arvados.git
4 years ago16007: Update trashed_groups incrementally
Peter Amstutz [Mon, 4 May 2020 21:13:24 +0000 (17:13 -0400)]
16007: Update trashed_groups incrementally

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16007: Check trash_at timestamp
Peter Amstutz [Mon, 4 May 2020 20:59:06 +0000 (16:59 -0400)]
16007: Check trash_at timestamp

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16007: Remove 'trashed' from permission computation
Peter Amstutz [Mon, 4 May 2020 20:34:24 +0000 (16:34 -0400)]
16007: Remove 'trashed' from permission computation

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16007: Separating 'trashed' from 'permissions' WIP
Peter Amstutz [Mon, 4 May 2020 20:22:59 +0000 (16:22 -0400)]
16007: Separating 'trashed' from 'permissions' WIP

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16007: Use table instead of materialized view for permissions
Peter Amstutz [Fri, 1 May 2020 18:26:35 +0000 (14:26 -0400)]
16007: Use table instead of materialized view for permissions

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years agoMerge branch '16343-create-cr-with-logincluster-token'
Tom Clegg [Wed, 29 Apr 2020 21:09:19 +0000 (17:09 -0400)]
Merge branch '16343-create-cr-with-logincluster-token'

fixes #16343

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoUpdated Arvados on Kubernetes documentation.
Ward Vandewege [Mon, 27 Apr 2020 19:58:34 +0000 (15:58 -0400)]
Updated Arvados on Kubernetes documentation.

No issue #

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agoMerge branch '16263-fed-test-on-jenkins' refs #16263
Peter Amstutz [Wed, 29 Apr 2020 17:12:10 +0000 (13:12 -0400)]
Merge branch '16263-fed-test-on-jenkins' refs #16263

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16366: "InternalURLs" and "AccessViaHosts" are consistent in install
Peter Amstutz [Tue, 28 Apr 2020 20:44:30 +0000 (16:44 -0400)]
16366: "InternalURLs" and "AccessViaHosts" are consistent in install

refs #16366

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Ensure arvbox in $PATH
Peter Amstutz [Fri, 24 Apr 2020 21:24:33 +0000 (17:24 -0400)]
16263: Ensure arvbox in $PATH

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: jenkin script to run whole fed-migrate test
Peter Amstutz [Fri, 24 Apr 2020 19:13:36 +0000 (15:13 -0400)]
16263: jenkin script to run whole fed-migrate test

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: make the checker happy
Peter Amstutz [Fri, 24 Apr 2020 15:52:24 +0000 (11:52 -0400)]
16263: make the checker happy

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Fed tests can set arvbox mode (dev or localdemo)
Peter Amstutz [Fri, 24 Apr 2020 15:25:58 +0000 (11:25 -0400)]
16263: Fed tests can set arvbox mode (dev or localdemo)

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16364: Fix arvbox websockets demo build
Peter Amstutz [Fri, 24 Apr 2020 14:49:59 +0000 (10:49 -0400)]
16364: Fix arvbox websockets demo build

refs #16364

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16364: Fix arvbox websockets startup
Peter Amstutz [Fri, 24 Apr 2020 13:52:51 +0000 (09:52 -0400)]
16364: Fix arvbox websockets startup

Also make controller run as root to migrate to PAM

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years agoMerge branch '16356-arvboot-health-externalurl'
Lucas Di Pentima [Thu, 23 Apr 2020 01:37:29 +0000 (22:37 -0300)]
Merge branch '16356-arvboot-health-externalurl'
Closes #16356

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16356: Adds missing Health service section.
Lucas Di Pentima [Wed, 22 Apr 2020 21:25:06 +0000 (18:25 -0300)]
16356: Adds missing Health service section.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16356: Merge branch 'master' into 16356-arvboot-health-externalurl
Lucas Di Pentima [Wed, 22 Apr 2020 21:09:43 +0000 (18:09 -0300)]
16356: Merge branch 'master' into 16356-arvboot-health-externalurl

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16356: Makes health aggregator accessible from the outside on arvados boot.
Lucas Di Pentima [Wed, 22 Apr 2020 21:09:24 +0000 (18:09 -0300)]
16356: Makes health aggregator accessible from the outside on arvados boot.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16343: Fix handling of local CR creation when LoginCluster is used.
Tom Clegg [Wed, 22 Apr 2020 20:50:06 +0000 (16:50 -0400)]
16343: Fix handling of local CR creation when LoginCluster is used.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16343: Test container request creation with LoginCluster enabled.
Tom Clegg [Wed, 22 Apr 2020 20:33:27 +0000 (16:33 -0400)]
16343: Test container request creation with LoginCluster enabled.

Reveals bug when cluster does not list itself as a remote.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16343: Add debug logs in token checking code.
Tom Clegg [Wed, 22 Apr 2020 20:31:06 +0000 (16:31 -0400)]
16343: Add debug logs in token checking code.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoMerge branch '16328-keep-proxy-uses-config.yaml-to-find-keepstores'
Ward Vandewege [Wed, 22 Apr 2020 01:34:47 +0000 (21:34 -0400)]
Merge branch '16328-keep-proxy-uses-config.yaml-to-find-keepstores'

closes #16328

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years ago16328: Merge branch 'master' into 16328-keep-proxy-uses-config.yaml-to-find-keepstores
Ward Vandewege [Wed, 22 Apr 2020 01:33:48 +0000 (21:33 -0400)]
16328: Merge branch 'master' into 16328-keep-proxy-uses-config.yaml-to-find-keepstores

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years ago16328: If config.yml is available, use the keepstores defined there instead of
Ward Vandewege [Mon, 13 Apr 2020 21:57:03 +0000 (17:57 -0400)]
16328: If config.yml is available, use the keepstores defined there instead of
the legacy autodiscover mechanism via the API server.

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agoMerge branch '16048-reload-config'
Tom Clegg [Tue, 21 Apr 2020 18:34:18 +0000 (14:34 -0400)]
Merge branch '16048-reload-config'

closes #16048

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoMerge branch '16341-rack-security-upgrades'
Lucas Di Pentima [Tue, 21 Apr 2020 17:58:24 +0000 (14:58 -0300)]
Merge branch '16341-rack-security-upgrades'
Closes #16341

4 years ago16341: Upgrades rack on API & Workbench.
Lucas Di Pentima [Tue, 21 Apr 2020 16:55:10 +0000 (13:55 -0300)]
16341: Upgrades rack on API & Workbench.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch 'dantetwc-master'. Closes #16340
Lucas Di Pentima [Mon, 20 Apr 2020 16:46:51 +0000 (13:46 -0300)]
Merge branch 'dantetwc-master'. Closes #16340

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoArvados-DCO-1.1-Signed-off-by: Dante Tsang <dante@dantetsang.com>
Dante Tsang [Mon, 20 Apr 2020 15:20:40 +0000 (23:20 +0800)]
Arvados-DCO-1.1-Signed-off-by: Dante Tsang <dante@dantetsang.com>

Updated AUTHORS file

4 years ago- Fixed FetchAll method for Container queue in order to make use of preemptible instance
Dante Tsang [Mon, 20 Apr 2020 10:23:56 +0000 (18:23 +0800)]
- Fixed FetchAll method for Container queue in order to make use of preemptible instance

4 years agoMerge branch '16029-arvboot-listenhost-ssl-altname'
Lucas Di Pentima [Fri, 17 Apr 2020 20:01:40 +0000 (17:01 -0300)]
Merge branch '16029-arvboot-listenhost-ssl-altname'
Refs #16029

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16029: Creates SSL certificate with -listen-host as alternate name.
Lucas Di Pentima [Fri, 17 Apr 2020 14:52:59 +0000 (11:52 -0300)]
16029: Creates SSL certificate with -listen-host as alternate name.

This allows to run arvados boot on a docker container and access it
from the outside without the browser complaining about invalid certs.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoAdd example of scripting arvados-server boot.
Tom Clegg [Thu, 16 Apr 2020 23:52:47 +0000 (19:52 -0400)]
Add example of scripting arvados-server boot.

No issue #

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoRemove "template=template0" from db connection params.
Tom Clegg [Thu, 16 Apr 2020 19:40:28 +0000 (15:40 -0400)]
Remove "template=template0" from db connection params.

It's not a valid connection param. Only pass it to Rails in test mode
as a pseudo connection param.

No issue #

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoFix typo in error message.
Ward Vandewege [Mon, 13 Apr 2020 23:23:48 +0000 (19:23 -0400)]
Fix typo in error message.

No issue #

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agoMerge branch '16313-minimum-container-memory-limit'
Lucas Di Pentima [Mon, 13 Apr 2020 18:45:04 +0000 (15:45 -0300)]
Merge branch '16313-minimum-container-memory-limit'
Closes #16313

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoBump mithril for advisory https://www.npmjs.com/advisories/1094
Peter Amstutz [Mon, 13 Apr 2020 18:38:15 +0000 (14:38 -0400)]
Bump mithril for advisory https://npmjs.com/advisories/1094

no issue #

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16313: Updates minimum requestd ram on docker containers from 4 to 16 MB.
Lucas Di Pentima [Mon, 13 Apr 2020 18:34:12 +0000 (15:34 -0300)]
16313: Updates minimum requestd ram on docker containers from 4 to 16 MB.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoPin jssha to 2.4.2
Peter Amstutz [Mon, 13 Apr 2020 18:00:32 +0000 (14:00 -0400)]
Pin jssha to 2.4.2

no issue #

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years agoMerge branch '16263-logincluster-user-list-fix' refs #16263
Peter Amstutz [Mon, 13 Apr 2020 14:42:47 +0000 (10:42 -0400)]
Merge branch '16263-logincluster-user-list-fix' refs #16263

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Add test for BypassFederation
Peter Amstutz [Mon, 13 Apr 2020 14:25:11 +0000 (10:25 -0400)]
16263: Add test for BypassFederation

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16048: arvados-server boot: restart everything when config changes.
Tom Clegg [Fri, 10 Apr 2020 19:44:14 +0000 (15:44 -0400)]
16048: arvados-server boot: restart everything when config changes.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoFix tests.
Ward Vandewege [Fri, 10 Apr 2020 12:56:56 +0000 (08:56 -0400)]
Fix tests.

refs #16326

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agoMerge branch '16326-doc-and-keepstore-update'
Ward Vandewege [Thu, 9 Apr 2020 22:29:13 +0000 (18:29 -0400)]
Merge branch '16326-doc-and-keepstore-update'

refs #16326

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agodocumentation: update descriptions for MaxKeepBlobBuffers and MaxConcurrentRequests
Ward Vandewege [Thu, 9 Apr 2020 21:53:31 +0000 (17:53 -0400)]
documentation: update descriptions for MaxKeepBlobBuffers and MaxConcurrentRequests

keepstore: MaxConcurrentRequests set to zero should mean no limit

refs #16326

Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>

4 years agoWarn if MaxKeepBlobBuffers > MaxConcurrentRequests.
Tom Clegg [Thu, 9 Apr 2020 20:58:36 +0000 (16:58 -0400)]
Warn if MaxKeepBlobBuffers > MaxConcurrentRequests.

No issue #

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoMerge branch '16212-pam-login'
Tom Clegg [Wed, 8 Apr 2020 14:11:23 +0000 (10:11 -0400)]
Merge branch '16212-pam-login'

refs #16212

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Populate all api_client_auth fields.
Tom Clegg [Tue, 7 Apr 2020 21:26:46 +0000 (17:26 -0400)]
16212: Populate all api_client_auth fields.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoMerge branch '16053-install-deps'
Tom Clegg [Tue, 7 Apr 2020 19:25:16 +0000 (15:25 -0400)]
Merge branch '16053-install-deps'

refs #16053

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16053: Avoid using host's tmp/cache dir in railsapi.
Tom Clegg [Tue, 7 Apr 2020 14:32:48 +0000 (10:32 -0400)]
16053: Avoid using host's tmp/cache dir in railsapi.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years agoMerge branch '16217-ws-metrics'
Tom Clegg [Mon, 6 Apr 2020 19:54:34 +0000 (15:54 -0400)]
Merge branch '16217-ws-metrics'

refs #16217

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: Pulls from official git repo when running federation tests.
Lucas Di Pentima [Mon, 6 Apr 2020 14:01:18 +0000 (11:01 -0300)]
16263: Pulls from official git repo when running federation tests.

This is helpful to ask for specific branches that aren't published on github.

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16270-instance-type'
Tom Clegg [Thu, 2 Apr 2020 15:33:46 +0000 (11:33 -0400)]
Merge branch '16270-instance-type'

fixes #16270

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: User migration test also checks federated user behavior
Peter Amstutz [Thu, 2 Apr 2020 14:52:44 +0000 (10:52 -0400)]
16263: User migration test also checks federated user behavior

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16270: Fill in missing scratch fields on InstanceType entries.
Tom Clegg [Wed, 1 Apr 2020 20:44:02 +0000 (16:44 -0400)]
16270: Fill in missing scratch fields on InstanceType entries.

Previously they were being filled in correctly when written as an
array in the config file, but not when written as a map.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16217: Restore http.Hijacker capability to wrapped ResponseWriter.
Tom Clegg [Wed, 1 Apr 2020 17:42:43 +0000 (13:42 -0400)]
16217: Restore http.Hijacker capability to wrapped ResponseWriter.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16217: Fix test (satisfy additional handler interface).
Tom Clegg [Wed, 1 Apr 2020 17:42:08 +0000 (13:42 -0400)]
16217: Fix test (satisfy additional handler interface).

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16217: Update startup scripts to run "arvados-server ws".
Tom Clegg [Wed, 1 Apr 2020 15:59:06 +0000 (11:59 -0400)]
16217: Update startup scripts to run "arvados-server ws".

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Return error for users/authenticate endpoint in SSO mode.
Tom Clegg [Wed, 1 Apr 2020 15:50:03 +0000 (11:50 -0400)]
16212: Return error for users/authenticate endpoint in SSO mode.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Don't forward users/authenticate to Rails in legacy mode.
Tom Clegg [Wed, 1 Apr 2020 15:49:16 +0000 (11:49 -0400)]
16212: Don't forward users/authenticate to Rails in legacy mode.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: Tweak federation tests, use CWL 1.1
Peter Amstutz [Wed, 1 Apr 2020 01:03:42 +0000 (21:03 -0400)]
16263: Tweak federation tests, use CWL 1.1

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Add bypass_federation test
Peter Amstutz [Tue, 31 Mar 2020 21:42:03 +0000 (17:42 -0400)]
16263: Add bypass_federation test

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Fix no_federation -> bypass_federation in boolParms
Peter Amstutz [Tue, 31 Mar 2020 21:16:57 +0000 (17:16 -0400)]
16263: Fix no_federation -> bypass_federation in boolParms

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Fix only_admin_can_bypass_federation
Peter Amstutz [Tue, 31 Mar 2020 21:12:31 +0000 (17:12 -0400)]
16263: Fix only_admin_can_bypass_federation

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16217: Update boot command to run ws via arvados-server.
Tom Clegg [Tue, 31 Mar 2020 20:55:16 +0000 (16:55 -0400)]
16217: Update boot command to run ws via arvados-server.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16217: Merge branch 'master'
Tom Clegg [Tue, 31 Mar 2020 20:51:35 +0000 (16:51 -0400)]
16217: Merge branch 'master'

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: Missed rename
Peter Amstutz [Tue, 31 Mar 2020 20:45:49 +0000 (16:45 -0400)]
16263: Missed rename

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Rename no_federation -> bypass_federation
Peter Amstutz [Tue, 31 Mar 2020 20:33:27 +0000 (16:33 -0400)]
16263: Rename no_federation -> bypass_federation

Enforce if bypass_federation is true that user is admin.

Update API revision and make federation migrate check for it.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Add no_federation to user update
Peter Amstutz [Tue, 31 Mar 2020 18:42:46 +0000 (14:42 -0400)]
16263: Add no_federation to user update

We might agree on a different API but try this and see if it helps
pass the test.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16053: Merge branch 'master'
Tom Clegg [Tue, 31 Mar 2020 17:52:23 +0000 (13:52 -0400)]
16053: Merge branch 'master'

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16053: Error out on unimplemented install in production mode.
Tom Clegg [Tue, 31 Mar 2020 17:51:31 +0000 (13:51 -0400)]
16053: Error out on unimplemented install in production mode.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Merge branch 'master'
Tom Clegg [Tue, 31 Mar 2020 17:11:17 +0000 (13:11 -0400)]
16212: Merge branch 'master'

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Upate generated default config.
Tom Clegg [Tue, 31 Mar 2020 17:10:06 +0000 (13:10 -0400)]
16212: Upate generated default config.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Fix propagation of logout redirect target.
Tom Clegg [Tue, 31 Mar 2020 17:08:32 +0000 (13:08 -0400)]
16212: Fix propagation of logout redirect target.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Add clues/details to authentication error messages.
Tom Clegg [Tue, 31 Mar 2020 15:27:01 +0000 (11:27 -0400)]
16212: Add clues/details to authentication error messages.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Make test timeout more predictable by pulling image first.
Tom Clegg [Tue, 31 Mar 2020 15:26:01 +0000 (11:26 -0400)]
16212: Make test timeout more predictable by pulling image first.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Ensure added user doesn't prevent subsequent database reset.
Tom Clegg [Tue, 31 Mar 2020 14:32:17 +0000 (10:32 -0400)]
16212: Ensure added user doesn't prevent subsequent database reset.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: local_user_list -> no_federation in boolParams
Peter Amstutz [Tue, 31 Mar 2020 02:30:10 +0000 (22:30 -0400)]
16263: local_user_list -> no_federation in boolParams

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Generalize "local_user_list" flag to "no_federation"
Peter Amstutz [Tue, 31 Mar 2020 02:14:23 +0000 (22:14 -0400)]
16263: Generalize "local_user_list" flag to "no_federation"

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16212: Disallow overriding HTTP method on GET requests.
Tom Clegg [Mon, 30 Mar 2020 21:26:40 +0000 (17:26 -0400)]
16212: Disallow overriding HTTP method on GET requests.

Removes an opportunity to circumvent CORS restrictions.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Fix wrong API endpoint for users/batch_update.
Tom Clegg [Mon, 30 Mar 2020 21:26:22 +0000 (17:26 -0400)]
16212: Fix wrong API endpoint for users/batch_update.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16212: Move user/pass authentication to its own endpoint.
Tom Clegg [Mon, 30 Mar 2020 21:26:13 +0000 (17:26 -0400)]
16212: Move user/pass authentication to its own endpoint.

Overloading the /login endpoint turns out to be too awkward: method,
CORS permissions, and response type are all different.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: UserMerge shouldn't be federated
Peter Amstutz [Mon, 30 Mar 2020 21:12:17 +0000 (17:12 -0400)]
16263: UserMerge shouldn't be federated

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Fix omitempty placement
Peter Amstutz [Mon, 30 Mar 2020 18:50:06 +0000 (14:50 -0400)]
16263: Fix omitempty placement

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Add omitempty to GetOptions
Peter Amstutz [Mon, 30 Mar 2020 18:43:36 +0000 (14:43 -0400)]
16263: Add omitempty to GetOptions

Don't try to migrate if activate_remote_user fails.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16212: Allow X-Http-Method-Override header in CORS requests.
Tom Clegg [Mon, 30 Mar 2020 16:44:53 +0000 (12:44 -0400)]
16212: Allow X-Http-Method-Override header in CORS requests.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16263: Add local_user_list to boolParams
Peter Amstutz [Sat, 28 Mar 2020 01:36:09 +0000 (21:36 -0400)]
16263: Add local_user_list to boolParams

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years ago16263: Add local_user_list flag to bypass LoginCluster behavior
Peter Amstutz [Fri, 27 Mar 2020 21:08:48 +0000 (17:08 -0400)]
16263: Add local_user_list flag to bypass LoginCluster behavior

Required by federation migrate script.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

4 years agoMerge branch '16265-security-updates'
Lucas Di Pentima [Fri, 27 Mar 2020 15:04:07 +0000 (12:04 -0300)]
Merge branch '16265-security-updates'
Closes #16265

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16266-wb1-xss-fix'
Lucas Di Pentima [Fri, 27 Mar 2020 14:21:36 +0000 (11:21 -0300)]
Merge branch '16266-wb1-xss-fix'
Closes #16266

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years ago16212: Return 401 or 500 instead of 200 on authentication failure.
Tom Clegg [Thu, 26 Mar 2020 18:31:18 +0000 (14:31 -0400)]
16212: Return 401 or 500 instead of 200 on authentication failure.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>

4 years ago16265: Merge branch 'dependabot/bundler/services/api/nokogiri-1.10.8' into 16265...
Lucas Di Pentima [Thu, 26 Mar 2020 17:02:40 +0000 (14:02 -0300)]
16265: Merge branch 'dependabot/bundler/services/api/nokogiri-1.10.8' into 16265-security-updates

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16265-security-updates' into dependabot/bundler/services/api/nokogiri...
Lucas Di Pentima [Thu, 26 Mar 2020 17:02:24 +0000 (14:02 -0300)]
Merge branch '16265-security-updates' into dependabot/bundler/services/api/nokogiri-1.10.8

4 years ago16265: Merge branch 'dependabot/bundler/apps/workbench/loofah-2.3.1' into 16265-secur...
Lucas Di Pentima [Thu, 26 Mar 2020 16:59:58 +0000 (13:59 -0300)]
16265: Merge branch 'dependabot/bundler/apps/workbench/loofah-2.3.1' into 16265-security-updates

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16265-security-updates' into dependabot/bundler/apps/workbench/loofah...
Lucas Di Pentima [Thu, 26 Mar 2020 16:59:19 +0000 (13:59 -0300)]
Merge branch '16265-security-updates' into dependabot/bundler/apps/workbench/loofah-2.3.1

4 years ago16265: Merge branch 'dependabot/bundler/apps/workbench/nokogiri-1.10.8' into 16265...
Lucas Di Pentima [Thu, 26 Mar 2020 16:56:37 +0000 (13:56 -0300)]
16265: Merge branch 'dependabot/bundler/apps/workbench/nokogiri-1.10.8' into 16265-security-updates

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16265-security-updates' into dependabot/bundler/apps/workbench/nokogiri...
Lucas Di Pentima [Thu, 26 Mar 2020 16:56:18 +0000 (13:56 -0300)]
Merge branch '16265-security-updates' into dependabot/bundler/apps/workbench/nokogiri-1.10.8

4 years ago16265: Merge branch 'dependabot/bundler/apps/workbench/rake-13.0.1' into 16265-securi...
Lucas Di Pentima [Thu, 26 Mar 2020 16:54:26 +0000 (13:54 -0300)]
16265: Merge branch 'dependabot/bundler/apps/workbench/rake-13.0.1' into 16265-security-updates

Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>

4 years agoMerge branch '16265-security-updates' into dependabot/bundler/apps/workbench/rake...
Lucas Di Pentima [Thu, 26 Mar 2020 16:54:07 +0000 (13:54 -0300)]
Merge branch '16265-security-updates' into dependabot/bundler/apps/workbench/rake-13.0.1