Infrastructure/zot
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2024-12-16 21:56:37 -05:00
Code Issues Activity
774 commits 7 branches 108 tags 208 MiB
Commit graph

135 commits

Author SHA1 Message Date
Ramkumar Chinchani
b919279eef
dco: enable DCO checks only on PRs (#812) 
GitHub allows a "Squash and Merge" model which does an automatic rebase
but commit GPG signature is from GitHub. So disable DCO checks only when
merging.

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-09-22 20:13:53 +03:00
Ramkumar Chinchani
e5decaa47e fix dependabot alerts 
https://github.com/project-zot/zot/pull/800
https://github.com/project-zot/zot/pull/801
https://github.com/project-zot/zot/pull/805

https://github.com/project-zot/zot/security/dependabot/26
https://github.com/project-zot/zot/security/dependabot/30

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-09-21 16:07:04 -07:00
Ramkumar Chinchani
7804ba7ce0
fix dependabot alerts (#795) 
https://github.com/project-zot/zot/pull/778
https://github.com/project-zot/zot/pull/780
https://github.com/project-zot/zot/pull/781
https://github.com/project-zot/zot/pull/782
https://github.com/project-zot/zot/security/dependabot/27
https://github.com/project-zot/zot/security/dependabot/29

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-09-21 10:04:08 +03:00
Roxana Nemulescu
3bccea7aa2 oras fix: 
newer version of oras: https://github.com/oras-project/oras/releases/tag/v0.14.0
	rename the --manifest-config to --config for push command

Signed-off-by: Roxana Nemulescu <roxana.nemulescu@gmail.com>
 2022-08-30 21:39:16 +03:00
Andrei Aaron
5dda12b6a7 Fix syntax errors in benchmark and cluster workflows 
Signed-off-by: Andrei Aaron <andaaron@cisco.com>
 2022-08-30 19:20:56 +03:00
Roxana Nemulescu
8ed34608e4 GetCatalog() - Populate _catalog with mix of many small, medium and large images 
Signed-off-by: Roxana Nemulescu <roxana.nemulescu@gmail.com>
 2022-08-30 16:48:38 +03:00
Ramkumar Chinchani
f9f388f32e fix artifact upload action in github workflow 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-08-24 10:04:34 +03:00
Ramkumar Chinchani
5c01c4eab4
support OCI image index at manifest endpoint (#638) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-08-20 11:18:48 +03:00
Nicol Draghici
a702a2377e Remove AllowReadOnly and ReadOnly 
Signed-off-by: Nicol Draghici <idraghic@cisco.com>

Remove check and set header every time

Signed-off-by: Nicol Draghici <idraghic@cisco.com>
 2022-08-10 14:27:21 -07:00
Andrei Aaron
903460c55c
Fix permissions for image sync and stale workflows 
Looks like read|write is not a correct value:
https://github.com/project-zot/zot/actions/runs/2743961177
https://github.com/project-zot/zot/actions/runs/2743965531

Write should include both, so let's try to use that.

Signed-off-by: Andrei Aaron <andaaron@cisco.com>
 2022-07-27 17:44:08 +00:00
Lisca Ana-Roberta
87fc941b3c image level lint: enforce manifest mandatory annotations 
closes #536

Signed-off-by: Lisca Ana-Roberta <ana.kagome@yahoo.com>
 2022-07-27 11:48:04 +03:00
Ramkumar Chinchani
3d72dad507 fix dependabot alerts 
https://github.com/project-zot/zot/pull/674
https://github.com/project-zot/zot/pull/676
https://github.com/project-zot/zot/pull/677
https://github.com/project-zot/zot/pull/678

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-27 08:48:51 +03:00
Andrei Aaron
7182e426a7 Fix typos in workflow permissions 
Signed-off-by: Andrei Aaron <andaaron@cisco.com>
 2022-07-26 10:40:51 -07:00
Ramkumar Chinchani
4a3c0073b7 add a github workflow to report branch coverage 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-20 22:43:55 -07:00
Ramkumar Chinchani
317064ffc9 fix dependabot alerts 
https://github.com/project-zot/zot/pull/647
https://github.com/project-zot/zot/pull/648
https://github.com/project-zot/zot/pull/649
https://github.com/project-zot/zot/pull/650
https://github.com/project-zot/zot/pull/651
https://github.com/project-zot/zot/pull/652
https://github.com/project-zot/zot/pull/653
https://github.com/project-zot/zot/pull/656

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-18 14:59:27 -07:00
Andrei Aaron
43160dcc43 Update to graphql 1.17.13 
We encountered some problems with using the existing folder structure,
but it looks like running the tooling with the latest versions works after
we regenerated the project using 'gql init' and refactoring to separate
the login previously in resolvers.go.

- the autogenerated code is now under the gql_generated folder
- the file resolvers.go now contains only the code which is not
rewritten by the gqlgen framework
- the file schema.resolvers.go is rewritten when gqlgen runs,
and we'll only keep there the actual resolvers matching query names
Changes we observed to schema.resolvers.go when gqlgen runs include
reordering methods, and renaming function parameters to match the
names used in schema.graphql
- we now have a gqlgen.yaml config file which governs the behavior of
gqlgen (can be tweaked to restructure the folder structure of the
generated code in the future)

Looks like the new graphql server has better validation
1 Returns 422 instead of 200 for missing query string - had to update tests
2 Correctly uncovered an error in a test for a bad `%` in query string.

As as result of 2, a `masked` bug was found in the way we check if images are
signed with Notary, the signatures were reasched for with the media type
of the image manifest itself instead of the media type for notation.
Fixed this bug, and improved error messages.
This bug would have also been reproducible with main branch if the bad `%`
in the test would have fixed.

Updated the linter to ignore some issues with the code which is
always rewritten when running:
`go run github.com/99designs/gqlgen@v0.17.13 generate`

Add a workflow to test gqlgen works and has no uncommitted changes

Signed-off-by: Andrei Aaron <andaaron@cisco.com>
 2022-07-18 12:55:40 -07:00
Ramkumar Chinchani
76b811b029 harden github action/workflow perms 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-18 01:05:09 -07:00
Ramkumar Chinchani
595e1bca59 fix dependabot alerts 
https://github.com/project-zot/zot/pull/624
https://github.com/project-zot/zot/pull/625
https://github.com/project-zot/zot/pull/626
https://github.com/project-zot/zot/pull/627
https://github.com/project-zot/zot/pull/628

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-15 12:03:08 -07:00
Ramkumar Chinchani
19434af3c4 fix dependabot.yml 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-13 13:18:01 -07:00
Ramkumar Chinchani
dc97096502 restrict workflow action permissions 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-13 11:34:57 -07:00
Andreea-Lupu
8da34d5751 Rename push token 
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2022-07-13 09:05:06 -07:00
Petu Eusebiu
01d742718f ci/cd: fix oras cli flags after it got updated 
installing notation and oras not needed anymore

Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-07-12 10:02:51 -07:00
Andreea-Lupu
26f85ab195 Update automatically helm chart when publish a new release for zot 
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2022-07-11 11:27:05 -07:00
Ramkumar Chinchani
9cfed4bb46 Create scorecards.yml 
Add ossf/scorecards action

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-07-10 22:32:00 -07:00
Alex Stan
ada21ed842 Manage builds with different combinations of extensions 
Files were added to be built whether an extension is on or off.
New build tags were added for each extension, while minimal and extended disappeared.

added custom binary naming depending on extensions used and changed references from binary to binary-extended

added automated blackbox tests for sync, search, scrub, metrics

added contributor guidelines

Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro>
 2022-06-30 09:53:52 -07:00
Petu Eusebiu
a04f870a22 Periodically sync golang image from dockerhub to ghcr.io 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-06-16 23:42:50 -07:00
Alex Stan
66484c8ca9 changed go version to 1.18 
Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro>
 2022-06-09 04:38:06 -07:00
Petu Eusebiu
d0b52612a2 ci/cd: Fix arm builds, use distroless final image 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-05-30 10:38:55 -07:00
Petu Eusebiu
ad08c08986 cluster: use zb source ips pool to distribute requests to cluster 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-05-24 15:19:23 -07:00
Shivam Mishra
36c9631000 ext: use distribution spec route prefix for extension api 
Following the spec defined here https://github.com/opencontainers/distribution-spec/tree/main/extensions

Signed-off-by: Shivam Mishra <shimish2@cisco.com>
 2022-05-22 16:35:16 -07:00
Ramkumar Chinchani
287ac05ddc update linter version to 1.46.2 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-05-20 11:53:56 -07:00
Catalin Hofnar
7c477f5ba3 Changed Github workflow to cache dependencies 
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com>
 2022-05-19 09:44:52 -07:00
Petu Eusebiu
799eab63a9 clustering: Give time to minio container to come up 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-05-18 10:35:26 -07:00
Ramkumar Chinchani
e1a1bdff1a codeql: move from v1 to v2 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-04-27 11:58:46 -07:00
Alex Stan
d325c8b5f4 Fix problems signaled by new linter version v1.45.2 
PR (linter: upgrade linter version #405) triggered lint job which failed
with many errors generated by various linters. Configurations were added to
golangcilint.yaml and several refactorings were made in order to improve the
results of the linter.

maintidx linter disabled

Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro>
 2022-04-27 09:55:44 -07:00
Petu Eusebiu
ad90a4975f Migrate from docker/build-push-action to stacker-build-push-action 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-04-19 10:49:21 -07:00
Roxana Nemulescu
efc55b013e Add reading tests for zb binary: read-only tests and mixed read-only tests 
Add mixed write-only tests
Add mixed read-write tests

Signed-off-by: Roxana Nemulescu <roxana.nemulescu@gmail.com>
 2022-04-13 13:22:36 -07:00
Catalin Hofnar
475d97b1ad Separate make commands that require sudo 
Reworked privileged cert test so it runs in Go by moving make logic to Go logic

Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com>
 2022-04-05 10:12:43 -07:00
Ramkumar Chinchani
ceb8c8ae6f demos: initial commit of asciinema demos 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-04-04 13:52:55 -07:00
Alexei Dodon
ad519e2d3e Leave zot repositories in a consistent state after zot hits fd limit closes #359 
Signed-off-by: Alexei Dodon <adodon@cisco.com>
 2022-03-31 13:25:15 -07:00
Ramkumar Chinchani
cff3be638f ci/cd: scan released images with trivy scanner 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-03-17 19:13:49 -07:00
Ramkumar Chinchani
e767cb456c fix issue and PR templates 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-03-17 11:10:56 -07:00
Petu Eusebiu
fa27e22404 Added clustering github workflow 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2022-03-09 10:54:17 -08:00
laurentiuNiculae
aee94218aa remove root access for skopeo in Makefile 
Signed-off-by: laurentiuNiculae <themelopeus@gmail.com>
 2022-03-08 10:39:22 -08:00
Ramkumar Chinchani
3ada6af0de tls: set min version to 1.2 and restrict cipher suites 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-03-02 10:03:50 -08:00
Ramkumar Chinchani
408f043f1e codecov: upgrade from v1 to v2 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-25 09:23:57 -08:00
Ramkumar Chinchani
25bacd5aec ci/cd: add a workflow to detect/close stale PRs and issues 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-24 10:55:47 -08:00
Ramkumar Chinchani
4ddfd059b6 ci/cd: count lines of code 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-09 17:00:52 -08:00
Ramkumar Chinchani
73027fbce5 ci/cd: fix build/test workflow 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-08 22:31:42 -08:00
Ramkumar Chinchani
40d6174c1e ci/cd: restore part of github workflow for PRs 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-08 12:03:07 -08:00
Ramkumar Chinchani
298b966eab build: parameterize arch builds 
Build zot artifacts for multiple os and arch.
[linux, amd64] - common case
[linux, arm64] - raspberry pi
[darwin, amd64] - Intel-based macs
[darwin, arm64] - Arm-based macs

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-08 08:26:58 -08:00
Ramkumar Chinchani
c73e71b018 ci/cd: add a basic push-pull testing using client tools 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-07 10:03:24 -08:00
Ramkumar Chinchani
8d6b36a61b bench: fix benchmark test data 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-02-02 13:31:41 -08:00
Ramkumar Chinchani
f9d14d7f94 ci/cd: add a license checker 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-30 12:04:49 -08:00
Ramkumar Chinchani
e0a1a82890 coverage: add failure injection framework 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-28 08:56:00 -08:00
Alexei Dodon
c9a81baa10 Renamed zot-exporter to zxp and added its image to zot release 
Signed-off-by: Alexei Dodon <adodon@cisco.com>
 2022-01-19 10:31:37 -08:00
Ramkumar Chinchani
cec66f6bc2 ci/cd: update continuous benchmark version 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-18 09:54:15 +02:00
Ramkumar Chinchani
6a2529f08f ci/cd: add continuous benchmark action 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-14 10:10:55 -08:00
Ramkumar Chinchani
4896adad1b build: split functionality into separate binaries 
zot: registry server
zli: zot cli to interact with the zot registry
zui: zot ui (proposed)
zb: zot benchmark (proposed)

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-11 11:48:18 -08:00
Ramkumar Chinchani
3177f87403 ci/cd: upgrade golang to 1.17 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-01-07 09:46:50 -08:00
Ramkumar Chinchani
ac3801ea2d lint: upgrade golangci-lint 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-20 17:20:35 -08:00
Ramkumar Chinchani
fc4a34d43a ci/cd: include tag name in release docker builds 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-16 09:09:43 -08:00
Ramkumar Chinchani
50a0831f1b ci/cd: fix github workflow to upload release binaries 
Fixes issue #332

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-16 09:09:43 -08:00
Ramkumar Chinchani
914cf5c356 ci/cd: fix arch builds to pick correct file 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-08 21:16:19 -08:00
Ramkumar Chinchani
b4c8d8351a
Create PULL_REQUEST_TEMPLATE.md 2021-12-07 21:22:52 -08:00
Ramkumar Chinchani
0e03c88e51 Update issue templates 2021-12-07 21:17:44 -08:00
Ramkumar Chinchani
96226af869 move references to zotregistry.io and project-zot 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-05 10:52:27 -08:00
Ramkumar Chinchani
304a68334e ci/cd: build for arm64 arch 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-03 15:30:49 -08:00
Ramkumar Chinchani
e42e42a2cc artifacts: initial support for artifacts/notaryv2 spec 
https://github.com/oras-project/artifacts-spec
https://github.com/notaryproject/notaryproject

Fixes issue #264

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-12-01 18:55:39 -08:00
Ramkumar Chinchani
4d50ad2bb1 release: revert changelog generator workflow 
revert 061dfb3

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-11-15 11:30:29 -08:00
Ramkumar Chinchani
83e0bbd79b release: update changelog generator version 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-11-15 11:30:29 -08:00
Petu Eusebiu
9c568c0ee2 storage: add s3 backend support (without GC and dedupe) 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2021-11-15 08:09:00 -08:00
Alexei Dodon
8e4d828867 Implement an API for performance monitoring 
Signed-off-by: Alexei Dodon <adodon@cisco.com>
 2021-11-12 11:14:10 -08:00
Ramkumar Chinchani
061dfb333b release: add github action to automatically generate changelog 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-11-12 09:35:10 -08:00
Ramkumar Chinchani
0d28feef3e workflows: change "master" to "main" 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-10-21 12:24:04 -07:00
Petu Eusebiu
19003e8a71 Added new extension "sync" 
Periodically poll registries and pull images according to sync's config
Added sync on demand, syncing when clients asks for an image which
zot doesn't have.

Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2021-10-21 10:32:46 -07:00
Ramkumar Chinchani
50cfcbf34a dco: add workflow for DCO check 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-10-14 10:36:16 -07:00
Ramkumar Chinchani
26926ad4c2 go.mod: update modules 2021-08-25 11:51:23 -07:00
Ramkumar Chinchani
b686a48812 ci/cd: fix github workflow for "minimal" image 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-07-01 11:15:44 -07:00
Ramkumar Chinchani
30c562be6b ci/cd: build a "minimal" container image 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2021-07-01 10:07:08 -07:00
Petu Eusebiu
1c1e7358f7 Migrate builds from travis to github actions 2021-06-29 13:58:39 -07:00
Ramkumar Chinchani
f29c454052
Create codeql-analysis.yml 2021-06-24 22:07:30 -07:00
Petu Eusebiu
52a7929411 ci/cd: build and push zot container images 
to github's container registry, closes #188
 2021-06-07 16:44:15 -07:00
Shivam Mishra
fb8c4fb840 ci/cd: changed distrbution spec branch to main from master 2021-04-19 10:18:12 -07:00
Shivam Mishra
8e16c1c1c6 ci/cd: add github action to validate conformance 
Resolves #173
 2021-01-28 15:49:48 -08:00