GitLab

internal tls config upgrade is not included in template, this pr is to add it.
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

The harbor-db pod takes a long time to terminate. Using an `exec`
command in the entrypoint ensures that Unix signals reach the
postgres process [1].

[1] https://docs.docker.com/engine/reference/builder/#exec-form-entrypoint-example

Signed-off-by: Stefan Nica <snica@suse.com>

We should use a golang that isn't having security issues.

This includes:
* go1.14.6 (released 2020/07/16) includes fixes to the go command, the
compiler, the linker, vet, and the database/sql, encoding/json,
net/http, reflect, and testing packages. See the Go 1.14.6 milestone on
our issue tracker for details.

* go1.14.7 (released 2020/08/06) includes security fixes to the
encoding/binary package. See the Go 1.14.7 milestone on our issue
tracker for details (CVE-2020-16845)
Signed-off-by: Dirk Mueller <dirk@dmllr.de>
Signed-off-by: Dirk Mueller <dmueller@suse.com>

it should be https
Signed-off-by: DQ <dengq@vmware.com>

Implement the icon API to get the icon of artifact
Signed-off-by: Wenkai Yin <yinw@vmware.com>

To void trivy can not start issue
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: DQ <dengq@vmware.com>

The latest `photon:2.0` does not include `groupadd` and `useradd`
we need to install `shadow` package which includes these commands.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Notably missing is the "log" image, which still uses sudo.
Signed-off-by: Tianon Gravi <tianon@infosiftr.com>

Fixes #11885
This part will not by default be packaged into release.
A README.md will be added in another commit.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

The export is dynamical now because of introduce of internal TLS
Signed-off-by: DQ <dengq@vmware.com>

db_max_open_comms should be 1000 if its value between 100 and 1000
Signed-off-by: DQ <dengq@vmware.com>

add related file, config, command to enabled https for portal
Signed-off-by: DQ <dengq@vmware.com>

the port should be flexible depend on the internal tls
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

Signed-off-by: wang yan <wangyan@vmware.com>

Signed-off-by: He Weiwei <hweiwei@vmware.com>

To fetch vulnerability database updated time of the Clair had moved to
the Clair adapter so removes the initialization of clair db in the core.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

1. Change down version to list to accept multi verstion value
2. Update search function use BFS to find migration path
2. Add test case
Signed-off-by: DQ <dengq@vmware.com>

Suport filtering registries by type in listing registry API
Signed-off-by: Wenkai Yin <yinw@vmware.com>

The Chartmuseum S3 client need set an Env variable
Ref: https://github.com/helm/chartmuseum/issues/280

Signed-off-by: DQ <dengq@vmware.com>

Closes #10222
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Fix #12259
Signed-off-by: Max Rosin <git@hackrid.de>

* Add api to delete blob and manifest

Enable the capability of registry controller to delete blob and manifest
Signed-off-by: wang yan <wangyan@vmware.com>

This patch remove the trailing space of the hostname introduced by
`hostname -i`.

The trailing space will cause resolution error after this patch is
applied to glibc in photon:
https://github.com/vmware/photon/blob/2.0/SPECS/glibc/glibc-fix-CVE-2019-10739.patch

Signed-off-by: Daniel Jiang <jiangd@vmware.com>

Signed-off-by: He Weiwei <hweiwei@vmware.com>

set timeout to 900
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: DQ <dengq@vmware.com>

Upgrade chartmuseum version 0.12.0
Signed-off-by: DQ <dengq@vmware.com>

Signed-off-by: AllForNothing <sshijun@vmware.com>

Mount gcs key to registryctl
Signed-off-by: DQ <dengq@vmware.com>

this shared ca will mount to all harbor components
Signed-off-by: DQ <dengq@vmware.com>

use popen replace check_all
Signed-off-by: DQ <dengq@vmware.com>

if absolute url is enabled return true else set it to false
Signed-off-by: DQ <dengq@vmware.com>

Remove to avoid replication access core from external_url issue
Signed-off-by: DQ <dengq@vmware.com>

Since `prepare` generates the certs as needed during installation, these
certs should not exist in the repo.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

cert,key,mintls should in the same context
Signed-off-by: DQ <dengq@vmware.com>