1
0
mirror of https://github.com/quay/quay.git synced 2026-01-26 06:21:37 +03:00
Commit Graph

12251 Commits

Author SHA1 Message Date
OpenShift Cherrypick Robot
0a4e248ecb [redhat-3.13] api: put /superuser/users/<username> will now show up in swagger (PROJQUAY-7579) (#3702)
remove internal-only decorator from PUT request

Co-authored-by: sayali bhavsar <sayalibhavsar9009@gmail.com>
2025-03-06 10:00:05 -05:00
OpenShift Cherrypick Robot
460f4f8451 [redhat-3.13] chore: Change in the CIDR for Z (#3696)
chore: Change in the CIDR for Z

Co-authored-by: sivaramsingana <47631665+sivaramsingana@users.noreply.github.com>
2025-03-05 13:09:34 -05:00
OpenShift Cherrypick Robot
fceab15a5b [redhat-3.13] chore: fix for wide open ssh for vsi for Z (#3644)
fix for wide open ssh for vsi

Co-authored-by: sivaramsingana <47631665+sivaramsingana@users.noreply.github.com>
v3.13.4
2025-02-07 08:53:14 -05:00
github-actions[bot]
a270d52d11 v3.13.4 Changelog Bump (#3633)
chore: v3.13.4 changelog bump (PROJQUAY-8514)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
2025-02-04 15:24:43 -05:00
Brandon Caton
0915dcd107 deps: updating jquery to 3.5.0 (PROJQUAY-8522) (#3631)
deps: updating jquery to 3.5.0 (PROJQUAY-8522) (#3629)

updating jquery to 3.5.0
2025-02-04 15:21:48 -05:00
OpenShift Cherrypick Robot
4eb740503f [redhat-3.13] endpoints(repository): fixing repository return with starred repos to paged response (PROJQUAY-8450) (#3600)
When setting repositories in the Quay UI as starred, a 500 error occurs and renders the UI use-less due to starred queries are not paged.

---------

Co-authored-by: Michaela Lang <milang@redhat.com>
Co-authored-by: Brandon Caton <bcaton@redhat.com>
2025-02-03 13:21:53 -05:00
OpenShift Cherrypick Robot
96ff97e7df [redhat-3.13] ui: adding under_maintenance state to status indicator (PROJQUAY-8507) (#3625)
Adding under_maintenance state to status indicator

Co-authored-by: bcaton <bcaton@redhat.com>
2025-02-03 12:43:34 -05:00
OpenShift Cherrypick Robot
ff77a0d5d9 [redhat-3.13] updating actions/upload-artifact to v4 (#3601)
updating actions/upload-artifact to v4

Co-authored-by: bcaton <bcaton@redhat.com>
2025-01-30 13:55:35 -05:00
github-actions[bot]
177b6a4695 v3.13.3 Changelog Bump (#3559)
chore: v3.13.3 changelog bump (PROJQUAY-8409)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
v3.13.3
2025-01-10 09:28:44 -05:00
OpenShift Cherrypick Robot
68fa008d51 [redhat-3.13] teamsync: peewee integrity error check on teamsync (PROJQUAY-7747) (#3557)
* teamsync: Ignore Peewee Integrity Error on teamsync (projquay-7747)

* isort fix and removing with_dbtransaction from get query

* adding tests and check if user is a member of team

* fixes based on review

* fixes

* fixing tests

* minor fixes

* reverting UserAlreadyExists exception

---------

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
2025-01-09 21:17:13 +00:00
OpenShift Cherrypick Robot
b1870400c1 [redhat-3.13] dep: updating css-loader to 6.11.0 (PROJQUAY-8297) (#3545)
updating css-loader to 6.11.0

Co-authored-by: bcaton <bcaton@redhat.com>
2025-01-07 19:12:49 +00:00
OpenShift Cherrypick Robot
b433afeedf [redhat-3.13] dep: updating jinja2 to 3.1.5 (PROJQUAY-8375) (#3544)
updating jinja2 to 3.1.5

Co-authored-by: bcaton <bcaton@redhat.com>
2025-01-06 19:14:22 +00:00
OpenShift Cherrypick Robot
03e7a1d9c7 [redhat-3.13] dep: upgrading actions/download-artifact to v4 (PROJQUAY-8379) (#3531)
upgrading actions/download-artifact to v4

Co-authored-by: bcaton <bcaton@redhat.com>
2025-01-02 17:38:03 +00:00
OpenShift Cherrypick Robot
cfd93edafe [redhat-3.13] ui: fixing cypress flake (PROJQUAY-8352) (#3510)
There's a flake in the web/cypress/e2e/repository-permissions.cy.ts test where it is intermittently unable to type in the "Search for user, add/create robot account" search dropdown which occasionally fails the test. Since updating cypress the test fails consistently. This changes waits and clicks on the input allowing the type to complete and the dropdown to populate.

Co-authored-by: bcaton <bcaton@redhat.com>
2024-12-13 12:08:01 -05:00
OpenShift Cherrypick Robot
6201712950 [redhat-3.13] deps: downgrading cryptography (#3493)
downgrading cryptography

Co-authored-by: bcaton <bcaton@redhat.com>
v3.13.2
2024-12-10 13:02:57 -05:00
OpenShift Cherrypick Robot
4c02c1105c [redhat-3.13] deps: adding maturin to build deps (PROJQUAY-8308) (#3489)
adding maturin to build deps

Co-authored-by: bcaton <bcaton@redhat.com>
2024-12-10 10:33:00 -05:00
OpenShift Cherrypick Robot
9b83bd6b9f [redhat-3.13] deps: Upgrade cryptography package to 43.0.3 (PROJQUAY-7032) (#3442)
deps: Upgrade cryptography package to 43.0.3 (PROJQUAY-7032)

Co-authored-by: Kenny Lee Sin Cheong <kenny.lee28@gmail.com>
Co-authored-by: Brandon Caton <bcaton@redhat.com>
2024-12-09 15:43:48 -05:00
github-actions[bot]
9d2beb6fdd v3.13.2 Changelog Bump (#3473)
chore: v3.13.2 changelog bump (PROJQUAY-8247)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
2024-12-06 09:35:30 -05:00
OpenShift Cherrypick Robot
5702a0f1bd [redhat-3.13] dep: updating axios (PROJQUAY-7657) (#3465)
Upgrading axios

---------

Co-authored-by: bcaton <bcaton@redhat.com>
2024-12-05 17:15:32 -05:00
OpenShift Cherrypick Robot
2c38a0854f [redhat-3.13] auth: Implement is_restricted_user for federated auth systems (PROJQUAY-8208) (#3459)
* auth: Implement is_restricted_user for OIDC and allow super users to create content regardless of set restriction (PROJQUAY-8208) Currently, if OIDC is set as an authentication mechanism and restricted users is set, Quay will return a `501 Not Implemented` on invocation. Now, Quay will properly check the restricted user whitelist for federated users. Additionally, if user restriction is in place and super user's username was **not** explicitly whitelisted, super users would not be able to create new content inside the registry. Now, the username is explicitly checked in the UI to allow super users to create both organizations and repos regardless of restricted users whitelist.

* Add tests

* Add tests for usermanager

---------

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
2024-12-05 16:24:46 +00:00
OpenShift Cherrypick Robot
96e3f3b06b [redhat-3.13] auth: Remove robot references from scopes list (PROJQUAY-8269) (#3458)
auth: Remove robot references from scopes list (PROJQUAY-0000) Removes references from the Oauth scopes page concerning robot accounts. Oauth tokens currently cannot be assigned to robot accounts so current wording creates confusion.

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
2024-12-05 10:05:12 -05:00
OpenShift Cherrypick Robot
e97bbca8a0 [redhat-3.13] ui: Add proxy cache config UI to org settings (PROJQUAY-7697) (#3428)
* ui: Add proxy cache config UI to org settings (PROJQUAY-7697)

* Fix alerts + reset input fields on user action

* Add cypress test for proxy cache config

* enable proxy cache for cypress test

* Propagate backend api error to UI

* Add additional cypress test coverage

* Fix eslint error

---------

Signed-off-by: harishsurf <hgovinda@redhat.com>
Co-authored-by: harishsurf <hgovinda@redhat.com>
2024-11-27 14:43:20 +05:30
OpenShift Cherrypick Robot
046b16eacb [redhat-3.13] deps: bump protobuf (PROJQUAY-7970) (#3422)
* deps: bump protobuf (PROJQUAY-7970)

Signedoff-by: harishsurf <hgovinda@redhat.com>

* Regenerate .proto buildman_pb2*.py files

Bumping protobuf to 5.28.2 requires regenerating python files
from .proto file

* Bump grpcio + fix import

* Add generated buildman_pb2.pyi file

* Add ignore type check for import

* Fix black + isort formatting

---------

Co-authored-by: harishsurf <hgovinda@redhat.com>
2024-11-25 20:37:52 +05:30
OpenShift Cherrypick Robot
3317794691 [redhat-3.13] ui: removing bootbox (#3416)
removing bootbox

Co-authored-by: bcaton <bcaton@redhat.com>
2024-11-22 14:02:52 -05:00
OpenShift Cherrypick Robot
56d5b76b9c [redhat-3.13] api: allowing superuser to read catalog endpoint (PROJQUAY-8023) (#3402)
* allowing superuser to read catalog endpoint

* updating with return_all param

---------

Co-authored-by: bcaton <bcaton@redhat.com>
v3.13.1
2024-11-14 09:57:13 -05:00
github-actions[bot]
dcbe24e064 v3.13.1 Changelog Bump (#3398)
chore: v3.13.1 changelog bump (PROJQUAY-8203)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
2024-11-11 14:33:38 -05:00
OpenShift Cherrypick Robot
bdcd27965f [redhat-3.13] build(deps): bump jmespath from 0.9.4 to 1.0.1 in requirements.txt (PROJQUAY-7031) (#3392)
bumped python-jmespath to latest(1.0.1) version to avoid systax warnings

Co-authored-by: Andreas Bleischwitz <ableisch@redhat.com>
2024-11-08 13:32:02 -05:00
OpenShift Cherrypick Robot
f3d3c86b69 [redhat-3.13] conf(nginx): change forwarded header removing host (PROJQUAY-8024) (#3386)
According to HCP support, the Ingress Load Balancer rejects requests with a `host=...;` in the `forwarded` Header.

The PR changes that only the originating Client ($remote_addr) is
injected in the request as

```
Host: ....
Forwarded: for=127.0.0.1;
...
```

Co-authored-by: Michaela Lang <milang@redhat.com>
2024-11-07 16:13:23 +00:00
OpenShift Cherrypick Robot
1e5a519a60 [redhat-3.13] ui: Update regex pattern helper text for validating team name (PROJQUAY-8110) (#3354)
* ui: update regex pattern in helpertext for team name(PROJQUAY-8110)

* old ui: update regex pattern for validating team name

---------

Signed-off-by: harishsurf <hgovinda@redhat.com>
Co-authored-by: harishsurf <hgovinda@redhat.com>
2024-11-05 20:00:37 +00:00
OpenShift Cherrypick Robot
9de00c4adf [redhat-3.13] build(deps): bump werkzeug from 3.0.3 to 3.0.6 (#3373)
build(deps): bump werkzeug from 3.0.3 to 3.0.6

Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.3 to 3.0.6.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.3...3.0.6)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-04 15:34:31 +00:00
OpenShift Cherrypick Robot
8418b7aa79 [redhat-3.13] ui: Render namespace values for <SelectOption> dropdown under Create Repository modal (PROJQUAY-8118) (#3361)
* ui: Render namespace values for <SelectOption> dropdown

Signed-off-by: harishsurf <hgovinda@redhat.com>

* fix cypress test

---------

Signed-off-by: harishsurf <hgovinda@redhat.com>
Co-authored-by: harishsurf <hgovinda@redhat.com>
2024-11-04 09:56:29 -05:00
OpenShift Cherrypick Robot
199f041d68 [redhat-3.13] ui: show user autoprune policies under repo autoprune policies tab (PROJQUAY-8093) (#3360)
ui: show user autoprune policies under repo autoprune policies tab (PROJQUAY-8093)

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
v3.13.0
2024-10-24 15:53:53 +00:00
github-actions[bot]
5ca10b5fb4 v3.13.0 Changelog Bump (#3358)
chore: v3.13.0 changelog bump (PROJQUAY-7957)

Signed-off-by: GitHub <noreply@github.com>
Co-authored-by: bcaton85 <bcaton85@users.noreply.github.com>
2024-10-23 15:17:45 -04:00
OpenShift Cherrypick Robot
31edc93514 [redhat-3.13] ui: conditionally support custom tag expiration durations (PROJQUAY-6700) (#3352)
conditionally support custom tag expiration durations with reliable human-readable display

Signed-off-by: dmesser <dmesser@redhat.com>
Co-authored-by: dmesser <dmesser@redhat.com>
2024-10-21 17:12:57 +00:00
OpenShift Cherrypick Robot
b19ec20fb6 [redhat-3.13] build(deps): bump cookie and socket.io in /config-tool/pkg/lib/editor (#3351)
build(deps): bump cookie and socket.io in /config-tool/pkg/lib/editor

Bumps [cookie](https://github.com/jshttp/cookie) and [socket.io](https://github.com/socketio/socket.io). These dependencies needed to be updated together.

Updates `cookie` from 0.4.2 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.4.2...v0.7.2)

Updates `socket.io` from 4.6.1 to 4.8.0
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/4.6.1...socket.io@4.8.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-21 14:11:26 +00:00
OpenShift Cherrypick Robot
1ba004e4c0 [redhat-3.13] notifications: fetch autoprune tags with multiple policies for image expiry notification (PROJQUAY-8117) (#3345)
* notifications: fetch autoprune tags with multiple policies for image expiry notification(PROJQUAY-8117)

* don't fetch notifications if tags expiry is greater than notification days + add tests

---------

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
2024-10-18 20:55:05 +00:00
OpenShift Cherrypick Robot
3a9984f399 [redhat-3.13] autoprune: order policies by method before execution (PROJQUAY-8104) (#3336)
autoprune: order policies by method before execution (PROJQUAY-8104)

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
2024-10-16 21:45:12 +00:00
OpenShift Cherrypick Robot
785a8bd6c0 [redhat-3.13] validator: Remove logging of database password (PROJQUAY-8059) (#3335)
validator: Remove logging of database password (PROJQUAY-8059) This removes the logging of database password when debugging is enabled. Also adds additional debug statements, particularly when accessing storage.

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
2024-10-16 14:47:30 -04:00
OpenShift Cherrypick Robot
eb6f9583e2 [redhat-3.13] build(deps): bump cookie and express in /web (#3319)
build(deps): bump cookie and express in /web

Bumps [cookie](https://github.com/jshttp/cookie) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `cookie` from 0.6.0 to 0.7.1
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.6.0...v0.7.1)

Updates `express` from 4.21.0 to 4.21.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/4.21.1/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.0...4.21.1)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 18:13:20 +00:00
OpenShift Cherrypick Robot
63dbac679d [redhat-3.13] ui: add entry for robot federation config (PROJQUAY-8050) (#3330)
* ui: add entry for robot federation config (PROJQUAY-8050)

adding entry for showing description in the UI for robot federation config changes


---------

Co-authored-by: Syed <syed@apache.org>
2024-10-15 12:20:30 -04:00
OpenShift Cherrypick Robot
4b710091af [redhat-3.13] autoprune: fix tags returned by autoprune worker (PROJQUAY-8070) (#3321)
* autoprune: fix tags returned by autoprune worker (PROJQUAY-8070)

* fixing tests

* moving limit and offset to db_regex_search

* adding test cases

---------

Co-authored-by: Sunandadadi <sunanda.3094@gmail.com>
2024-10-11 16:52:54 +00:00
OpenShift Cherrypick Robot
39f12c891a [redhat-3.13] build(deps): bump golang.org/x/crypto from 0.25.0 to 0.28.0 in /config-tool (#3312)
build(deps): bump golang.org/x/crypto in /config-tool

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.25.0 to 0.28.0.
- [Commits](https://github.com/golang/crypto/compare/v0.25.0...v0.28.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-09 12:00:37 -04:00
OpenShift Cherrypick Robot
2f60bf82e4 [redhat-3.13] build(deps-dev): bump webpack from 5.88.2 to 5.95.0 in /config-tool/pkg/lib/editor (#3300)
build(deps-dev): bump webpack in /config-tool/pkg/lib/editor

Bumps [webpack](https://github.com/webpack/webpack) from 5.88.2 to 5.95.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.88.2...v5.95.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-08 14:42:52 -04:00
OpenShift Cherrypick Robot
431554e323 [redhat-3.13] nginx: Increase the number and size of proxy buffers (PROJQUAY-6950) (#3306)
* nginx: Increase the number and size of proxy buffers (PROJQUAY-6950) From [nginx documentation](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffering):

> When buffering is enabled, nginx receives a response from the proxied server as soon as possible, saving it into the buffers set by the proxy_buffer_size and proxy_buffers directives.
> If the whole response does not fit into memory, a part of it can be saved to a temporary file on the disk.
> Writing to temporary files is controlled by the proxy_max_temp_file_size and proxy_temp_file_write_size directives.
>
> When buffering is disabled, the response is passed to a client synchronously, immediately as it is received. nginx will not try to read the whole response from the proxied server.
> The maximum size of the data that nginx can receive from the server at a time is set by the proxy_buffer_size directive.

By default, the value of `proxy_buffer_size` directive, if not set in the nginx configuration, is equal to one memory page which on most platforms equals 4 KiB of memory. When `FEATURE_PROXY_STORAGE` is turned on and STS driver is used, the size of headers reaches that limit of 4 KiB and, if it surpasses it, nginx will error out and will not process the request. With this PR we set the buffers to an adequate size so that proxy requests are properly processed by nginx.

* Add additional nginx directive to make buffers work

---------

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
2024-10-04 15:34:05 -04:00
OpenShift Cherrypick Robot
1494b0bfc3 [redhat-3.13] Revert "build(deps): bump stripe from 5.5.0 to 11.0.0 (#3293)" (#3305)
Revert "build(deps): bump stripe from 5.5.0 to 11.0.0 (#3293)"

This reverts commit 212cb80741.

Co-authored-by: harishsurf <hgovinda@redhat.com>
2024-10-04 11:19:49 -04:00
OpenShift Cherrypick Robot
ab421ac38f [redhat-3.13] logs: Audit export logs requests (PROJQUAY-7679) (#3298)
* logs: Audit export logs requests (PROJQUAY-7679) We add the ability to audit export logs requests that were previously not tracked.

* Add UI elements to properly render new audit log

* Truncate date/time column on exterme zooms

* Add initdb.py entries

* Fix migration and add test db data

* Add test database and fix migration paths

* Changed logging mechanism to grab raised exceptions

* Fix improper import

* Add date/time timestamp to saved metadata

* Change message on export logs screen in UI

* Changed message in old UI as well

* Change log description in new UI too

* Simplify call logic and add additonal information to logged errors

---------

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>
2024-10-03 21:08:09 +00:00
OpenShift Cherrypick Robot
b4adf2073a [redhat-3.13] build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /config-tool (#3292)
build(deps): bump google.golang.org/protobuf in /config-tool

Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-03 20:20:53 +00:00
OpenShift Cherrypick Robot
6406709baf [redhat-3.13] build(deps): bump body-parser and express (#3288)
build(deps): bump body-parser and express

Bumps [body-parser](https://github.com/expressjs/body-parser) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `body-parser` from 1.17.2 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/body-parser/compare/1.17.2...1.20.3)

Updates `express` from 4.19.2 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.2...4.20.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-03 15:39:16 -04:00
OpenShift Cherrypick Robot
0a4cf2cb5a [redhat-3.13] build(deps): bump stripe from 5.5.0 to 11.0.0 (#3296)
build(deps): bump stripe from 5.5.0 to 11.0.0

Bumps [stripe](https://github.com/stripe/stripe-python) from 5.5.0 to 11.0.0.
- [Release notes](https://github.com/stripe/stripe-python/releases)
- [Changelog](https://github.com/stripe/stripe-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/stripe/stripe-python/compare/v5.5.0...v11.0.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-03 13:44:04 -04:00
OpenShift Cherrypick Robot
131fa686d2 [redhat-3.13] build(deps-dev): bump webpack from 5.76.0 to 5.95.0 in /web (#3285)
build(deps-dev): bump webpack from 5.76.0 to 5.95.0 in /web

Bumps [webpack](https://github.com/webpack/webpack) from 5.76.0 to 5.95.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.76.0...v5.95.0)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-03 12:56:25 -04:00