summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | Convert jdisc-security-filters to junit5Bjørn Christian Seime2022-07-279-73/+62
| | | |
| * | | Convert http-utils to junit5Bjørn Christian Seime2022-07-275-32/+37
| | | |
| * | | Convert athenz-identity-provider-service to junit5Bjørn Christian Seime2022-07-277-101/+126
| | | |
| * | | Convert security-utils to junit5Bjørn Christian Seime2022-07-2719-159/+153
| | | |
| * | | Add rewrite plugin with junit conversion configuration to parent pomBjørn Christian Seime2022-07-271-1/+30
|/ / /
* | | Merge pull request #23531 from vespa-engine/move-bundle-setup-to-modelgjoranv2022-07-2717-63/+145
|\ \ \ | | | | | | | | Set up more bundles via config-model. [run-systemtest]
| * | | Install javax.servlet-api for all containers.gjoranv2022-07-271-5/+5
| | | | | | | | | | | | | | | | - Used by zkfacade.
| * | | Move rule-based-filter config to configdefinitions module/bundlegjoranv2022-07-279-19/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | .. to remove import-package from config-model to jdisc-security-filters. - Keep the old config def for a while in case it's needed by hosted Vespa config models.
| * | | Do not preinstall vespa security bundles (installed by config-model)gjoranv2022-07-261-2/+0
| | | |
| * | | Remove unused constant.gjoranv2022-07-261-2/+0
| | | |
| * | | Preinstall javax.servlet-api to standalone-container.gjoranv2022-07-261-0/+1
| | | | | | | | | | | | | | | | | | | | - It's currently needed by vespa-athenz, which is installed in all containers, except metrics-proxy and clustercontroller.
| * | | Install javax.servlet-api with vespa security bundles.gjoranv2022-07-262-4/+5
| | | | | | | | | | | | | | | | - It is currently needed by vespa-athenz.
| * | | Move installing of servlet-api bundle to config-model.gjoranv2022-07-263-2/+5
| | | |
| * | | Implement mechanism for avoiding unnecesssary bundles.gjoranv2022-07-266-26/+81
| | | | | | | | | | | | | | | | | | | | + Avoid installing security bundles for clustercontroller and metrics-proxy.
| * | | minor: use consistent casing for constantsgjoranv2022-07-222-2/+2
| | | |
| * | | Add back bundles needed by container-disc to preinstall in pomgjoranv2022-07-213-11/+8
| | | |
| * | | Handle bundle jars with no custom filename suffix.gjoranv2022-07-211-3/+4
| | | |
| * | | Set up more bundles via config-model.gjoranv2022-07-213-15/+19
| | | | | | | | | | | | | | | | | | | | - These 4 bundles are currently required by all container cluster types, including standalone-containers.
* | | | Merge pull request #23541 from ↵Bjørn Meland2022-07-276-5/+84
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | vespa-engine/bjormel/add-queryProfileRegistry-to-Application Add query profile registry to application
| * | | Default to empty CompiledQueryProfileRegistrybjormel2022-07-261-2/+12
| | | |
| * | | Add getCompiledQueryProfileRegistry() to abi-specbjormel2022-07-261-0/+1
| | | |
| * | | Attempt to use query profiles from applicationbjormel2022-07-265-5/+73
|/ / /
* | | Merge pull request #23537 from vespa-engine/kkraune/remove-docker-linkv8.24.3Bjørn Meland2022-07-261-4/+0
|\ \ \ | | | | | | | | Remove obsolete
| * | | Remove obsoleteKristian Aune2022-07-261-4/+0
|/ / / | | | | | | | | | - docker dir is removed - this is described in https://github.com/vespa-engine/docker-image-dev#vespa-development-on-centos-stream-8
* | | Merge pull request #23536 from vespa-engine/bratseth/cleanup-09v8.23.6Valerij Fredriksen2022-07-254-22/+16
|\ \ \ | | | | | | | | No functional changes
| * | | No functional changesJon Bratseth2022-07-254-22/+16
|/ / /
* | | Merge pull request #23534 from vespa-engine/freva/fix-nameJon Bratseth2022-07-252-5/+6
|\ \ \ | | | | | | | | Fix cost field name
| * | | Fix cost field nameValerij Fredriksen2022-07-252-5/+6
|/ / /
* | | Merge pull request #23529 from akolhun/fix-number-range-parsingv8.22.20Jon Bratseth2022-07-222-0/+10
|\ \ \ | | | | | | | | Skip number ranges with empty rangeStart and non-numeric rangeEnd
| * | | skip number ranges with empty rangeStart and non-numeric rangeEndanton kolhun2022-07-212-0/+10
| |/ /
* | | Merge pull request #23533 from vespa-engine/bjorncs/capabilities-feature-flagBjørn Christian Seime2022-07-211-0/+8
|\ \ \ | | | | | | | | Add feature flag for capability enforcement mode
| * | | Add feature flag for capability enforcement modeBjørn Christian Seime2022-07-211-0/+8
|/ / /
* | | Merge pull request #23532 from vespa-engine/bjorncs/capabilitiesBjørn Christian Seime2022-07-2113-89/+225
|\ \ \ | | | | | | | | Bjorncs/capabilities
| * | | Force caller to handle failed capability verification checkBjørn Christian Seime2022-07-214-20/+43
| | | |
| * | | Improve error messageBjørn Christian Seime2022-07-212-2/+2
| | | |
| * | | Move logic for capability checking/logging to ConnectionAuthContextBjørn Christian Seime2022-07-216-38/+126
| | | |
| * | | Use getSubjectCommonName()Bjørn Christian Seime2022-07-213-12/+3
| | | |
| * | | Get ConnectionAuthContext from SSL session after handshake is completeBjørn Christian Seime2022-07-214-40/+74
| |/ / | | | | | | | | | | | | Bound key-value pairs from SSL handshake session are now copied to the final SSL session object. This simplifies the dataflow - not need to retrieve the instance right after our custom trust manager is invoked.
* | | Merge pull request #23530 from ↵Tor Brede Vekterli2022-07-212-315/+0
|\ \ \ | |/ / |/| | | | | | | | vespa-engine/vekterli/remove-ancient-vespamalloc-output-parse-script Remove ancient vespamalloc output parsing script
| * | Remove ancient vespamalloc output parsing scriptTor Brede Vekterli2022-07-212-315/+0
|/ / | | | | | | Most of the symbols that the script knows about are long, long gone.
* | Merge pull request #23528 from vespa-engine/bjorncs/capabilitiesBjørn Christian Seime2022-07-2081-289/+448
|\ \ | | | | | | Bjorncs/capabilities [run-systemtest]
| * | Include client certificate chain even when authorization is disabledBjørn Christian Seime2022-07-204-7/+14
| | |
| * | Improve testing of JRT access filteringBjørn Christian Seime2022-07-204-33/+71
| | | | | | | | | | | | | | | Test that method is not invoked when request is rejected by filter. Move testing of filter accepting request to async- and sync-specific test classes.
| * | Implement RequireCapabilitiesFilter in jrt + miscBjørn Christian Seime2022-07-2011-38/+90
| | | | | | | | | | | | | | | Add peerSpec to Target/Connection. Always provide ConnectionAuthContext. Add helper for creating default, all-granting ConnectionAuthContext.
| * | Add to-string helper to ConnectionAuthContextBjørn Christian Seime2022-07-201-1/+38
| | |
| * | Simplify type definition for subject alternative namesBjørn Christian Seime2022-07-2016-54/+52
| | |
| * | Add 'X509CertificateUtils.getSubjectCommonName()'Bjørn Christian Seime2022-07-201-1/+7
| | |
| * | Move generic crypto helpers from 'c.y.s.tls' to 'c.y.s'Bjørn Christian Seime2022-07-2018-36/+22
| | |
| * | Merge Java package 'c.y.s.tls.{auth,json,policy}' into 'c.y.s.tls'Bjørn Christian Seime2022-07-2038-110/+52
| | | | | | | | | | | | Facilitate improved encapsulation of Vespa mTLS related classes
| * | Remove empty packageBjørn Christian Seime2022-07-201-8/+0
| | |