centersl/docker-docs
1
0
Fork 0
mirror of https://github.com/docker/docs.git synced 2026-03-30 15:58:53 +07:00
Code Issues Packages Projects Releases Wiki Activity
1,696 Commits 54 Branches 28 Tags
cb080ede060e771ec98ca30dfd12397703c481dd
Commit Graph

406 Commits

Author SHA1 Message Date
Ying Li
bc4e8a0f9e Change the HTTP server returned by signer config to be a pointer 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-11 14:31:41 -07:00
Ying Li
77b33cf10f Add the buildtags to go list ./... in the Makefile, signer should not be pkcs11 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-04-11 13:25:23 -07:00
HuKeping
31851edf81 Kind of cleanup 
Move the configuration parsing for notary-server to its own file.

Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-04-08 09:28:02 +08:00
Riyaz Faizullabhoy
cb6bf2e1a2 Update assert to require for cmd 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-04-04 12:05:04 -07:00
David Lawrence
2e70ce0b3b Merge pull request #641 from docker/one-key-per-line 
Print one key and/or path per line when listing delegations
 2016-03-22 14:48:29 -07:00
Riyaz Faizullabhoy
d1dbc3dbd4 Add delegation passphrase env var 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-22 10:09:38 -07:00
Riyaz Faizullabhoy
731710f628 Print one key and/or path per line when listing delegations 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 16:54:07 -07:00
Riyaz Faizullabhoy
c54183bc27 Add error case to keyInfo generation, test yubikey backup, fix rebase conflicts 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:35:34 -07:00
Riyaz Faizullabhoy
e1613cdcb2 Address review comments 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:07 -07:00
Riyaz Faizullabhoy
8336bba114 Change passwd to add back to the same keystore type, special handling 
for yubi

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:07 -07:00
Riyaz Faizullabhoy
be66056edb change API to specify keyID instead of name 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:07 -07:00
Riyaz Faizullabhoy
5984b88f14 configure backing up logic for yubikey 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:07 -07:00
Riyaz Faizullabhoy
1ed9c352d7 change ks.AddKey to be consistent with CryptoService 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:06 -07:00
Riyaz Faizullabhoy
9ecd899e25 Removing key import and gun from cryptoservice 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:31:03 -07:00
Riyaz Faizullabhoy
7bd550a39a import refactor 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:06:40 -07:00
Riyaz Faizullabhoy
2a37590ea6 update interface and comments 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:06:37 -07:00
Riyaz Faizullabhoy
c41cee3e5d simplify export logic with new keymap 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:04:04 -07:00
Riyaz Faizullabhoy
23eb203a63 add key info api, use for passwd 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:03:14 -07:00
Riyaz Faizullabhoy
351b247aec add tests for initial keystore state, and after removing and adding 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-03-18 11:03:11 -07:00
Ying Li
f1d78f8d6e Add defaults for cache headers, and add tests to ensure that default configs can successfully be parsed 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-16 14:53:41 -07:00
Ying Li
44cccbb4db Make all key rotations publish immediately, not just remote key rotations 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:35:30 -07:00
Ying Li
fa5edc40af Publish only the key rotation changes after a remote key rotation 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:17:27 -07:00
Ying Li
4e5e2f386a Clean up yubikeys between each cmd/notary/keys_test.go test 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:17:27 -07:00
Ying Li
b6c4840231 Update comments, and publish in the CLI after remote key rotation 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:17:27 -07:00
Ying Li
e3716f0be9 Change the CLI for rotate key to require a role type 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:17:27 -07:00
Ying Li
07b9f504e4 Update the CLI and client to no longer reject remote timestamp rotations. 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-15 18:17:27 -07:00
Ying Li
e25746dac3 Use a CacheControlHandler that wraps other handlers instead 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-14 17:19:13 -07:00
Ying Li
84f5ed28d2 Move the configuration parsing for notary-server to its own file 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-14 17:18:18 -07:00
Ying Li
e1397f4b03 Use updated-at for last modification date for getting current metadata 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-14 17:18:18 -07:00
Ying Li
329b47d253 Parse for cache control options in the server config file 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-14 17:18:18 -07:00
Ying Li
8768c12901 Return the creation date for GetChecksum and GetCurrent from the server database store. 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-14 17:18:18 -07:00
HuKeping
95ed108c12 [PATCH 5/8] Add sha512 check on CLI command 
Include:
- verify

Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-03-11 10:44:49 +08:00
Ying Li
c720c56a70 Move all imports of sqlite3 to tests only 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-03-01 14:56:53 -05:00
HuKeping
08c0da745f Drop the actions 
All the other code would not have to know about the exact auth mechanism.

Use "readOnly", we can just include "pull" when readonly is true,
and "push", "pull" when readonly is false.

Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-02-27 10:26:23 +08:00
HuKeping
af5ee13d8a Bugfix: the actions should not always be pull and push 
The similiar fix in docker daemon:
- https://github.com/docker/docker/pull/20382

Signed-off-by: Hu Keping <hukeping@huawei.com>
 2016-02-26 10:25:50 +08:00
Riyaz Faizullabhoy
596a362a36 print IDs instead of key itself 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-24 11:18:33 -08:00
Riyaz Faizullabhoy
36c33e6732 Update integration test to exclude yubikeys from importing/exporting non-root 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-16 17:10:28 -08:00
Riyaz Faizullabhoy
27c8737bdc refactor ImportRoleKey, simplify integration test code, update constants 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy
0fdb2d1891 update positive tests 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy
c66584989e add checks to CLI command for role and gun 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy
caa9581bcc add tests, consts and fixup 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy
690fcb96da rework import key 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy
12fd5aa246 rework export key 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-08 13:38:42 -08:00
Diogo Mónica
3b3026c121 Merge pull request #542 from docker/passwd-nonroot 
add non-root passwd functionality
 2016-02-08 10:21:38 -08:00
Ying Li
77cc1a0028 Add tests for the TLS command line flags in notary. 
Signed-off-by: Ying Li <ying.li@docker.com>
 2016-02-04 17:24:26 -08:00
Ying Li
60ee270a2b Use docker/go-connections/tlsconfig to set up TLS for notary client/server/signer 
This adds some command line flags and configuration for the notary client:
--tlscacert
--tlscert
--tlskey

This enables the notary client to do mutual authentication with the notary server.

Signed-off-by: Ying Li <ying.li@docker.com>
 2016-02-04 14:02:35 -08:00
Riyaz Faizullabhoy
1c4d02455b add non-root passwd functionality 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-04 11:20:11 -08:00
Riyaz Faizullabhoy
f654216b06 sort paths, more tests with all paths 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-03 16:46:08 -08:00
Riyaz Faizullabhoy
7d2b174098 adding more complex paths to test 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-03 16:30:39 -08:00
Riyaz Faizullabhoy
f6c703e44d Rename to ClearAllPaths, add comment for delegationAdd 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-02-03 15:48:54 -08:00