GitLab

Fix Amazon S3 storage not work

* add get GC candidate

select non referenced blobs from table blob and exclude the ones in the time windows.
Signed-off-by: wang yan <wangyan@vmware.com>

fix(codecov):add ignore configuration

- ignore all md files
- ignore all yaml files
- ignore non source code folders: docs,api,make,contrib,tests,tools
- ignore source code vendor folder: src/vendor
- ignore folders for auto-generated code: "src/server/v2.0/models" and "src/server/v2.0/restapi"
Signed-off-by: Steven Zou <szou@vmware.com>

feat: add p2p preheat policy dao and manager(#12286)

Signed-off-by: chlins <chlins.zhang@gmail.com>

The Chartmuseum S3 client need set an Env variable
Ref: https://github.com/helm/chartmuseum/issues/280

Signed-off-by: DQ <dengq@vmware.com>

feat(preheat):add artifact filters for preheat policy

chore(trivy): Bump up Trivy adapter to v0.12.0

- add new selector based on vulnerability severity criteria
- add new selector based on signature(signed) criteria
- do change to the select factory method definition
- do changes to selector.Candidate model
- add preheat policy filter interface and default implementation
- add UT cases to cover new code
Signed-off-by: Steven Zou <szou@vmware.com>

misspelling

* handle blob status chanage in put blob middlware

After blob is uploaded success, the middleware will update the blob status accordingly.
Signed-off-by: wang yan <wangyan@vmware.com>

Upgrade aws-sdk-go to 1.32.5 for OIDC support

The new version of the adapter service improves the Redis connection pool
management. In the previous versions a new connection pool was created for
each scan job, which might negatively impact the performance and resources
utilisation.

There is also a bug fix in Trivy v0.9.1 to properly handle the debug mode.
Signed-off-by: Daniel Pacak <pacak.daniel@gmail.com>

feat(preheat):add preheat job

- implement the preheat job
- add relevant UT case
- fix issue #12285
Signed-off-by: Steven Zou <szou@vmware.com>

feat: add p2p preheat policy model

Signed-off-by: chlins <chlins.zhang@gmail.com>

feat(preheat):add preheat drivers

- define preheat driver interface
- implement dragonfly driver
- implememt kraken driver
- add related UT cases with testify framework
- fix #10870 #10871
- some code are picked up from the original P2P feat branch
Signed-off-by: Steven Zou <szou@vmware.com>

feat(certs): install internal tls ca from /etc/harbor/ssl dir

Replace all whitelist with allowlist

Closes #10222
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: AllForNothing <sshijun@vmware.com>

Versions of the Go AWS SDK newer than 1.23.13 support OIDC in EKS.
Running Harbor on EKS doesn't require keys in a configmap for the
registry to authenticate to S3 when using the newer library.
Signed-off-by: Phil Fenstermacher <pcfens@wm.edu>

Implement task and execution manager

* update blob controller & manager

1, add two more attributes, version, update_time and status
2, add delete and fresh update time method in blob mgr & ctr.
Signed-off-by: wang yan <wangyan@vmware.com>

Implement task and execution manager
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Add API E2E pytest of GC with untag flag enabled

1. Fix issue of keyword Go Into Repo, the verification logic could be more strict;
2. Add API E2E pytest of GC with untag flag enabled;
3. Add sleep in test_user_view_logs.py for delete log ocurred;
4. Test Case - Tag CRUD is not stable. Although add button was clicked, but the tag was'nt added successfully.
Signed-off-by: danfengliu <danfengl@vmware.com>

Signed-off-by: wang yan <wangyan@vmware.com>

Signed-off-by: wang yan <wangyan@vmware.com>

Signed-off-by: wang yan <wangyan@vmware.com>

1, add two more attributes, update_time and status
2, add delete and fresh update time method in blob mgr & ctr.
Signed-off-by: wang yan <wangyan@vmware.com>

Fix DOCKERIMASES and SWAAGER_IMAGE_BUILD_CMD typos in Makefiles

updated roadmap

Signed-off-by: xaleeks <xalex@vmware.com>

* move send error to source lib

Move the sendError into library in case the cycle dependency as regsitry and core are now the consumers.
Signed-off-by: wang yan <wangyan@vmware.com>