11:49:39 -05:00
dependabot[bot]
52275a3d82 build(deps-dev): bump eslint from 8.49.0 to 8.56.0 in /web (#2566) 
Bumps [eslint](https://github.com/eslint/eslint) from 8.49.0 to 8.56.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.49.0...v8.56.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-18 17:40:29 +01:00
dependabot[bot]
f5a5e4e41f build(deps): bump axios from 1.4.0 to 1.6.5 in /web (#2589) 
Bumps [axios](https://github.com/axios/axios) from 1.4.0 to 1.6.5.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.4.0...v1.6.5)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-18 17:25:01 +01:00
dependabot[bot]
f5c78c5ab1 build(deps): bump jinja2 from 3.1.2 to 3.1.3 (#2600) 
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.3.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.3)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-18 17:24:24 +01:00
Syed Ahmed
93c816b2b7 cdn: add namespace and username to CDN redirect for usage calculation (PROJQUAY-5939) (#2616) 
* cdn: add namespace and username to CDN redirect for usage calculation (PROJQUAY-5939)

We use the referer header to infer the namespace but that
is not always reliable as some clients don't add that header
when sending the request to the CDN
 2024-01-18 10:39:18 -05:00
Oleg Bulatov
a8381d45d3 fix: pull-through should tolerate missing tag (PROJQUAY-4849) (#2598) 
* fix: add a test for the bug (PROJQUAY-4849)

* fix: pull-through should tolerate missing tag (PROJQUAY-4849)
 2024-01-18 15:54:49 +01:00
Marcus Kok
54bc56d5be marketplace: return array of valid subscriptions when looking up subscription (PROJQUAY-6551) (#2613) 
return array of valid subscriptions when looking up subscription
 2024-01-17 10:07:29 -05:00
Brandon Caton
7cec2f6697 ui: implementing creation of custom git trigger (PROJQUAY-6299) (#2599) 
Implements the build trigger creation wizard.
 2024-01-17 10:04:44 -05:00
Sunandadadi
88168d0878 chore: adding debug logging for repository_lookup cache key(PROJQUAY-6472) (#2610) 
log: adding debug logging for repository_lookup cache key(PROJQUAY-6472)
 2024-01-16 13:25:23 -05:00
Ivan Bazulic
e243d233f1 storage: Fix big layer uploads for Ceph/RADOS driver (PROJQUAY-6586) (#2601) 
* storage: Fix big layer uploads for Ceph/RADOS driver (PROJQUAY-6586)
Current uploads of large images usually fail on Ceph/RADOS compatible implementations (including Noobaa) because during the last assembly, copy is done all at once. For large layers, this takes a long while and Boto times out. With this patch, we limit the size of the used chunk to 32 MB so the final copy is done in parts of up to 32 MB each. The size can be overridden by specifying the parameter `maximum_chunk_size_mb` in the driver settings. For backwards compatibility, an additional parameter was added: if `server_side_assembly: true` then we force server side assembly and the final blob push in chunks, if `server_side_assembly: false` we fall back to default client side assembly (we increase the boto timeout in this case to still support large layer upload):

~~~
DISTRIBUTED_STORAGE_CONFIG:
    default:
        - RadosGWStorage
        - ...
           maximum_chunk_size_mb: 100
           server_side_assembly: true
~~~

* Fix formatting

* Added backward compatiblity switch and increased boto timeout

* Changed name of variable in config

* Small fixes to if statements
 2024-01-16 12:44:14 -05:00
Daniel Messer
e8ff33e728 logs: add failure logging for login, push, pull and delete events (PROJQUAY-5411) (#1903) 
* add login failure logging

Signed-off-by: dmesser <dmesser@redhat.com>

* move failure logging into credential validation

Signed-off-by: dmesser <dmesser@redhat.com>

* more precise tracking of affected users

Signed-off-by: dmesser <dmesser@redhat.com>

* fix indent

Signed-off-by: dmesser <dmesser@redhat.com>

* differentiate robots with wrong credentials

Signed-off-by: dmesser <dmesser@redhat.com>

* don't audit failures by default

Signed-off-by: dmesser <dmesser@redhat.com>

* discrete failure tracking for logins, push, pulls and deletes

Signed-off-by: dmesser <dmesser@redhat.com>

* refine log metadata

Signed-off-by: dmesser <dmesser@redhat.com>

* login failure log visualization

Signed-off-by: dmesser <dmesser@redhat.com>

* properly use data model

Signed-off-by: dmesser <dmesser@redhat.com>

* fix unit test bug

Signed-off-by: dmesser <dmesser@redhat.com>

* track non-existing repos differently

Signed-off-by: dmesser <dmesser@redhat.com>

* log view visualization of failed pushes and pulls

Signed-off-by: dmesser <dmesser@redhat.com>

* ensure all tests are conducted with failure logging

Signed-off-by: dmesser <dmesser@redhat.com>

* additional unicode protection

Signed-off-by: dmesser <dmesser@redhat.com>

* python black formatting

Signed-off-by: dmesser <dmesser@redhat.com>

* add cypress test data

Signed-off-by: dmesser <dmesser@redhat.com>

* add safety checks for ascii conversion attempts

Signed-off-by: dmesser <dmesser@redhat.com>

* adjusting unit test with correct error message

Signed-off-by: dmesser <dmesser@redhat.com>

* update to alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* add standard oauth token metadata in audit

Signed-off-by: dmesser <dmesser@redhat.com>

* update alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* correct field name

Signed-off-by: dmesser <dmesser@redhat.com>

* formatting

Signed-off-by: dmesser <dmesser@redhat.com>

* bump alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* refactor auth logging imports

Signed-off-by: dmesser <dmesser@redhat.com>

* bump alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* formatting

Signed-off-by: dmesser <dmesser@redhat.com>

* restore module

Signed-off-by: dmesser <dmesser@redhat.com>

* pre-commit fixes

Signed-off-by: dmesser <dmesser@redhat.com>

* adding missing default

Signed-off-by: dmesser <dmesser@redhat.com>

* bump alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* update test data

Signed-off-by: dmesser <dmesser@redhat.com>

* refactoring to save db calls

Signed-off-by: dmesser <dmesser@redhat.com>

* fix unit tests

Signed-off-by: dmesser <dmesser@redhat.com>

* handle unicode conversion errors on email look up

Signed-off-by: dmesser <dmesser@redhat.com>

* bump alembic head

Signed-off-by: dmesser <dmesser@redhat.com>

* proper debug logging and conditional db calls

Signed-off-by: dmesser <dmesser@redhat.com>

* omit wildcard import

Signed-off-by: dmesser <dmesser@redhat.com>

* re-add import

Signed-off-by: dmesser <dmesser@redhat.com>

---------

Signed-off-by: dmesser <dmesser@redhat.com>
 2024-01-16 16:46:20 +01:00
Sunandadadi
a7737722fc cache: adding caching on look_up repository (PROJQUAY-6472) (#2521) 
* adding caching on look_up repository

* fixing query count in tests

* fixing tests

* isort fix
 2024-01-16 09:58:56 -05:00
Marcus Kok
2a4ac09306 billing: marketplace UI (PROJQUAY-6551) (#2595) 
* billing: marketplace UI

adds UI in billing section for managing user and org-bound skus

add more unit tests for org binding

changed endpoint for bulk attaching skus to orgs
 2024-01-11 11:48:38 -05:00
Brandon Caton
27cceb1bb4 ui: adding build trigger table (PROJQUAY-6295) (#2570) 
Adds the table to view configured build triggers for a repository. Includes enabling/disabling, deletion, viewing credentials, and notifying of automatically disabled triggers.
 2024-01-11 09:02:24 -05:00
Marcus Kok
26451766ad marketplace: make sure customer id from api is returned as an int (PROJQUAY-233) (#2590) 
* make sure customer id from api is returned as an int
 2024-01-08 15:41:34 -05:00
Marcus Kok
1c893baba5 marketplace: update reconciliationworker to use webCustomerId instead of ebsAccountNumber (PROJQUAY-233) (#2582) 
* update reconciliationworker to use webCustomerId instead of
ebsAccountNumber

* fix reconciler where it was incorrectly using the ebsAccountNumber to
  create subscriptions
* add job to reconciler so that it reconciles different ids between the
  database and the user api
* separate skus to be used by billing and skus to be used by reconciler
 2024-01-05 16:15:37 -05:00
Brandon Caton
7357e317d6 ui: adding build avatar image size (PROJQUAY-6575) (#2580) 
adding avatar image size
 2024-01-03 15:19:31 -05:00
Daniel Messer
2a22ed09c6 ui: add dark mode to see Quay in a new light or lack thereof (PROJQUAY-6570) (#2575) 
Signed-off-by: dmesser <dmesser@redhat.com>
 2024-01-03 15:40:32 +01:00
Brandon Caton
94735bcfbd configtool: Adding validation for IBM Cloud Storage (PROJQUAY-6549) (#2568) 
Adding validation for IBM Cloud Storage
 2023-12-20 09:16:45 -05:00
Sunandadadi
77d6ad741b ui: breadcrumbs fix when org and repo names are identical (PROJQUAY-6504) (#2569) 
* ui: breadcrumbs fix when org and repo names are identical (PROJQUAY-6504)

* eslint fix

* add tests for team name identical to org and repo name

* format fix

* revert db inserts for queueitem and log table
 2023-12-19 16:02:52 -05:00
Marcus Kok
79723f1ce3 marketplace: add exception handling for reconciler (PROJQUAY-233) (#2560) 
* add exception handling for reconciler
 2023-12-15 12:32:44 -05:00
Brandon Caton
6f365ed745 ui: updating logo for quay.io (PROJQUAY-6531) (#2559) 
updating logo for quay.io
 2023-12-15 11:31:54 -05:00
Brandon Caton
9b43b4752f ui: Prevent switch to beta UI toggle from rendering if user is anonymous (PROJQUAY-6526) (#2558) 
prevent switch to beta UI toggle from rendering if user is anonymous
 2023-12-15 11:24:09 -05:00
Syed Ahmed
4f0c8db105 ui: show UI toogle to all users in quay.io (PROJQUAY-6505) (#2553) 
Removes the check that limits the UI toggle to RedHat
users
 2023-12-14 10:30:05 -05:00
Brandon Caton
ac221a601d ui: implementing build history page (PROJQUAY-6293) (#2523) 
implementing build history page
 2023-12-13 16:03:04 -05:00
Steven Smith
e6d3578106 ui: updates Quay.io documentation redirect link (PROJQUAY-6473) (#2516) 
ui: updates Quay.io documentation redirect link

Due to the addition of dedicated Quay.io docs, the Documentation link on Quay.io needs updated to redirect directly to the Quay.io docs, instead of the more general upstream docs

Co-authored-by: Steven Smith <stevsmit@stevsmit.remote.csb>
 2023-12-12 14:44:38 -05:00
Daniel Messer
03490a0614 ui: fix broken update of repo description (PROJQUAY-6243) (#2554) 
fix broken update of repo description

Signed-off-by: dmesser <dmesser@redhat.com>
 2023-12-12 16:10:23 +01:00
Sunandadadi
3e6384e642 sso: adding error log for export compliance (PROJQUAY-6486) (#2540) 
* sso: adding error log for export compliance (PROJQUAY-6486)

* adding if condition for response
 2023-12-08 11:38:21 -05:00
Marcus Kok
1bf3f44820 marketplace: update user ebs number lookup to find personal account numbers (PROJQUAY-233) (#2545) 
* update user ebs number lookup to find account numbers with type = person
 2023-12-06 11:10:29 -05:00
Syed Ahmed
bb0a63322f deploy: update main deployment to add regitry worker count (PROJQUAY-6456) (#2546) 
sets the number of registry workers in the primary deployment
 2023-12-05 15:07:57 -05:00
Syed Ahmed
aab56e4397 deploy: fix health check endpoint for quay deployment (PROJQUAY-6456) (#2544) 
variable is not expanded in health check. Use port directly
 2023-12-05 13:37:27 -05:00
Syed Ahmed
6b3e14faf4 Add registry worker count to debug deployment (PROJQUAY-6456) (#2542) 
for testing gunicorn worker count
 2023-12-05 12:10:09 -05:00
Michaela Lang
0dfa72d036 user(robots): disallow robot login and create 2nd (PROJQUAY-5968) (#2483) 
* Fixed typo, added ROBOTS_WHITELIST as without the ROBOTS_DISALLOW does not make sense

* added ROBOTS_WHITELIST default to config.py
 2023-12-05 17:31:08 +01:00
Syed Ahmed
248ea77190 deploy: update deploy template add proxy port (PROJQUAY-6456) (#2539) 
Update deploy template to use proxy-protocol port on the pods
for cases where we want to reach the LB directly
 2023-12-04 15:59:19 -05:00
Brandon Caton
236e2fe4fd autoprune: adding audit logs to namespace autoprune policy API (PROJQUAY-6229) (#2431) 
Add's audit logs to the CRUD endpoints for both user and organization namespace auto-prune policies.
 2023-12-04 13:51:52 -05:00
Brandon Caton
aaba7539b9 api: adding nickname decorator to autoprune policy endpoints (PROJQUAY-6483) (#2524) 
Adding nickname decorator to auto-prune policy endpoints
 2023-12-04 09:14:41 -05:00
Marcus Kok
4c2433413c marketplace: add logging for user api (PROJQUAY-233) (#2513) 
* add logging for user api
 2023-12-01 10:29:05 -05:00
Syed Ahmed
2410c7a99c deploy: add web worker count to deployment (PROJQUAY-6453) (#2520) 
This is to reduce the # of workers for web
 2023-12-01 09:21:15 -05:00
Sunandadadi
6fc77823da Revert "api: add caching for get_repository method (PROJQUAY-6472)" (#2517) 
Revert "api: add caching for get_repository method (PROJQUAY-6472) (#2515)"

This reverts commit 9c89e843f3.
 2023-12-01 09:07:19 -05:00