Skip to content

Latest commit

 

History

History
936 lines (913 loc) · 116 KB

CHANGELOG.md

File metadata and controls

936 lines (913 loc) · 116 KB
Raw

Red Hat Quay Release Notes

Red Hat Customer Portal

v3.8.1 - 2023-01-24

Arch

Auth

  • d34e9399: Adding wraps to user namespace decorator (PROJQUAY-4694) (#1607)
  • ea90cc4f: Speed up permissions loading (PROJQUAY-4004) (#1566)

Build(Deps)

Buildman

  • 1a60cbe7: add SLO metric that calculates build success (PROJQUAY-4486) (#1609)
  • ea67af5a: add SLO metric for time spent in queue for build jobs (PROJQUAY-4487) (#1575)
  • 9a11e476: allow fallback on non-exception build failures (PROJQUAY-4609) (#1605)

Chore

  • 6e8e2d2f: remove deprecated appr code (PROJQUAY-4992) (#1718)
  • 6c454444: Update Dockerfile to reduce size of image (PROJQUAY-4837) (#1675) (#1681)
  • 589fbb49: Update Dockerfile to reduce size of image (PROJQUAY-4837) (#1675)
  • cdb52ed0: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)

Chore: V3.7.10 Changelog Bump (Https

Chore: V3.7.11 Changelog Bump (Https

Chore: V3.7.9 Changelog Bump (Https

Cleanup

Config

  • 4ebad4dc: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1554)

Config

  • 6bbfdf5e: Remove whitespace from config (PROJQUAY-4666) (#1596)
  • ff8043dd: Add conftest mediatypes to default Quay configuration (PROJQUAY-4614) (#1567)

Cors

Deploy

Login

  • cb590f9a: Add error message for exprot compliance hold (PROJQUAY-4844) (#1715)
  • 442bb168: Use the correct username for export compliance (PROJQUAY-4844) (#1696)
  • 5bd24264: Add subject in debug logs for export compliance (PROJQUAY-4844) (#1695)

Logs

  • ed86a102: validate date range is within configuration (PROJQUAY-4959) (#1707)
  • 1bd016fd: Add repository information for build audit logs (PROJQUAY-4726) (#1705)
  • 33451ca9: audit logs on manual build triggers and build cancellations (PROJQUAY-4726) (#1682)
  • fe2b89d6: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1625)

Nginx

  • 056b6fca: Minor update to fix toggling issue on Safari (PROJQUAY-4527) (#1670)

Oci/Index.Py

Quay

Repomirror

  • 15ea8350: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1427)

Revert "Chore

  • 04358d26: Update Dockerfile to reduce size of image (PROJQUAY-4837) (#1675)" (#1678)
  • e4e00f70: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1642)

Revert "Secscan

Scripts

  • facb4b1e: push to ecr backup when building quay.io (PROJQUAY-3273) (#1578)

Secscan

Storage

  • f4d9dda2: Add **kwargs to get_direct_download_url for CloudFlare storage (PROJQUAY-3512) (#1594)
  • 40735569: Add Cloudflare as a CDN provider for an S3 backed storage (PROJQUAY-3699) (#1294)

Superusers

  • 45d00a6b: gives superusers access to team invite api (PROJQUAY-4765) (#1694)
  • 64ec1560: grant superusers additinonal org permissions (PROJQUAY-4687) (#1613)

UI

  • 60181dae: Fix redirection to user/org page (PROJQUAY-4667) (#1623)

Ui

  • 85218f11: Hot fix billing information (PROJQUAY-0000) (#1679)
  • b8cf8932: Repository settings feature flag (PROJQUAY-4565) (#1677)
  • 1a2bb4a4: Remove add_analytics script from Dockerfile (PROJQUAY-4582) (#1669)
  • 74d8a515: Remove FEATURE_UI_V2 from analytics scripts (PROJQUAY-4582) (#1658)
  • c71fd10b: Add script for adobe analytics for quay.io in angular UI (PROJQUAY-4582) (#1654)
  • 8211b774: Show UI toggle on quay.io only to redhat users (PROJQUAY-4804) (#1653)
  • bc5bc22b: Add script for adobe analytics for quay.io (PROJQUAY-4582) (#1648)
  • 96372019: Fix font size in superuser page (PROJQUAY-4407) (#1553)

Users

  • dba302b5: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1645)
  • b128936b: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1640)
  • 7cd55ea0: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1634)
  • 0caa4203: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1621)
  • 8fc03857: when set, grant superusers repository permissions. (#1620)
  • ef8ad2c3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1614)
  • c84067a4: add restricted users' filter (PROJQUAY-1245) (#1551)

Util

  • 3035f46f: Clean up and adding make target to install pre-commit hooks(PROJQUAY-000) (#1587)
  • e8e5d5d9: Adding git pre-commit checks (PROJQUAY-4658) (#1585)

v3.8.0 - 2022-11-26

Api

  • 2b3c3cc5: feature to limit org creation to superusers (PROJQUAY-1245) (#1516)
  • aefddd36: add OPTIONS method to /config request (PROJQUAY-4276) (#1476)
  • d37dd766: fix CORS headers, use concat instead of extend (PROJQUAY-4163) (#1445)
  • 871c43ea: handle missing tag on DELETE tag api (#1444)
  • bf99e718: Update werkzeug to 1.0.0 and add valid CORS methods (PROJQUAY-4163) (#1443)

Arch

Auth

Billing

Bug

  • ee5ff714: Increase column size in logentry3 table (PROJQUAY-4305) (#1510)
  • 9209cf75: Fix schema discovery on basic auth (PROJQUAY-4362) (#1498)

Build(Deps)

Builders

Buildman

Bump

  • b21400b9: Bump to redeploy Quay pods to reflect new endpoint (PROJQUAY-2056) (#1327)

CI

Chore

Chore: V3.6.8 Changelog Bump (Https

Chore: V3.6.9 Changelog Bump (Https

Chore: V3.7.0 Changelog Bump (Https

Chore: V3.7.1 Changelog Bump (Https

Chore: V3.7.10 Changelog Bump (Https

Chore: V3.7.3 Changelog Bump (Https

Chore: V3.7.4 Changelog Bump (Https

Chore: V3.7.5 Changelog Bump (Https

Chore: V3.7.6 Changelog Bump (Https

Chore: V3.7.7 Changelog Bump (Https

Chore: V3.7.8 Changelog Bump (Https

Chore: V3.7.9 Changelog Bump (Https

Ci

Cleanup

Conf/Nginx

  • f45c68eb: mark beginning of string in oauth location match (#1550)

Dev

Doc

  • 34cd7d09: update Instructions for Deploying on OpenShift (#1537)

Dockerfile

Export Compliance

  • adf70956: Fetching quay user data from federated login username (PROJQUAY-0000) (#1530)

Fix

  • 12e7c8fc: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1469)
  • f2c4375f: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366)

GUI

Healthcheck

  • c36945b8: Use db_kwargs in health check (PROJQUAY-4222) (#1507)

Init

  • e1745a9b: fix bash path before appending certs (PROJQUAY-3881) (#1359)
  • 8786ef2e: ensure a newline is present before appending certs (PROJQUAY-3881) (#1356)
  • 16d9a2ce: ensure a newline is present before appending certs (PROJQUAY-3881) (#1352)

Logs

  • 33dde306: create action logs on proxy cache config creation/deletion (PROJQUAY-4718) (#1636)

Makefile

  • 692e3cee: use non-standard port for postgres test container (#1485)
  • fd4e7723: use variable to tell postgres test target which tests to run (#1475)

Mirror

  • 679380b9: Rollback failed tags (PROJQUAY-4322) (#1496)
  • 30298699: Default mirror rollback to false (PROJQUAY-4296) (#1490)
  • 14c8d139: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1417)

Mirroring

  • 26a334f5: fix mirror claims for multiple processes (PROJQUAY-3982) (#1433)

Nginx

Oauth

  • 5f49ffc2: fix oauth token generation when using dangerous scopes (PROJQUAY-4042) (#1457)
  • 922a82a3: Add the code param to the oauthrize.html template (PROJQUAY-3648) (#1362)

PROJQUAY-3750

  • ac6a8d2f: support registries that do not return a digest header (#1310)

Proxy Cache

  • 342a50eb: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1426)

Pull-Thru

  • d029a465: bump expiration of all parent manifest lists on pull (#1336)

Quay

  • 7c566ad4: Exporting image.oci package to Quay module (PROJQUAY-0000) (#1548)

Quayio

  • b49fd45e: Redirect user to billing page when starting free trial (PROJQUAY-4130) (#1439)

Quota

Quota

  • a0df8950: Fix calculating org size (PROJQUAY-3889) (#1391)
  • f28b35cc: Fix join on caching repo size (PROJQUAY-3889) (#1378)
  • 9d8ff6b1: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1303)

Quota Management

  • 59d586c4: Adding default quota check for image push (PROJQUAY-3789) (#1316)

Quota UI

  • a0bd9aca: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1383)
  • 587cceb3: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1307)

Registry

  • c04d0a64: correctly bump tag expiration when tag changes upstream (PROJQUAY-3976) (#1479)

Requirements.Txt

Revert "Chore

  • 51ebfc22: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1557)" (#1643)

Rhsso

  • 0fdf96a2: Add checks for e-mail blocked in export screen (PROJQUAY-2056) (#1333)

Schema1

  • b2dbdcd7: Generate kid in the correct format (PROJQUAY-3486) (#1208)

Secscan

  • 44462faf: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1577)
  • 5291daf8: Don't delete manifest security status on error (PROJQUAY-4060) (#1434)
  • 5471d3cb: deprecate support for Clair V2 (PROJQUAY-2837) (#951)
  • 776dbd90: update https proxy scheme (#1340)

Sso

  • ca70a501: Handle edge case for stage sso only users (PROJQUAY-2056) (#1326)
  • 42f09298: Fix debug statement (PROJQUAY-2056) (#1325)
  • f6e754b5: Use trusted cert from extra_ca_certs directory (PROJQUAY-2056) (#1324)
  • 0826ac0e: Use requests client in screening call (PROJQUAY-2056) (#1321)
  • 4e739d30: Update mount path for export compliance certificate (PROJQUAY-2056) (#1320)
  • 2c3e26a3: Add test for RHSSO OAuth service (PROJQUAY-2056) (#1317)

Storage

  • 47564690: handle KeyError we sometimes get from aws (#1543)
  • a101553c: return S3 url only for ip ranges in the same region (PROJQUAY-4498) (#1539)
  • e6be9fc4: Add username field to requests on CloudFront (PROJQUAY-3511) (#1486)
  • 56b16b70: optimize large azure chunked upload (PROJQUAY-3753) (#1387)

Superusers

  • acb4b509: grant superusers additinonal org permissions (PROJQUAY-4687) (#1615)

Task

  • eb308136: remove obsolete logrotate.conf file (PROJQUAY-4364) (#1500)

UI

  • ba2aa54d: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1364)
  • c93661e9: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1358)

Ui

  • 4dd1e1e0: Fix font size in superuser page (PROJQUAY-4407) (#1555)
  • 5f1fdbc5: Support on Old UI to switch to New UI (PROJQUAY-4124) (#1504)
  • b1d13d16: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1459)
  • 7cbf0ffd: Remove trial from larger plans for quay.io (PROJQUAY-4197) (#1455)
  • 1a016efc: Add CSRF and token endpoint and public config endpoint (PROJQUAY-3865) (#1323)
  • d9dbbd88: basic support for cosign in the UI (PROJQUAY-3965) (#1380)

User

  • 1e136d6d: Added function to fetch users public repositories count (PROJQUAY-0000) (#1540)

Users

  • 80617b93: default to true if LDAP_RESTRICTED_USER_FILTER is not set (PROJQUAY-4776) (#1646)
  • 52c3ab1d: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641)
  • 4390bbcc: fix create repo on push on orgs for restricted users (PROJQUAY-4732) (#1635)
  • 5592ae69: prevent CREATE_NAMESPACE_ON_PUSH is restricted (PROJQUAY-4702) (#1624)
  • c4595fbb: when set, grant superusers repository permissions. (#1622)
  • f6ee8ac3: prevent creating repo on push for restricted users (PROJQUAY-4706) (#1616)
  • 33a322c2: add restricted users' filter (PROJQUAY-1245) (#1599)
  • 14e87bd4: fix missing references in ldap for superusers (#1542)
  • 070f464b: superuser group in federated identity provider (PROJQUAY-3924) (#1464)

V2auth

  • fd9a6b2e: Check for user before creating org (PROJQUAY-3766) (#1315)

[Redhat-3.8] Arch

[Redhat-3.8] Chore

  • 48f9a952: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1584)

[Redhat-3.8] Config

  • 4a2d7b40: Updating Cosign SBOM Media Types on Quay (PROJQUAY-4591) (#1565)

[Redhat-3.8] Repomirror

  • 55cb0ba1: Use skopeo list-tags to get repo tags (PROJQUAY-2179) (#1559)

v3.7.10 - 2022-10-25

Auth

Chore: V3.7.10 Changelog Bump (Https

Secscan

  • 128f1255: Generate key to reduce vulnerabilities (PROJQUAY-4562) (#1576)

[Redhat-3.7] Chore

  • 72e382c8: Add server side assembly of chunked metadata for RADOSGW driver (PROJQUAY-4592) (#1583)

v3.7.9 - 2022-10-17

Chore: V3.7.9 Changelog Bump (Https

Storage

v3.7.8 - 2022-09-12

Chore: V3.7.7 Changelog Bump (Https

Chore: V3.7.8 Changelog Bump (Https

Healthcheck

  • 7a10c7b6: Use db_kwargs in health check (PROJQUAY-4222) (#1511)

[Redhat-3.7] Bug

  • 1f5f0475: Increase column size in logentry3 table (PROJQUAY-4305) (#1512)
  • 94f1795e: Fix schema discovery on basic auth (PROJQUAY-4362) (#1505)

[Redhat-3.7] Ci

  • 117a7ebd: Update release workflow to use new release action (PROJQUAY-4444) (#1527)

v3.7.7 - 2022-08-29

Mirror

Registry

  • b7f3434a: correctly bump tag expiration when tag changes upstream (#1484)

v3.7.6 - 2022-08-15

Chore: V3.7.6 Changelog Bump (Https

Fix

  • dc17f537: support oci image indexes that don't specify a mediaType (PROJQUAY-4254) (#1472)

Proxy Cache

  • f3910e3c: respect CREATE_PRIVATE_REPO_ON_PUSH flag (PROJQUAY-3743) (#1470)

v3.7.5 - 2022-07-26

Auth

Chore: V3.7.4 Changelog Bump (Https

Chore: V3.7.5 Changelog Bump (Https

Mirroring

  • eb20c961: fix mirror claims for multiple processes (PROJQUAY-3982) (#1453)

v3.7.4 - 2022-07-07

Builders

Mirror

  • c5354154: Pass command output to a tempfile instead of pipe (PROJQUAY-3145) (#1437)

v3.7.3 - 2022-06-28

Chore: V3.7.3 Changelog Bump (Https

Storage

  • 34765df7: optimize large azure chunked upload (PROJQUAY-3753) (#1408)

[Redhat-3.7] Ui

  • 992bfa1f: basic support for cosign in the UI (PROJQUAY-3965) (#1414)

v3.7.2 - 2022-06-22

Builders

  • ec8da07c: Send notifications on build completion (PROJQUAY-3614) (#1367)

Chore: V3.7.1 Changelog Bump (Https

Chore: V3.7.2 Changelog Bump (Https

Fix

  • 6090bd05: enable non-admins to cache images via pull-thru (PROJQUAY-3806) (#1366) (#1379)

GUI

Quota

Requirements.Txt

UI

  • abbbe4ad: Superuser user panel settings icon permissions fix (PROJQUAY-3905) (#1368)

[Redhat-3.7] Quota UI

  • 179a7dbf: Show quota consumption in whole numbers on super user organizations panel (PROJQUAY-3974) (#1386)

v3.7.1 - 2022-06-06

Init

  • e37960f2: fix bash path before appending certs (PROJQUAY-3881) (#1360)
  • cba35f91: ensure a newline is present before appending certs (PROJQUAY-3881) (#1357)
  • c1227410: ensure a newline is present before appending certs (PROJQUAY-3881) (#1354)

Pull-Thru

  • a7ffd5c7: bump expiration of all parent manifest lists on pull (PROJQUAY-3818) (#1343)

[Redhat-3.7] Quota

[Redhat-3.7] UI

  • 5de7b6ce: Show settings icon for super user under Superuser Users Panel (PROJQUAY-3905) (#1361)

v3.7.0 - 2022-05-23

API

  • 2dca65f9: Removing internal only decorator from exposed Super user endpoints (#1271)

Api

  • 896a3aab: update the quota api so that it's more consistent with the other apis endpoints (PROJQUAY-2936) (#1221)
  • 02dfc63f: fully deprecate image api endpoints (PROJQUAY-3418) (#1164)

App.Py

  • b4600553: filter proxy cache login details from debug logs (#1268)

Auth

  • 6effd4cd: Add state to the oauthorize redirect (PROJQUAY-3648) (#1301)
  • edb4e721: Add state to the oauthorize page (PROJQUAY-3648) (#1292)
  • 2219d5ae: Add state to the Oauth code response (PROJQUAY-3139) (#1124)
  • 0033f9b8: Fix oauth code flow (PROJQUAY-781) (#1044)

Billing

  • 8da53e97: use BytesIO when rendering invoice (PROJQUAY-3267) (#1174)
  • 259da89c: Remove type hints for FakeStripe (PROJQUAY-2777) (#974)
  • 8d0aa9ff: Remove annotations for type hints in billing (PROJQUAY-2777) (#973)

Blobuploadcleanupworker

  • f35f3f13: Add BLOBUPLOAD_DELETION_DATE_THRESHOLD (PROJQUAY-2915) (#1022)
  • 22282dae: Add cleanup for orphaned blobs (PROJQUAY-2313) (#967)

Build

  • 443b8d50: Update pyrsistent to fix Dockerfile.deploy (PROJQUAY-3125) (#1079)
  • fba69d93: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#993)
  • eb668cad: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#972)
  • 78f8081a: Use a configtool tag in the Dockerfile instead of master (PROJQUAY-2777) (#971)
  • a347d316: Update backup base image name (PROJQUAY-2372) (#965)
  • d2f4efd8: Remove the image archive in post-deploy (PROJQUAY-2372) (#963)
  • af2eeaa6: Use docker-archive for post-deploy script (PROJQUAY-2372) (#962)
  • e8cf6339: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#960)
  • d8b0e949: Add docker-save to push images via skopeo on rhel-8 (PROJQUAY-2372) (#959)
  • 759a83fa: use Dockerfile for building quay app-sre (PROJQUAY-2373) (#926)

Build(Deps)

Builders

  • 5cf6d99c: Add dnsPolicy option (PROJQUAY-3755) (#1306)
  • 9557cb9a: Set default kubernetesPodman image (PROJQUAY-3586) (#1245)
  • d8ae686f: Persist build pod when DEBUG is true (PROJQUAY-3710) (#1297)
  • 88e86eb1: Set backoffLimit to 1 (PROJQUAY-3587) (#1246)
  • 2d053e37: add a check for expired key (PROJQUAY-3489) (#1214)
  • 4ecbcded: Add DEBUG and JOB_REGISTRATION_TIMEOUT options (PROJQUAY-3395) (#1177)
  • 5d55ad55: Update py-bitbucket to fix bitbucket triggers (PROJQUAY-3362) (#1170)
  • 30ab139e: Remove ServerSideEncryption param from presigned URL (PROJQUAY-3180) (#1105)
  • 7082f867: Update boto to fix signature error (PROJQUAY-2542) (#1087)
  • dce0b934: Remove socket_timeout from the redis client (PROJQUAY-2542) (#1084)
  • b7d325ed: Make single_connection_client conifgurable (PROJQUAY-3025) (#1055)

Buildman

  • a79f7b6f: increase allowed grpc body size for log streams (#1234)
  • ceb9262b: Add EXECUTOR parameter (PROJQUAY-3278) (#1134)
  • 3ca44073: prevent systemd oneshot service from timing (PROJQUAY-3304) (#1149)
  • 32691dd8: Set build token expiration to builder's lifetime (PROJQUAY-3281) (#1142)
  • a0443340: fix multiple build retries phase (PROJQUAY-3281) (#1139)
  • 9b892626: configurable build job registration timeout (PROJQUAY-3280) (#1135)
  • a29e64be: Add kubernetesPodman build option (PROJQUAY-3052) (#1066)
  • eaaa3adb: allow use of public builder image (PROJQUAY-3179) (#1103)
  • b07b44a7: fix kubernetes not returning correct running count (PROJQUAY-3169) (#1099)

CONTRIBUTING

Cache

  • ccf6ada1: handle uncaught redis exception (PROJQUAY-2614) (#907)

Chore

  • c2ceda5a: various small changes to fix exceptions, remove unused code (#1295)
  • 2d56a8df: add logging during instance service key generation (#1276)
  • 5c226105: Fix cachito issue with pypdf (PROJQUAY-3184) (#1223)
  • a3ad25c4: Remove unneeded flags fromt he config schema (#1152)
  • 2344adb8: remove unused tools (PROJQUAY-0) (#1113)
  • 9bdbba6f: Remove unused files (#1067)
  • 65100439: download aws ip ranges via github workflow (#1041)
  • b7037d9c: Bump up config-tool version v0.1.9 (#992)
  • 2ffc12b3: cleanup remaining artifacts remaining related to aci signing (PROJQUAY-2792) (#968)
  • ae129b45: Bump up config-tool version v0.1.8 (#984)
  • c8092069: Bump up config-tool version (#983)
  • ba08ddd7: Bump up config-tool version (#982)
  • bbacf232: bump gevent related packages' version (PROJQUAY-2821) (#979)
  • 8ef0aff8: improve check for JIRA ticket (PROJQUAY-2623) (#919)
  • c90b444f: Provide timestamps on container startup including registry, mirror and config container (#921)
  • 16dcebf1: build and publish workflow (PROJQUAY-2556)
  • 79703a91: Move qemu outside of quay repo to its github repo (PROJQUAY-2342) (#866)

Chore(Dockerfile)

  • 0f7fdb7e: add local-dev-env build stage (PROJQUAY-2501) (#883)

Chore: V3.6.3 Changelog Bump (Https

Chore: V3.6.4 Changelog Bump (Https

Chore: V3.6.5 Changelog Bump (Https

Chore: V3.6.6 Changelog Bump (Https

Chore: V3.7.0 Changelog Bump (Https

Ci

  • e2921d7a: Enable workflow dispatch for build and publish (PROJQUAY-3310) (#1155)
  • c7c4c0dc: Update funcparserlib version (PROJQUAY-2520) (#893)

Clean.Sh

  • 6b5e7f50: don't remove webfonts dir since its now versioned (#1025)

Cleanup

  • 687abaa2: Removing requirements-nover.txt (PROJQUAY-2985) (#1038)

Compliance

  • ad4bb6f1: Move export screening to RHSSO class (PROJQUAY-2056) (#1302)

Conf

Config

  • e659e809: Update config-tool to v0.1.11 (PROJQUAY-3318) (#1195)
  • c1cc7c53: Allow envelope mediatype (PROJQUAY-3386) (#1196)
  • c02f912f: Update config-tool version to v0.1.10 (PROJQUAY-3125) (#1078)
  • c507eeff: define default oci artifact types (PROJQUAY-2334) (#877)

Config.Py

  • d14da17a: Add support for source containers (PROJQUAY-2271) (#954)

Data

  • a4ed9866: increase max len for proxy cache config credentials (#1241)

Data/Buildlogs

Database

  • 24b3c153: handle nested transaaction when trying to close before transaction (PROJQUAY-3303) (#1157)
  • 7cdb88b5: force close existing non-pooled connections before transaction (PROJQUAY-3303) (#1153)
  • c5608d97: retry connections on stale MySQL connections (PROJQUAY-3303) (#1148)

Db

  • eb62f4e9: remove url unqoute from migration logic (PROJQUAY-3266) (#1126)

Debug

  • 9c327425: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1027)
  • 4a02e1bd: Log X-Forwaded-For for requests (PROJQUAY-2883) (#1026)

Defaults

  • a29f3e0e: Update defaults in config and schema (PROJQUAY-2425) (#923)

Deploy

  • 6356fbb1: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
  • d43b41c5: Add GRPC service for builds (PROJQUAY-3189) (#1109)
  • 293e0619: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
  • 1589351b: Add clair back fill worker deployment manifests (#991)
  • 01d41364: Update syslog image tag(PROJQUAY-2374) (#966)
  • 7458578d: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
  • 5a56145b: Update app-sre build script (PROJQUAY-2374) (#934)
  • 6b01bd12: Push py3 images to a different quay repo (PROJQUAY-2374) (#930)
  • 173dfbfc: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)

Deps

  • bb53127d: upgrade upstream requirements.txt package versions (#1072)

Dockerfile

  • 50d2a827: ubi8 requires python38, otherwise installs 3.6 by default (PROJQUAY-3148) (#1092)
  • 5267cfe7: update upstream image to use ubi8 as base (PROJQUAY-3148) (#1082)
  • 085e33be: set QUAYRUN in non-standard dockerfiles (#1013)
  • cdc7b61f: make sure the production dockerfile doesn't pull from dockerhub (#929)
  • da558b0f: replace golang base image in production dockerfile (#928)
  • 139c9abc: use separate dockerfile for production deployment (#927)
  • 495dd908: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889)

Docs

  • 8f64efd6: consolidate getting started guides (PROJQUAY-2500) (#884)

Documentation

  • ae0bd06d: Added instructions to setup dev environment (PROJQUAY-2277) (#844) (#844)

Editor

Email

  • d81efe2f: fix org recovery link in email (PROJQUAY-2589) (#903)

Endpoints/V2

Feat

Fix

Fix

  • c82d78ae: Adding default vault to quota parameter (PROJQUAY-0000) (#1171)

Format

  • ef91c57c: Updating black to resolve click dependency issue (PROJQUAY-3487) (#1209)

Formatting

Gc

  • 563d04aa: remove orphaned storage on repository purge (PROJQUAY-2313) (#961)

Imagemirror

  • 0d3ecb13: Add unsigned registries mirror option (PROJQUAY-3106) (#1085)

Invoice

  • 5a1fa17a: update invoice template to fix layout (PROJQUAY-3267) (#1182)

Ipresolver

Ldap

Makefile

  • 10e88d29: Add local-dev-build-frontend step (PROJQUAY-2693) (#933)

Migration

  • 08201dea: skip existing mediatype inserts (PROJQUAY-2811) (#976)
  • 712b8d74: configure logging in alembic's env.py (PROJQUAY-2412) (#875)

Mirror

  • d2e758da: Get all tags during rollback (PROJQUAY-3146) (#1244)
  • f3a8b74d: increased registry user/pass max length (PROJQUAY-2712) (#945)

Namespacequota

Nginix

  • 2a38784a: update rate limit values for quay based on traffic (PROJQUAY-3283) (#1175)

Nginx

  • aa7068a2: block v1/tag for helium miner curl calls (PROJQUAY-3594) (#1248)
  • 7b44f8c0: Update rate limiting for tags API (PROJQUAY-3283) (#1233)
  • de0d9764: Increase body timeout for buildman (PROJQUAY-3406) (#1198)
  • ec7b7610: add missing semicolon in template (PROJQUAY-2883) (#1020)
  • 03a36256: rename base http template file ((PROJQUAY-2883) (#1007)
  • 1ba53f4f: support client ip through x-forwarded-for header (PROJQUAY-2883) (#1003)
  • 630d6f46: use bigger http/2 chunks for blobs (#630)

Notification

  • 3739c1fc: fix user ref when creating notification for quota (PROJQUAY-3711) (#1288)
  • a126ad06: check certs exists for webhooks (PROJQUAY-2424) (#886)

Oci

  • f50f37a3: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922)

PROJQUAY-3750

  • 2e2fefe5: support registries that do not return a digest header (#1313)

Proxy

  • 1342a17b: make upstream related error message more actionable (#1240)
  • b941a038: raise UpstreamRegistryError if we can't request upstream (#1220)
  • f248d885: don't store entire blob in memory when caching (#1200)

Proxy Cache

  • a4c8924f: Elaborate hint message for anonymous pulls and making a safe request (PROJQUAY - 0000) (#1222)

Proxy Cache

  • 7524171a: Interface and UI for Proxy cache Configuration (PROJQUAY-3029) (#1204)

Quay

  • 162b79ec: Fixing reclassified CVE ratings source (PROJQUAY-2691) (#937)

Quay UI

  • 51c67513: Converting to nearest integer (PROJQUAY-3602) (#1285)

Quay.Io

  • 5debec58: Catching requests from impersonated principals (#869)

Quay.Io UI

  • 20aef6a5: Fetching severity from cvss score and removing visibility… (#887)

Quayio

  • 247fec3b: Add export compliance service to Red Hat SSO (PROJQUAY-2056) (#1239)
  • 34cf5b92: allow migration to skip adding manifest columns if exists (PROJQUAY-2579) (#901)

Quota

  • 477ccd82: address possible integrity exception if computing size concurrently (PROJQUAY-3752) (#1308)

Quota

  • f4093b0d: fix caching (PROJQUAY-3660) (#1291)
  • 1e65bff9: Raising exception when entered quota size is too big (PROJQUAY-3702) (#1290)
  • 5bb2c121: Show a different error message if default quota is set on removing quota (PROJQUAY-3657) (#1287)
  • eea7389a: Show system default on UI when quota configuration for the org is not set (PROJQUAY-3518) (#1280)

Quota API

  • a983884e: Add super user permissions on Organization endpoints (PROJQUAY-3742) (#1296)
  • 2d63be37: Remove trailing backslash (PROJQUAY-3625) (#1286)

Quota Management

  • cd288943: Quota settings on Organization view needs to be read only (PROJQUAY-3622) (#1263)

Quota UI

  • d8a7a6d0: Adding Overall storage consumption for Super users panel page (PROJQUAY-3639) (#1314)
  • a57594cf: Fix quota input value (PROJQUAY-3691) (#1293)
  • 03269edc: Show message that System wide default cannot be removed from an organization (PROJQUAY-3658) (#1282)
  • f10690e7: Display Error when decimal values entered from UI (PROJQUAY-3627) (#1272)
  • 3176d5ba: Syntax fix to throw error on 0 input (PROJQUAY-3419) (#1253)
  • 923fc72a: Showing percent consumed if quota is configured on an organization (PROJQUAY-0000) (#1249)

QuotaManagement

Realtime

  • a058235b: decode byte to string before using split (PROJQUAY-3180) (#1107)

Refactor(Dockerfile)

Registry

  • 32322bc1: update blob mount behaviour when from parameter is missing (PROJQUAY-2570) (#899)

Registry_proxy_model

  • 514bc6f1: count repository size when caching images (PROJQUAY-3464) (#1215)

Requirements

Requirements-Osbs

Requirements-Osbs.Txt

Requirements.Txt

Revert "Quayio

Revert "Revert "Quayio

Revert "Schema1

  • 58b06572: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)" (#1150)

Revert "Secscan

Schema1

  • b5bd74bf: Permit signed schema1 manifests during conversion (PROJQUAY-PROJQUAY-3285) (#1146)

Secscan

  • 3acc55b9: split the recent manifest chunk of work into multiple batch (PROJQUAY-3501) (#1300)
  • f3c3916b: add option to skip recent manifest batch lock (PROJQUAY-3501) (#1299)
  • 9ac30007: cleanup secscan interface (PROJQUAY-3501) (#1284)
  • 72c8d7a3: fix config reference (PROJQUAY-3501) (#1283)
  • ed77147b: split indexing of recent manifest into separate background operation (PROJQUAY-3501) (#1281)
  • 035f5820: fix check for end of table (PROJQUAY-3501) (#1270)
  • a9e1b71a: fix missing import (PROJQUAY-3501) (#1261)
  • 922892d1: configure global lock (PROJQUAY-3501) (#1255)
  • 7d0f318b: update the secscan model interface (PROJQUAY-3501) (#1254)
  • d719dfad: optimize deduplicating manifests for indexing in securityworker (PROJQUAY-3501) (#1247)
  • 53aaa549: add indexer service request duration metric (PROJQUAY-3501) (#1243)
  • a52b0026: fix database manifest allocator for securityworker (PROJQUAY-3501) (#1235)
  • 9d89b6fa: add a global lock on security worker runs (PROJQUAY-3501) (#1226)
  • 4295a8f6: scan recent manifests in addition to regular backfill (PROJQUAY-3287) (#1169)
  • 6a8567f8: log manifest ID when indexing (PROJQUAY-3287) (#1166)
  • 2b2e795b: Log start and end index of block in clair (PROJQUAY-3287) (#1165)
  • 7162be37: make batch_size configurable (PROJQUAY-3287) (#1156)
  • 369ee78a: clairv2 - fix datatype bug (PROJQUAY-3279) (#1138)
  • b32ca314: ClairV2 datatype compatibility (PROJQUAY-3279) (#1133)
  • 26eb7ff9: Don't save secscan result if returned state is unknown (PROJQUAY-2939) (#1047)
  • 9f16b324: fix secscan api ApiRequestFailure test (PROJQUAY-2563) (#896)
  • 694fa2ac: continue iterating after failure (PROJQUAY-2563) (#892)

Sescan

  • 4db59990: prioritize scanning new pushes (PROJQUAY-3287) (#1147)

Setup

Static

Storage

  • c9c91339: allow arbitrary endpoint url for azure storage (#1071)
  • 13a9f8f4: Add cn-northwest-1 to s3_region northwest (PROJQUAY-3082) (#1137)
  • ca17eb43: handle cn-north-1 region (PROJQUAY-3082) (#1129)
  • f6f7b05a: allow configuration of storage region for cloud storage (PROJQUAY-3082) (#1081)

Superuser

Teams

Trigger_analyzer

UI

Ui

  • e67ea047: Copy build logs error fix (PROJQUAY-3405) (#1201)
  • 815ef446: remove deprecated docker-image-id references from ui (PROJQUAY-3418) (#1197)
  • 033c1aaf: display manifest list manifest sizes (PROJQUAY-3196) (#1115)
  • e91ec644: Depricate getImageCommand in security UI (PROJQUAY-3284) (#1144)
  • 374e957b: fix csrf issue when login in with SSO on mobile (PROJQUAY-2340) (#906)
  • bf81bd9b: change angular routing order for repo paths (PROJQUAY-2325) (#872)

Util

Util/Ipresolver

V2auth

  • 1f2b0b67: Check for user before creating org (PROJQUAY-3766) (#1318)

[Redhat-3.7] Quota Management

  • 88d0549f: Adding default quota check for image push (PROJQUAY-3789) (#1319)

v3.6.2 - 2021-12-02

Api

  • 6470248b: /v1/user/initialize to create first user (PROJQUAY-1926) (#771)

Backport

Build

  • 1ae91bcc: Add required setup.cfg for downstream build (PROJQUAY-2713) (#946) (#994)
  • 4c09559c: add full python build dependencies (PROJQUAY-2216) (#822)
  • 1d63cfa2: update package-lock.json (PROJQUAY-1749) (#821)
  • 9c8e3f1f: remove unused node modules (PROJQUAY-1667) (#805)
  • 62e3bd9c: update python pillow version (PROJQUAY-1520) (#809)
  • 653dc021: update node url-parse to 1.4.3 (PROJQUAY-1749) (#797)

Build(Deps)

Buildman

  • f5b9492a: Add proxy variables to builds if they exist (PROJQUAY-2120) (#834)
  • bfb8602d: fix vm image name in startup script (PROJQUAY-2120) (#811)

Cache

  • 3dde3646: py2 compatibility, kwargs after named args (PROJQUAY-2101) (#859)
  • cd6871c1: add support for redis cluster mode (PROJQUAY-2101) (#810)

Chore

  • 35e8109c: v3.6.1 changelog bump (PROJQUAY-2728) (#955)
  • b016844a: build and publish workflow (PROJQUAY-2556)
  • 47a1fdd3: remove ui elements for account recovery mode (PROJQUAY-970) (#853)
  • 7d7eb755: return zope.interface to requirements-osbs.txt (PROJQUAY-1535) (#854)
  • 0999baa2: fix rediscluster cache config key name (PROJQUAY-2101) (#849)
  • a839a78e: allows Quay to run for account recoveries (PROJQUAY-970) (#793)
  • 4880c776: remove node modules from final container (PROJQUAY-1822) (#788)
  • 4ad5a458: remove uploading filtering from imagestorage queries (PROJQUAY-1914) (#764)

Config

Db

  • 8591caf0: remove transaction from empty layer upload (PROJQUAY-1946) (#775)

Defaults

Deploy

  • ce3cb357: update component label value for recovery (PROJQUAY-970) (#832)
  • d6616e9e: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)

Deployment

  • 242d4def: Change canary to blue deployment (PROJQUAY-1896) (#781)

Doc

  • 7a70a98b: Fix broken links in the CHANGELOG (PROJQUAY-2298) (#858)

Dockerfile

  • 61d256fd: Update symlink in upstream dockerfile (PROJQUAY-2550) (#889) (#981)
  • 1f7d128c: Fix downstream python site-packages location (PROJQUAY-2258) (#842)
  • 6e809033: Fix QUAYCONF symlink and config-tool build in refactored Dockerfile (PROJQUAY-2254) (#837)
  • 86d150a2: refactor dockerfile (PROJQUAY-1997) (#787)

Email

  • a2ba0a46: fix org recovery link in email (PROJQUAY-2589) (#904)

Fips

Local-Dev

  • eea5cfcb: Increase timeout for gunicorn tasks to come up (PROJQUAY-2114) (#808)

Migration

  • 94ed4716: Add composite index in manifestblob (PROJQUAY-1922) (#769)

Mirror

  • 95ec9478: Do not store signatures on repo mirroring (PROJQUAY-2167) (#816)

Modelcache

  • b33f125c: Add read and write endpoints to Redis (PROJQUAY-1939) (#795)
  • df4ad945: Make ModelCache TTL configurable (PROJQUAY-1878) (#765)

Notification

Oauth

  • 7f23e584: add timeout to OAuth token exchange (PROJQUAY-1335) (#735)

Oci

  • 3b13ccd4: Accept the stricter oci layer type used by default in Helm 3.7 (PROJQUAY-2653) (#922) (#949)
  • 1994f2d1: add support for zstd compression (PROJQUAY-1417) (#801)
  • 64bc11fe: allow oci artifact registration (PROJQUAY-1032) (#803)

Organization

  • 6ba0e881: config to allow organization creation on push (PROJQUAY-928) (#799)

Python

Registry

  • b0adc966: add support for extended repository names (PROJQUAY-1535) (#814)

Release

  • 28b36abb: update downstream Dockerfile (PROJQUAY-1861) (#851)

Repository

  • a1b7e4b5: config to allow public repo create (PROJQUAY-1929) (#772)

Requirements

Secscan

  • 1b061534: continue iterating after failure (PROJQUAY-2563) (#894)
  • 79e97785: handle proxy model fallback to noop v2 (PROJQUAY-2289) (#847)
  • 65ec47ab: handle remote layer url when sending request to Clair (PROJQUAY-2269) (#841)

Secscan

Static

Templates

  • 1c157e2a: escape templated script value (PROJQUAY-970) (#828)

Ui

  • a180c52a: force uses to sign-in page to fix SSO CSRF cookie issue (PROJQUAY-2340) (#865)
  • 97fc1b5c: Require user to enter repository when deleting (PROJQUAY-763) (#432)
  • de12ed74: Add repo state column when mirroring enabled (PROJQUAY-591) (#419)

Util

  • cfd4e8c4: fix matching multiples in jsontemplate.py (PROJQUAY-0000) (#800)

Utility

  • 69777301: Fixes backfillreplication script to use manifest blobs (PROJQUAY-2218) (#826)

v3.6.0-alpha.9 - 2021-04-21

Cache

  • 1180ea99: remove GlobalLock from redis model cache (PROJQUAY-1902) (#755)
  • 780685c4: add Redis model cache implementation (PROJQUAY-788) (#444)

Chore

  • 8921114d: v3.6.0-alpha.9 changelog bump (PROJQUAY-1486) (#763)
  • 0ffe9cee: correct chnglog params (PROJQUAY-1486) (#762)
  • addaeac0: fix release image tag to retain leading 'v' (PROJQUAY-1486) (#739)
  • ce7aa978: bump version to 3.6.0 (PROJQUAY-1861) (#738)

Ci

  • e6011cff: include optional merge commit number in commit check job (PROJQUAY-1486) (#742)

Deployment

  • 080010e8: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
  • 03c610d5: Add canary deployment to quay-app (PROJQUAY-1896) (#754)

Gc

  • efa0692e: increment quay_gc_repos_purged for NamespaceGCWorker (PROJQUAY-1802) (#749)
  • f774e4c6: add metrics for deleted resources (#711)

Lock

  • c12654bf: allows global lock to be used from main app (PROJQUAY-788) (#745)
  • 778afaf3: reuse redis client when creating locks (PROJQUAY-1872) (#741)

Queueworker

  • 90f9ef95: prevent stop event on WorkerSleepException (PROJQUAY-1857) (#737)

v3.6.0-alpha.8 - 2021-04-09

Chore

  • ecc125ff: v3.6.0-alpha.8 changelog bump (PROJQUAY-1486) (#732)
  • 166d17ab: correct cut-release.yml (PROJQUAY-1486) (#731)

v3.6.0-alpha.7 - 2021-04-09

Chore

v3.6.0-alpha.6 - 2021-04-09

Chore

  • 6c7dcb84: correct git-chglog config (PROJQUAY-1468) (#728)
  • 43891120: v3.6.0-alpha.6 changelog bump (PROJQUAY-1486) (#727)
  • 043dbffc: fix changelog template (PROJQUAY-1486) (#726)
  • 03347285: parse new CHANGELOG.md format (PROJQUAY-1486) (#725)

v3.6.0-alpha.5 - 2021-04-08

Release

v3.6.0-alpha.4 - 2021-04-08

Release

  • 9dd55dee: fixing Release action (PROJQUAY-1486)

Historical Changelog

CHANGELOG.md