Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-11-01 | Fix typos in comments and specs | George Tsiolis | |
2018-08-01 | Support multiple scopes when using authing container registry scopes | Kamil Trzciński | |
2018-07-16 | Enable frozen string in apps/services/**/*.rb | gfyoung | |
For directories application_settings --> labels. Partially addresses #47424. | |||
2018-04-10 | Verify that deploy token has valid access when pulling container registry image | Mayra Cabrera | |
2018-04-07 | Addresses database comments | Mayra Cabrera | |
- Adds a default on expires_at datetime - Modifies deploy tokens views to handle default expires at value - Use datetime_with_timezone where possible - Remove unused scopes | |||
2018-04-07 | Increase test suite around deploy tokens behavior | Mayra Cabrera | |
Also, fixes broken specs | |||
2018-04-07 | Include ProjectDeployTokens | Mayra Cabrera | |
Also: - Changes scopes from serializer to use boolean columns - Fixes broken specs | |||
2018-04-07 | Support Deploy Tokens properly without hacking abilities | Kamil Trzciński | |
2018-04-07 | Removes logic from Jwt and handle different scenarios on Gitlab::Auth | Mayra Cabrera | |
- When using 'read_repo' password and project are sent, so we used both of them to fetch for the token - When using 'read_registry' only the password is sent, so we only use that for fetching the token | |||
2018-02-02 | use Gitlab::UserSettings directly as a singleton instead of ↵ | Mario de la Ossa | |
including/extending it | |||
2017-10-10 | refactor access handling | Vratislav Kalenda | |
2017-10-08 | remove whitespace | Vratislav Kalenda | |
2017-10-08 | Issue JWT token with registry:catalog:* scope when requested by GitLab admin | Vratislav Kalenda | |
2017-08-31 | `current_application_settings` belongs on `Gitlab::CurrentSettings` | Sean McGivern | |
The initializers including this were doing so at the top level, so every object loaded after them had a `current_application_settings` method. However, if someone had rack-attack enabled (which was loaded before these initializers), it would try to load the API, and fail, because `Gitlab::CurrentSettings` didn't have that method. To fix this: 1. Don't include `Gitlab::CurrentSettings` at the top level. We do not need `Object.new.current_application_settings` to work. 2. Make `Gitlab::CurrentSettings` explicitly `extend self`, as we already use it like that in several places. 3. Change the initializers to use that new form. | |||
2017-08-07 | Rename user_can_admin? because it's more accurate | Lin Jen-Shin | |
Also fix the test because we no longer have :empty_project, just use :project is the same as before | |||
2017-05-29 | fix typo and check | Jean Praloran | |
2017-05-29 | add test and rebase | Jean Praloran | |
2017-05-29 | change ability requirement | Jean Praloran | |
2017-05-29 | add star for action scope, in order to delete image from registry | jean | |
2017-03-31 | Add test example for invalid registry access request | Grzegorz Bizon | |
2017-03-31 | Add specs for container repository factory method | Grzegorz Bizon | |
2017-03-30 | Do not allow registry requests for invalid repositories | Grzegorz Bizon | |
2017-03-30 | Create container repository on successful push auth | Grzegorz Bizon | |
Because we do not have yet two way communication between container registry and GitLab, we need to eagerly create a new container repository objects in database. We now do that after user/build successfully authenticates a push action using auth service. | |||
2017-03-29 | Add comment to container registry auth service | Grzegorz Bizon | |
Comment explains why we still have authentication without user object there. The legacy authentication mechanism should be removed in 10.0. | |||
2017-03-29 | Use container repository path inside auth service | Grzegorz Bizon | |
2017-03-23 | Rename container image model to container repository | Grzegorz Bizon | |
2017-03-23 | Fix communication between GitLab and Container Registry | Grzegorz Bizon | |
2017-03-22 | Refactor splitting container image full path | Grzegorz Bizon | |
[ci skip] | |||
2017-03-21 | Makes ContainerImages Routable | Andre Guedes | |
Conflicts: db/schema.rb | |||
2017-03-21 | Merge branch 'master' into feature/multi-level-container-registry-images | Grzegorz Bizon | |
* master: (1327 commits) Merge branch 'render-json-leak' into 'security' Merge branch 'ssrf' into 'security' Merge branch 'ssrf' into 'security' Merge branch 'fix-links-target-blank' into 'security' Merge branch '28058-hide-emails-in-atom-feeds' into 'security' Fix karma test Reset filters after click Handle Route#name being nil after an update Only add frontend code coverage instrumentation when generating coverage report fix recompile assets step in 9.0 upgrade guide to use yarn Undo explicit conversion to Integer Make level_value accept string integers Make feature spec more robust Removed d3.js from the main application.js bundle Extend compound status for manual actions specs Update css to be nice and tidy. Fix pipeline status for transition between stages add an index to the ghost column Return 404 in project issues API endpoint when project cannot be found Improve rename projects migration ... Conflicts: doc/ci/docker/using_docker_build.md spec/lib/gitlab/import_export/all_models.yml | |||
2017-02-23 | Enable Style/MutableConstant | Douwe Maan | |
2017-02-22 | Fixes broken and missing tests | Andre Guedes | |
2017-02-22 | Multi-level container image names backend implementation | Andre Guedes | |
- Adds Registry events API endpoint - Adds container_images_repository and container_images models - Changes JWT authentication to allow multi-level scopes - Adds services for container image maintenance | |||
2017-02-03 | replace `find_with_namespace` with `find_by_full_path` | Adam Pahlevi | |
add complete changelog for !8949 | |||
2016-11-09 | Merge branch 'unauthenticated-container-registry-access' into 'security' | Alejandro Rodriguez | |
Restore unauthenticated access to public container registries Fixes https://gitlab.com/gitlab-org/gitlab-ce/issues/24284 See merge request !2025 Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2016-11-09 | Merge branch 'fix-unathorized-cloning' into 'security' | Douwe Maan | |
Ensure external users are not able to clone disabled repositories. Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/23788 See merge request !2017 Signed-off-by: Rémy Coutable <remy@rymai.me> | |||
2016-09-27 | Be nice to Docker Clients talking to JWT/auth | Kamil Trzcinski | |
2016-09-20 | Improve JwtController implementation | Kamil Trzcinski | |
2016-09-16 | Improve code comments | Kamil Trzcinski | |
2016-09-16 | Rename capabilities to authentication_abilities | Kamil Trzcinski | |
2016-09-15 | Fix existing authorization specs | Kamil Trzcinski | |
2016-09-15 | Use `build_read_container_image` and use `build_download_code` | Kamil Trzcinski | |
2016-09-13 | Make result to return project and capabilities granted | Kamil Trzcinski | |
2016-09-13 | Use a permissions of user to access all dependent projects from CI jobs ↵ | Kamil Trzcinski | |
(this also includes a container images, and in future LFS files) | |||
2016-07-19 | Fix private method visibility in container registry | Grzegorz Bizon | |
2016-07-06 | Services: code style fixes, minor refactoring | Valery Sizov | |
2016-05-31 | Fix the use of CurrentSettings in ContainerRegistryAuthenticationService | Kamil Trzcinski | |
2016-05-31 | Add Application Setting to configure Container Registry token expire delay ↵ | Kamil Trzcinski | |
(default 5min) | |||
2016-05-30 | Make authentication service for Container Registry to be compatible with < ↵ | Kamil Trzcinski | |
Docker 1.11 | |||
2016-05-23 | Fix the CI login to Container Registry (the gitlab-ci-token user) | Kamil Trzcinski | |