Commit Graph

1401 Commits

Author SHA1 Message Date
miner e80b940942
add prepare migration script for 2.14.0 (#22247)
Signed-off-by: my036811 <miner.yang@broadcom.com>
2025-08-13 08:38:27 +00:00
Prasanth Baskar 221037378a
feat: Single Active Replication (#21347)
feat(replication): add Single Active Replication per policy

* Added single_active_replication field to schema & DB table
* Updated API, controller & handler to enforce single execution per policy
* Added checkbox in UI to enable/disable single_active_replication for a
  policy
* Implemented necessary backend & frontend tests
* Prevents parallel runs per policy if single_active_replication is enabled

Signed-off-by: bupd <bupdprasanth@gmail.com>
2025-08-11 18:02:56 +08:00
Wang Yan 9f809f17ba
update the support list of proxy cache (#22237)
According to PR #22198, some inactive adapters have been removed from the default adapter list.
This pull request updates PERMITTED_REGISTRY_TYPES_FOR_PROXY_CACHE accordingly, since the list of proxy cache adapters should be a subset of the replication adapters.

Signed-off-by: wy65701436 <wangyan@vmware.com>
2025-08-11 08:20:31 +00:00
Wang Yan de657686b3
add the replicaiton adapter whitelist (#22198)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-core, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-core, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-db, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-db, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-exporter, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-exporter, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-jobservice, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-jobservice, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-log, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-log, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-portal, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-portal, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-registryctl, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (harbor-registryctl, v2.12.0-dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (prepare, dev) (push) Has been cancelled Details
Trivy Nightly Scan / Trivy Scan nightly (prepare, v2.12.0-dev) (push) Has been cancelled Details
CONFORMANCE_TEST / CONFORMANCE_TEST (push) Has been cancelled Details
Housekeeping - Close stale issues and PRs / stale (push) Has been cancelled Details
fixes #21925

According to https://github.com/goharbor/harbor/wiki/Harbor-Replicaiton-Adapter-Owner, some replication adapters are no longer actively maintained by the Harbor community. To address this, a whitelist environment variable is introduced to define the list of actively supported adapters, which will be used by the Harbor portal and API to display and allow usage.

If you still wish to view and use the unsupported or inactive adapters, you must manually update the whitelist and include the desired adapter names. For the list of adapter names, refer to https://github.com/goharbor/harbor/blob/main/src/pkg/reg/model/registry.go#L22

Signed-off-by: wang yan <wangyan@vmware.com>
2025-07-23 10:25:21 +00:00
stonezdj(Daojun Zhang) ebdfb547ba
Set MAX_JOB_DURATION_SECONDS from jobservice config.yml (#22116)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-07-18 10:01:18 +00:00
Daniel Jiang 19f4958ec3
Add "status" of CVEs to artfact scan report (#22177)
Build Package Workflow / BUILD_PACKAGE (push) Waiting to run Details
Code scanning - action / CodeQL-Build (push) Waiting to run Details
This commit adds the field "status" to the struct of a vulnerability and adds
column "status" to vulnerability record table.  It makes sure the statuses
of CVEs returned by trivy scanner are persisted and can be returned via
the vulnerabilities addition API of an artifact.

Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2025-07-16 11:11:40 +08:00
miner 2565491758
add BUILD_INSTALLER parameter for optionally build prepare and log container (#22148)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
add BUILD_INSTALLER parameter to optionally build prepare and log container only when we need to build offline_installer

Signed-off-by: my036811 <miner.yang@broadcom.com>
2025-07-03 18:23:17 +08:00
miner 0a3c06d89c
add dockernetwork parameter for build process (#22138)
Build Package Workflow / BUILD_PACKAGE (push) Waiting to run Details
Code scanning - action / CodeQL-Build (push) Waiting to run Details
add dockernetwork parameter for makefile

Signed-off-by: my036811 <miner.yang@broadcom.com>
2025-07-03 15:33:25 +08:00
miner 0c5d82e9d4
Update pipenv for prepare (#22124)
* update pipenv and lock

Signed-off-by: my036811 <miner.yang@broadcom.com>

* update pipenv

Signed-off-by: my036811 <miner.yang@broadcom.com>

---------

Signed-off-by: my036811 <miner.yang@broadcom.com>
2025-07-01 14:23:05 +08:00
Wang Yan 85f3f792e4
update robot permission table (#21989)
Build Package Workflow / BUILD_PACKAGE (push) Waiting to run Details
Code scanning - action / CodeQL-Build (push) Waiting to run Details
CI / UTTEST (push) Waiting to run Details
CI / APITEST_DB (push) Waiting to run Details
CI / APITEST_DB_PROXY_CACHE (push) Waiting to run Details
CI / APITEST_LDAP (push) Waiting to run Details
CI / OFFLINE (push) Waiting to run Details
CI / UI_UT (push) Waiting to run Details
fixes #21947

Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-13 05:49:01 +00:00
Wang Yan b3cfe225db
unify the golang image version (#21935)
Make the golang version as a unified parameter to build all harbor components

Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-27 14:07:19 +08:00
miner f8f1994c9e
fix jobservice container loglevel consistent with job_log (#21874)
Signed-off-by: yminer <miner.yang@broadcom.com>
2025-04-15 14:07:39 +08:00
Wang Yan e216f6beb9
bump up golang version (#21813)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-02 13:58:49 +08:00
Wang Yan a16caa5ab7
update golang to v1.23.7 (#21749)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-03-18 18:52:02 +08:00
miner 229a27ff41
add prepare migration script for 2.13.0 (#21680)
Signed-off-by: yminer <miner.yang@broadcom.com>
2025-03-11 07:48:22 +00:00
miner 3b8c18fd26
update tlsOptions for external redis (#21681)
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
2025-03-10 11:45:18 +00:00
miner fef95244fc
remove redis sentinel patch from builder (#21679)
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2025-03-04 15:19:05 +08:00
stonezdj(Daojun Zhang) b9528d8deb
Adjust the audit_log_ext column size to keep align with audit_log table (#21678)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-02-27 10:17:04 +00:00
miner 5c39e76ac4
prepare redis tls config (#21667)
add prepare for redis tls config

Signed-off-by: yminer <miner.yang@broadcom.com>
2025-02-27 17:38:08 +08:00
miner 39b2898e18
update exporter docker build para (#21448)
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
2025-01-22 11:23:30 +00:00
Wang Yan 9e8e647b71
separate buildin values (#21425)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-01-16 14:26:24 +00:00
Wang Yan 2364957036
update spectral image (#21410)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-01-15 03:41:15 +00:00
stonezdj(Daojun Zhang) 12382fa8ae
Update prepare to avoid error when max_job_duration_hours not configured (#21395)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-01-10 10:56:43 +08:00
stonezdj(Daojun Zhang) 8ca455eb76
Add config max_job_duration_hours for jobservice (#21390)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-01-08 17:15:37 +08:00
stonezdj(Daojun Zhang) b0c74a0584
Add swagger api and audit_log_ext table model (#21360)
add auditlog-ext related api in swagger
  add audit_log_ext table

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2025-01-03 06:11:09 +00:00
Chlins Zhang a548ab705f
feat: extend the p2p preheat policy (#21115)
Add the field extra_attrs to the p2p preheat policy for the provider to
define their specified parameters when preheating.

Signed-off-by: chlins <chlins.zhang@gmail.com>
2024-12-18 10:30:36 +08:00
Hajnal Máté 4a12623459
Fix postgres script permissions (#21007)
The initdb.sh and the upgrade.sh scripts in the postgres image
were not owned by the postgres user, which made them failing
with permission denied errors.

Signed-off-by: Mate Hajnal <hajnalmt@gmail.com>
2024-11-25 14:53:19 +02:00
stonezdj(Daojun Zhang) 4a5185995e
change the base directory of prepare container in macOS (#21035)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-10-15 07:54:32 +00:00
Jim Chen 67d0fecc7b
feat: support Alibaba ACR proxy cache type (#19692)
* feat: support Alibaba ACR proxy cache type

Signed-off-by: njucjc <njucjc@gmail.com>

* chore: replace  'Alibaba ACR' to 'Alibaba Cloud ACR'

Signed-off-by: njucjc <njucjc@gmail.com>

---------

Signed-off-by: njucjc <njucjc@gmail.com>
Co-authored-by: chenjici.cjc <chenjinci.cjc@alibaba-inc.com>
2024-10-12 11:07:13 +08:00
miner ab59a46a87
add prepare migration script for 2.12.0 (#21022)
Signed-off-by: yminer <miner.yang@broadcom.com>
2024-10-10 16:56:33 +08:00
Wang Yan de281220b5
update golang version (#21014)
* update golang version

to golang v1.23.2

Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-10 13:36:18 +08:00
Daniel Jiang f6eec371d7
Bump up trivy adapter (#21015)
update the version and point to the URL of new repository under goharbor

Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2024-10-10 11:10:06 +08:00
Renming 22eebd2693
Update comments in template file of installation configurations (#20929)
Signed-off-by: Simon Zhao <simon@SimondeMacBook-Pro.local>
Co-authored-by: Simon Zhao <simon@SimondeMacBook-Pro.local>
2024-09-25 04:07:00 +00:00
Chlins Zhang c97253f660
Refactor: p2p preheat dragonfly driver (#20922) 2024-09-21 11:05:01 +08:00
Wang Yan 438d4c03bb
update robot creator database scheme (#20918)
Signed-off-by: wang yan <wangyan@vmware.com>
2024-09-14 12:49:32 +08:00
Wang Yan 51eeb098ef
add creator for robot (#20846)
* add creator for robot

add the creator for robot creation

Signed-off-by: wang yan <wangyan@vmware.com>

* resolve comments

Signed-off-by: wang yan <wangyan@vmware.com>

* fix ut

Signed-off-by: wang yan <wangyan@vmware.com>

---------

Signed-off-by: wang yan <wangyan@vmware.com>
2024-08-15 14:43:19 +08:00
蝦米 cadd3825aa
Fix #20658 docker-compose `version` is obsolete warning (#20659)
fix `version` is obsolete warning

Signed-off-by: 蝦米 <me@jhdxr.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
Co-authored-by: MinerYang <yminer@vmware.com>
2024-08-12 06:51:52 +00:00
stonezdj(Daojun Zhang) eb5193e0ef
Parallel attach ldap group (#20705)
Parallel attach LDAP group

  Add configure LDAP group attach parallel UI
  Change the /c/login timeout from 60 (nginx default) to 900 seconds in nginx.conf

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-08-09 15:24:25 +08:00
MinerYang 2dd029e702
make distribution_src configurable (#20769)
Signed-off-by: yminer <yminer@vmware.com>
2024-07-24 08:41:58 +00:00
stonezdj(Daojun Zhang) 1f0c8289a5
Add sbom_report table to store sbom related information (#20473)
fixes #20445
  Refactor scan/base_controller.go
  Move MakeReportPlaceholder, GetReportPlaceholder, GetSummary to vul and sbom scanHandler

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-05-24 08:48:55 +00:00
MinerYang 2da4d5883f
bump golang 1.22.3 (#20433)
* bump golang 1.22.3

Signed-off-by: yminer <yminer@vmware.com>

* debug api_common_install.sh

Signed-off-by: yminer <yminer@vmware.com>

* remove set DNS for docker v20

Signed-off-by: yminer <yminer@vmware.com>

---------

Signed-off-by: yminer <yminer@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-05-16 14:32:59 +08:00
MinerYang ea3cd06171
add prepare migration script for 2.11.0 (#20315)
Signed-off-by: yminer <yminer@vmware.com>

correct jaeger agent_host

update ip_family part
2024-04-22 16:34:08 +08:00
MinerYang 7e8032b144
bump golang to 1.22.2 (#20256)
Signed-off-by: yminer <yminer@vmware.com>

replace go get to go install

update go.mod
2024-04-12 13:46:29 +08:00
Shengwen YU 643e84cdfe
feat: expose `trivy.timeout` to configure the duration to wait for scan completion (#20257)
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-04-11 10:47:07 +08:00
MinerYang 389a8c49f4
update artifact_type column alteration (#20239)
update column if is null

Signed-off-by: yminer <yminer@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-04-08 14:25:19 +08:00
MinerYang 680a6a828b
bump golang 1.21.8 on main (#20197)
bump golang 1.21.8

Signed-off-by: yminer <yminer@vmware.com>
2024-04-02 10:22:03 +08:00
MinerYang a269b4f31c
Update support for artifactType for both manifest and index (#20030)
add artifact_type for artifact model to support artifactType filter

Signed-off-by: yminer <yminer@vmware.com>

add 2.11 sql schema & update index artifactType omitted

Signed-off-by: yminer <yminer@vmware.com>

update UT

update migrate sql for artifact_type

Signed-off-by: yminer <yminer@vmware.com>

remove debug line
2024-03-12 13:52:56 +00:00
guangwu 6ca30a3732
fix: typos (#20106)
Signed-off-by: guangwu <guoguangwu@magic-shield.com>
2024-03-11 16:28:23 +08:00
stonezdj(Daojun Zhang) 29cdc398e0
Check if the internal_tls_config is not null when get strong_ssl_ciph… (#20032)
Check if the internal_tls_config is not null when get strong_ssl_cipher value

Signed-off-by: stonezdj <daojunz@vmware.com>
Co-authored-by: stonezdj <daojunz@vmware.com>
2024-02-26 09:46:40 +00:00
stonezdj(Daojun Zhang) 2b6608fb52
Move strong_ssl_ciphers to top level in harbor.yaml (#19914)
fixes #19912

Signed-off-by: stonezdj <stonezdj@gmail.com>
2024-02-26 05:08:35 +00:00