Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | | | Convert jdisc-security-filters to junit5 | Bjørn Christian Seime | 2022-07-27 | 9 | -73/+62 | |
| | | | | ||||||
| * | | | Convert http-utils to junit5 | Bjørn Christian Seime | 2022-07-27 | 5 | -32/+37 | |
| | | | | ||||||
| * | | | Convert athenz-identity-provider-service to junit5 | Bjørn Christian Seime | 2022-07-27 | 7 | -101/+126 | |
| | | | | ||||||
| * | | | Convert security-utils to junit5 | Bjørn Christian Seime | 2022-07-27 | 19 | -159/+153 | |
| | | | | ||||||
| * | | | Add rewrite plugin with junit conversion configuration to parent pom | Bjørn Christian Seime | 2022-07-27 | 1 | -1/+30 | |
|/ / / | ||||||
* | | | Merge pull request #23531 from vespa-engine/move-bundle-setup-to-model | gjoranv | 2022-07-27 | 17 | -63/+145 | |
|\ \ \ | | | | | | | | | Set up more bundles via config-model. [run-systemtest] | |||||
| * | | | Install javax.servlet-api for all containers. | gjoranv | 2022-07-27 | 1 | -5/+5 | |
| | | | | | | | | | | | | | | | | - Used by zkfacade. | |||||
| * | | | Move rule-based-filter config to configdefinitions module/bundle | gjoranv | 2022-07-27 | 9 | -19/+43 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | .. to remove import-package from config-model to jdisc-security-filters. - Keep the old config def for a while in case it's needed by hosted Vespa config models. | |||||
| * | | | Do not preinstall vespa security bundles (installed by config-model) | gjoranv | 2022-07-26 | 1 | -2/+0 | |
| | | | | ||||||
| * | | | Remove unused constant. | gjoranv | 2022-07-26 | 1 | -2/+0 | |
| | | | | ||||||
| * | | | Preinstall javax.servlet-api to standalone-container. | gjoranv | 2022-07-26 | 1 | -0/+1 | |
| | | | | | | | | | | | | | | | | | | | | - It's currently needed by vespa-athenz, which is installed in all containers, except metrics-proxy and clustercontroller. | |||||
| * | | | Install javax.servlet-api with vespa security bundles. | gjoranv | 2022-07-26 | 2 | -4/+5 | |
| | | | | | | | | | | | | | | | | - It is currently needed by vespa-athenz. | |||||
| * | | | Move installing of servlet-api bundle to config-model. | gjoranv | 2022-07-26 | 3 | -2/+5 | |
| | | | | ||||||
| * | | | Implement mechanism for avoiding unnecesssary bundles. | gjoranv | 2022-07-26 | 6 | -26/+81 | |
| | | | | | | | | | | | | | | | | | | | | + Avoid installing security bundles for clustercontroller and metrics-proxy. | |||||
| * | | | minor: use consistent casing for constants | gjoranv | 2022-07-22 | 2 | -2/+2 | |
| | | | | ||||||
| * | | | Add back bundles needed by container-disc to preinstall in pom | gjoranv | 2022-07-21 | 3 | -11/+8 | |
| | | | | ||||||
| * | | | Handle bundle jars with no custom filename suffix. | gjoranv | 2022-07-21 | 1 | -3/+4 | |
| | | | | ||||||
| * | | | Set up more bundles via config-model. | gjoranv | 2022-07-21 | 3 | -15/+19 | |
| | | | | | | | | | | | | | | | | | | | | - These 4 bundles are currently required by all container cluster types, including standalone-containers. | |||||
* | | | | Merge pull request #23541 from ↵ | Bjørn Meland | 2022-07-27 | 6 | -5/+84 | |
|\ \ \ \ | |_|/ / |/| | | | | | | | | | | | vespa-engine/bjormel/add-queryProfileRegistry-to-Application Add query profile registry to application | |||||
| * | | | Default to empty CompiledQueryProfileRegistry | bjormel | 2022-07-26 | 1 | -2/+12 | |
| | | | | ||||||
| * | | | Add getCompiledQueryProfileRegistry() to abi-spec | bjormel | 2022-07-26 | 1 | -0/+1 | |
| | | | | ||||||
| * | | | Attempt to use query profiles from application | bjormel | 2022-07-26 | 5 | -5/+73 | |
|/ / / | ||||||
* | | | Merge pull request #23537 from vespa-engine/kkraune/remove-docker-linkv8.24.3 | Bjørn Meland | 2022-07-26 | 1 | -4/+0 | |
|\ \ \ | | | | | | | | | Remove obsolete | |||||
| * | | | Remove obsolete | Kristian Aune | 2022-07-26 | 1 | -4/+0 | |
|/ / / | | | | | | | | | | - docker dir is removed - this is described in https://github.com/vespa-engine/docker-image-dev#vespa-development-on-centos-stream-8 | |||||
* | | | Merge pull request #23536 from vespa-engine/bratseth/cleanup-09v8.23.6 | Valerij Fredriksen | 2022-07-25 | 4 | -22/+16 | |
|\ \ \ | | | | | | | | | No functional changes | |||||
| * | | | No functional changes | Jon Bratseth | 2022-07-25 | 4 | -22/+16 | |
|/ / / | ||||||
* | | | Merge pull request #23534 from vespa-engine/freva/fix-name | Jon Bratseth | 2022-07-25 | 2 | -5/+6 | |
|\ \ \ | | | | | | | | | Fix cost field name | |||||
| * | | | Fix cost field name | Valerij Fredriksen | 2022-07-25 | 2 | -5/+6 | |
|/ / / | ||||||
* | | | Merge pull request #23529 from akolhun/fix-number-range-parsingv8.22.20 | Jon Bratseth | 2022-07-22 | 2 | -0/+10 | |
|\ \ \ | | | | | | | | | Skip number ranges with empty rangeStart and non-numeric rangeEnd | |||||
| * | | | skip number ranges with empty rangeStart and non-numeric rangeEnd | anton kolhun | 2022-07-21 | 2 | -0/+10 | |
| |/ / | ||||||
* | | | Merge pull request #23533 from vespa-engine/bjorncs/capabilities-feature-flag | Bjørn Christian Seime | 2022-07-21 | 1 | -0/+8 | |
|\ \ \ | | | | | | | | | Add feature flag for capability enforcement mode | |||||
| * | | | Add feature flag for capability enforcement mode | Bjørn Christian Seime | 2022-07-21 | 1 | -0/+8 | |
|/ / / | ||||||
* | | | Merge pull request #23532 from vespa-engine/bjorncs/capabilities | Bjørn Christian Seime | 2022-07-21 | 13 | -89/+225 | |
|\ \ \ | | | | | | | | | Bjorncs/capabilities | |||||
| * | | | Force caller to handle failed capability verification check | Bjørn Christian Seime | 2022-07-21 | 4 | -20/+43 | |
| | | | | ||||||
| * | | | Improve error message | Bjørn Christian Seime | 2022-07-21 | 2 | -2/+2 | |
| | | | | ||||||
| * | | | Move logic for capability checking/logging to ConnectionAuthContext | Bjørn Christian Seime | 2022-07-21 | 6 | -38/+126 | |
| | | | | ||||||
| * | | | Use getSubjectCommonName() | Bjørn Christian Seime | 2022-07-21 | 3 | -12/+3 | |
| | | | | ||||||
| * | | | Get ConnectionAuthContext from SSL session after handshake is complete | Bjørn Christian Seime | 2022-07-21 | 4 | -40/+74 | |
| |/ / | | | | | | | | | | | | | Bound key-value pairs from SSL handshake session are now copied to the final SSL session object. This simplifies the dataflow - not need to retrieve the instance right after our custom trust manager is invoked. | |||||
* | | | Merge pull request #23530 from ↵ | Tor Brede Vekterli | 2022-07-21 | 2 | -315/+0 | |
|\ \ \ | |/ / |/| | | | | | | | | vespa-engine/vekterli/remove-ancient-vespamalloc-output-parse-script Remove ancient vespamalloc output parsing script | |||||
| * | | Remove ancient vespamalloc output parsing script | Tor Brede Vekterli | 2022-07-21 | 2 | -315/+0 | |
|/ / | | | | | | | Most of the symbols that the script knows about are long, long gone. | |||||
* | | Merge pull request #23528 from vespa-engine/bjorncs/capabilities | Bjørn Christian Seime | 2022-07-20 | 81 | -289/+448 | |
|\ \ | | | | | | | Bjorncs/capabilities [run-systemtest] | |||||
| * | | Include client certificate chain even when authorization is disabled | Bjørn Christian Seime | 2022-07-20 | 4 | -7/+14 | |
| | | | ||||||
| * | | Improve testing of JRT access filtering | Bjørn Christian Seime | 2022-07-20 | 4 | -33/+71 | |
| | | | | | | | | | | | | | | | Test that method is not invoked when request is rejected by filter. Move testing of filter accepting request to async- and sync-specific test classes. | |||||
| * | | Implement RequireCapabilitiesFilter in jrt + misc | Bjørn Christian Seime | 2022-07-20 | 11 | -38/+90 | |
| | | | | | | | | | | | | | | | Add peerSpec to Target/Connection. Always provide ConnectionAuthContext. Add helper for creating default, all-granting ConnectionAuthContext. | |||||
| * | | Add to-string helper to ConnectionAuthContext | Bjørn Christian Seime | 2022-07-20 | 1 | -1/+38 | |
| | | | ||||||
| * | | Simplify type definition for subject alternative names | Bjørn Christian Seime | 2022-07-20 | 16 | -54/+52 | |
| | | | ||||||
| * | | Add 'X509CertificateUtils.getSubjectCommonName()' | Bjørn Christian Seime | 2022-07-20 | 1 | -1/+7 | |
| | | | ||||||
| * | | Move generic crypto helpers from 'c.y.s.tls' to 'c.y.s' | Bjørn Christian Seime | 2022-07-20 | 18 | -36/+22 | |
| | | | ||||||
| * | | Merge Java package 'c.y.s.tls.{auth,json,policy}' into 'c.y.s.tls' | Bjørn Christian Seime | 2022-07-20 | 38 | -110/+52 | |
| | | | | | | | | | | | | Facilitate improved encapsulation of Vespa mTLS related classes | |||||
| * | | Remove empty package | Bjørn Christian Seime | 2022-07-20 | 1 | -8/+0 | |
| | | |