dd1c73cadd
build(workflows): make sure we install the crio package matching the correct ubuntu version ( #2048 )
...
The GH runner with name ubuntu-latest is at the moment running Ubuntu 22.04,
The workflow was picking the package for Ubuntu 20.04
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-11-15 10:13:20 -08:00
f867819d63
ci(nightly): add prometheus kind test ( #1940 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-11-15 09:51:03 -08:00
06e7b0b579
chore: fix dependabot alerts ( #2040 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-15 16:02:32 +02:00
dd079bf9a3
fix: TestPopulateStorageMetrics fails occasionally in CI ( #2042 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-11-14 16:22:24 -08:00
272eb7cc43
feat(ldap): add option to load ldap from file ( #1778 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-11-14 16:21:36 -08:00
b2a9239c03
docs: update example documentation to use the current authz structure ( #2039 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-11-13 09:59:02 -08:00
38f10af8cf
docs: update graphql examples to match current implementation ( #2038 )
...
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-11-13 09:58:15 -08:00
3492f0aad3
build(zui): add new makefile variable for the zui repo ( #2030 )
...
To enable building zui from forks in case of local testing
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-11-13 09:57:51 -08:00
8609900406
chore: fix dependabot alerts ( #2028 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-13 10:48:20 +02:00
4ed4661fc1
fix(metadb): populate image pushTimestamp if it's 0 value ( #2003 )
...
in the case of an already existing meta db without pushTimestamp field
its value would be 0 until image is updated, check for zero values and update them
with time.Now() so that retention logic won't remove them.
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-11-09 09:32:56 -08:00
16def78d84
fix: update-licenses make target does not use LC_ALL=C locale on some machines ( #2023 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-11-09 09:31:08 -08:00
3ddfd655ea
chore: fix dependabot alerts ( #2019 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-11-09 09:30:16 -08:00
2db6e86fb5
fix(cov): coverage boltdb+dynamo ( #2018 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-11-08 13:37:52 -08:00
c9cc5b9acb
test(meta): add push-pull-read tests for metadb ( #2022 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-11-08 13:35:51 -08:00
7f52f58e3c
fix(routes): fix cors headers for api keys and logout route ( #1984 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-11-07 10:11:40 -08:00
ff16e4c3db
fix(storage): handle pathnotfound for walk call ( #2006 )
...
Signed-off-by: a <a@tuxpa.in >
2023-11-07 01:47:12 -08:00
d5065513f5
feat: add support for oci1.1 cosign signatures(using referrers) ( #1963 )
...
- Cosign supports 2 types of signature formats:
1. Using tag -> each new signature of the same manifest is
added as a new layer of the signature manifest having that
specific tag("{alghoritm}-{digest_of_signed_manifest}.sig")
2. Using referrers -> each new signature of the same manifest is
added as a new manifest
- For adding these cosign signature to metadb, we reserved index 0 of the
list of cosign signatures for tag-based signatures. When a new tag-based
signature is added for the same manifest, the element on first position
in its list of cosign signatures(in metadb) will be updated/overwritten.
When a new cosign signature(using referrers) will be added for the same
manifest this new signature will be appended to the list of cosign
signatures.
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-11-06 14:09:39 -08:00
6a66a9b9b4
fix(metadb): fix unexpected panic when dereferencing map fields ( #1993 )
...
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
2023-11-02 14:35:49 -07:00
9074f8483b
feat(retention): added image retention policies ( #1866 )
...
feat(metaDB): add more image statistics info
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-11-01 09:16:18 -07:00
a79d79a03a
fix: more accurate storage metrics after zot restart ( #1972 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-11-01 09:09:21 -07:00
3e6053e1db
chore: fix dependabot alerts ( #1986 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-30 14:47:11 -07:00
56ad9e6707
refactor(metadb): improve UX by speeding up metadb serialize/deserialize ( #1842 )
...
Use protocol buffers and update the metadb interface to better suit our search needs
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com >
Co-authored-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-30 13:06:04 -07:00
f34af3cb3f
fix: Makefile 'run' target should not depend on running tests ( #1969 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-27 10:40:12 -07:00
f3bb68ae15
fix: ci 'TLS check' job is broken ( #1970 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-27 10:39:04 -07:00
d2fbd273ba
fix: tests refactoring ( #1950 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-26 11:20:39 +03:00
a3d8202345
chore: fix dependabot alerts ( #1961 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-24 12:17:59 +03:00
4cb7a6c755
ci: use runners provided by CNCF ( #1946 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-21 12:07:32 +03:00
7ab2032a21
feat(api): repair corrupted blobs when pushed again ( #1927 )
...
CheckBlob() returns ErrBlobNotFound on corrupted blobs
closes #1922
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-20 13:02:31 -07:00
1675f30d4a
ci: update golangci-lint version ( #1834 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-20 17:27:04 +03:00
7ce5a74598
feat: use the "zot" namespace for the authentication url ( #1947 )
...
Some other minor fixes for swaggo comments (indentation and a bad description)
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-10-20 15:30:56 +03:00
a345ba0823
fix: metrics should be protected behind authZ ( #1895 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-20 10:33:26 +03:00
a44ca578a1
fix(tests): update imagetrust tests to use mock service ( #1929 )
...
- use secretsManagerMock and secretsManagerCacheMock to avoid failing
because of "already exists" error when running multiple times
image_trust_test on the same localstack instance
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-10-18 13:25:29 +03:00
7f6534a52d
fix(sessions): periodically cleanup expired sessions ( #1939 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-16 20:03:42 -07:00
d60786c3b2
chore: fix dependabot alerts ( #1942 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-16 15:19:26 -07:00
12227b4484
fix: quick metrics setup in kind with prometheus ( #1897 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-16 11:51:00 +03:00
fc2380b57b
fix: add support for uploaded index when signing using notation ( #1882 )
...
ci(notation): update to latest notation version
fix(sync): add layers info when syncing signatures
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-10-12 18:45:20 -07:00
458d40fb48
fix(nightly): increase nightly delays and timeouts ( #1877 )
...
change the startup dedupe blackbox test source image with a lighter one
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-12 16:42:07 +03:00
a91c0c5cfe
fix(authn): create sessions only if UI header value is supplied ( #1919 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-12 16:37:55 +03:00
d1fcab421a
fix(authn): apply fail delay only if credentials/sessions are supplied ( #1920 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-12 16:32:36 +03:00
ab45356d9a
feat(ui): update UI version ( #1926 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-12 12:27:30 +03:00
04048e5ad4
fix(sync): fix data race when pinging registries by read-locking ( #1924 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-12 11:00:33 +03:00
556c0660bd
chore: fix dependabot alerts ( #1915 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-11 14:29:59 +03:00
53f97eb265
fix(cache): make dynamoDB aware of orignal/deduped blobs ( #1881 )
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2023-10-10 10:29:07 -07:00
039648a445
ci(licenses): check if licenses file is updated ( #1898 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-09 20:23:51 -07:00
ee25985c3e
chore(modules): update trivy to the tip of main ( #1901 )
...
Includes https://github.com/aquasecurity/trivy/commit/ce89d083453f2293d8176c2ac9f4efa0fdf68095
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-10-09 15:12:25 -07:00
ed775914df
chore: fix dependabot alerts ( #1911 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-09 11:35:42 -07:00
044ea85279
fix: running tests locally fails ( #1879 )
...
Signed-off-by: Alexei Dodon <adodon@cisco.com >
2023-10-05 14:34:50 +03:00
e6902b937f
chore: fix dependabot alerts ( #1893 )
2023-10-05 09:26:20 +03:00
b196369ea4
docs: add logging guidelines ( #1884 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-04 12:29:46 -07:00
0fb23848b4
chore: fix dependabot alerts ( #1885 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-10-04 12:29:31 -07:00
Andrei Aaron