Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Normalize includes in searchcore and searchlib. | Tor Egge | 2022-09-28 | 1 | -2/+2 |
| | |||||
* | Normalize includes in vespalib. | Tor Egge | 2022-09-27 | 5 | -5/+5 |
| | |||||
* | Normalize includes for btreeinserter.cpp, btreeremover.cpp and btreeroot.cpp | Tor Egge | 2022-09-26 | 5 | -11/+1 |
| | |||||
* | Normalize includes in btreerootbase.cpp | Tor Egge | 2022-09-26 | 1 | -1/+0 |
| | |||||
* | Normalize includes in datastore.cpp, datastore.hpp and datastorebase.cpp. | Tor Egge | 2022-09-26 | 3 | -3/+2 |
| | |||||
* | Merge pull request #24195 from ↵ | Tor Egge | 2022-09-23 | 1 | -2/+2 |
|\ | | | | | | | | | vespa-engine/toregge/use-inline-constexpr-variables Use inline constexpr variables. | ||||
| * | Use inline constexpr variables. | Tor Egge | 2022-09-23 | 1 | -2/+2 |
| | | |||||
* | | Reduce include and visibility of ptrholder.h | Henning Baldersheim | 2022-09-23 | 1 | -1/+4 |
|/ | |||||
* | Include cstddef get definition of size_t. | Tor Egge | 2022-09-22 | 1 | -0/+1 |
| | |||||
* | use more concepts | Håvard Pettersen | 2022-09-21 | 10 | -54/+40 |
| | |||||
* | more flexible ThreadBundle::run variants | Håvard Pettersen | 2022-09-19 | 3 | -41/+63 |
| | |||||
* | Merge pull request #24102 from ↵ | Henning Baldersheim | 2022-09-19 | 4 | -5/+4 |
|\ | | | | | | | | | vespa-engine/balder/avoid-pulling-in-small-vector-everywhere Avoid including smallvector in arrayref, then it is included 'everywh… | ||||
| * | Avoid including smallvector in arrayref, then it is included 'everywhere'. | Henning Baldersheim | 2022-09-16 | 4 | -5/+4 |
| | | |||||
* | | Remove ifdefs for g++ version older than g++ 10. | Tor Egge | 2022-09-18 | 2 | -2/+2 |
| | | |||||
* | | Backport to gcc 10 (system compiler on Debian 11). | Tor Egge | 2022-09-18 | 4 | -10/+15 |
|/ | |||||
* | start using concepts in vespalib | Håvard Pettersen | 2022-09-15 | 5 | -19/+22 |
| | |||||
* | more convenient ThreadBundle::run | Håvard Pettersen | 2022-09-14 | 5 | -15/+99 |
| | |||||
* | thread bundle now available when calculating the global filter | Håvard Pettersen | 2022-09-12 | 3 | -0/+31 |
| | |||||
* | Unify og getNumActiveDocs and hide some implementations. | Henning Baldersheim | 2022-09-09 | 1 | -3/+3 |
| | |||||
* | Merge pull request #23980 from ↵ | Tor Brede Vekterli | 2022-09-08 | 3 | -4/+5 |
|\ | | | | | | | | | vespa-engine/vekterli/add-status-page-frame-ancestors-csp Add frame-ancestors: 'none' to CSP headers returned by internal server | ||||
| * | Update test HTTP header expectations | Tor Brede Vekterli | 2022-09-08 | 2 | -2/+2 |
| | | |||||
| * | Add frame-ancestors: 'none' to CSP headers returned by internal server | Tor Brede Vekterli | 2022-09-08 | 1 | -2/+3 |
| | | | | | | | | | | We already have (and will continue to have) `X-Frame-Options: DENY`, but this is the more modern version of it. | ||||
* | | Revert "Revert "Unify access to assets needed during rank-setup."" | Henning Baldersheim | 2022-09-07 | 1 | -2/+5 |
|/ | |||||
* | Revert "Unify access to assets needed during rank-setup." | Tor Egge | 2022-09-07 | 1 | -5/+2 |
| | |||||
* | Unify access to assets needed during rank-setup. | Henning Baldersheim | 2022-09-06 | 1 | -2/+5 |
| | |||||
* | Merge pull request #23946 from ↵ | Henning Baldersheim | 2022-09-06 | 3 | -64/+91 |
|\ | | | | | | | | | vespa-engine/havardpe/rank-profile-report-name-mapping-support support mapping names in execution profiling output | ||||
| * | support mapping names in execution profiling output | Håvard Pettersen | 2022-09-06 | 3 | -64/+91 |
| | | | | | | | | | | use feature descriptions rather than raw feature names drop single quotes from feature descriptions | ||||
* | | Factor out XML attribute/content escaping to own utility functions | Tor Brede Vekterli | 2022-09-05 | 7 | -50/+163 |
|/ | |||||
* | Use vespalib::SmartBuffer instead of ancient RawBuf. | Henning Baldersheim | 2022-08-30 | 2 | -2/+5 |
| | |||||
* | Reduce usage of RawBuf. | Henning Baldersheim | 2022-08-29 | 1 | -1/+1 |
| | | | | Remove some unused code. | ||||
* | Merge pull request #23832 from ↵ | Tor Brede Vekterli | 2022-08-29 | 4 | -13/+13 |
|\ | | | | | | | | | vespa-engine/vekterli/capability-filtering-of-content-status-pages Add capability filtering for content layer status pages and metrics [run-systemtest] | ||||
| * | Unify to_string for PeerCredentials to match other types | Tor Brede Vekterli | 2022-08-29 | 4 | -13/+13 |
| | | |||||
* | | remove unused doxygen setup files | Arne Juul | 2022-08-29 | 1 | -215/+0 |
|/ | |||||
* | Expose underlying connection auth context in Portal GetRequest | Tor Brede Vekterli | 2022-08-26 | 4 | -4/+28 |
| | |||||
* | Add capabilities and RPC filters for sentinel and internal Proton APIs | Tor Brede Vekterli | 2022-08-25 | 3 | -12/+31 |
| | |||||
* | Fix forward declaration. | Tor Egge | 2022-08-24 | 1 | -1/+1 |
| | |||||
* | Merge pull request #23749 from ↵ | Tor Brede Vekterli | 2022-08-23 | 1 | -1/+1 |
|\ | | | | | | | | | vespa-engine/vekterli/let-compiler-warn-on-missing-switch-cases Let compiler warn on missing switch cases for enums | ||||
| * | Let compiler warn on missing switch cases for enums | Tor Brede Vekterli | 2022-08-23 | 1 | -1/+1 |
| | | | | | | | | Minor cleanup sweep. | ||||
* | | Merge pull request #23737 from ↵ | Tor Brede Vekterli | 2022-08-23 | 9 | -8/+109 |
|\ \ | |/ |/| | | | | | vespa-engine/vekterli/support-capability-enforcement-env-var Support capability enforcement environment variable in C++ [run-systemtest] | ||||
| * | Let compiler warn if we have incomplete enum set in case-list | Tor Brede Vekterli | 2022-08-23 | 1 | -1/+1 |
| | | |||||
| * | Support capability enforcement environment variable in C++ | Tor Brede Vekterli | 2022-08-22 | 9 | -8/+109 |
| | | | | | | | | | | | | | | | | | | | | Mirrors Java enforce/log-only/disable semantics, defaulting to enforce. Also fixes an issue where connection auth context and capabilities would not be set if a server socket was running in mixed-mode. This is not a problem in practice since mixed-mode is inherently completely insecure since it must accept plain-text clients, which implicitly have all capabilities granted. | ||||
* | | added simple profiler | Håvard Pettersen | 2022-08-22 | 6 | -4/+369 |
|/ | |||||
* | Merge pull request #23330 from ↵ | Henning Baldersheim | 2022-07-04 | 1 | -2/+2 |
|\ | | | | | | | | | vespa-engine/toregge/fix-format-string-in-tsan-digest Fix format string in vespa-tsan-digest. | ||||
| * | Fix format string in vespa-tsan-digest. | Tor Egge | 2022-07-03 | 1 | -2/+2 |
| | | |||||
* | | Merge pull request #23331 from ↵ | Henning Baldersheim | 2022-07-04 | 1 | -0/+1 |
|\ \ | | | | | | | | | | | | | vespa-engine/toregge/include-csignal-to-get-declaration-of-kill Include csignal to get declaration of kill | ||||
| * | | Include csignal to get declaration of kill | Tor Egge | 2022-07-03 | 1 | -0/+1 |
| |/ | |||||
* / | GNU source is not required for boost stacktrace on darwin. | Tor Egge | 2022-07-03 | 1 | -0/+3 |
|/ | |||||
* | Add noexcept specifier. | Tor Egge | 2022-07-03 | 4 | -6/+6 |
| | |||||
* | Refactor Capability(Set) and add more testing | Tor Brede Vekterli | 2022-06-30 | 5 | -70/+122 |
| | | | | | | | Hide all nitty-gritty details of how capabilities map to internal bit set positions by making more of Capability private and only allowing CapabilitySet to see how the sausages are made. Move all bit set functionality to CapabilitySet, where it really belongs. | ||||
* | Support mTLS connection-level capabilities and RPC access filtering in C++ | Tor Brede Vekterli | 2022-06-29 | 33 | -312/+848 |
| | | | | | | | | | | | | | | | | | | | | | | | | Adds the following: * Named capabilities and capability sets that represent (respectively) a single Vespa access API (such as Document API, search API etc) or a concrete subset of individual capabilities that make up a particular Vespa service (such as a content node). * A new `capabilities` array field to the mTLS authorization policies that allows for constraining what requests sent over a particular connection are allowed to actually do. Capabilities are referenced by name and may include any combination of capability sets and individual capabilities. If multiple capabilities/sets are configured, the resulting set of capabilities is the union set of all of them. * An FRT RPC-level access filter that can be set up as part of RPC method definitions. If set, filters are invoked prior to RPC methods. * A new `PERMISSION_DENIED` error code to FRT RPC that is invoked if an access filter denies a request. This also GCs the unused `AssumedRoles` concept which is now deprecated in favor of capabilities. Note: this is **not yet** a public or stable API, and capability names/semantics may change at any time. |