Lucas Di Pentima [Tue, 12 May 2020 12:46:40 +0000 (09:46 -0300)]
16118: Set URL path to '/' to all services instead of just keep-web.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Mon, 11 May 2020 18:26:28 +0000 (15:26 -0300)]
16118: Keep-web initializes its client pool from config instead of envvars.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Thu, 7 May 2020 21:38:08 +0000 (18:38 -0300)]
16118: Fixes ExternalURL configs for keep-web & websocket.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Ward Vandewege [Mon, 4 May 2020 17:37:21 +0000 (13:37 -0400)]
Merge branch '16393-keepproxy-timeout-with-slow-clients'
closes #16393
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Ward Vandewege [Fri, 1 May 2020 20:55:01 +0000 (16:55 -0400)]
16393: keepproxy used cluster.API.KeepServiceRequestTimeout (defaults to
15s) as the timeout on its connection to the keepstores. When a slow client
sends blocks to keepproxy, they get streamed through to keepstore, and
the upload can take more than cluster.API.KeepServiceRequestTimeout
seconds. Update keepproxy to use keepclient.DefaultProxyRequestTimeout
(300s) instead when it connects to the keepstores.
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Tom Clegg [Fri, 1 May 2020 19:58:58 +0000 (15:58 -0400)]
Add StartedAt and FinishedAt fields to arvados.Container.
No issue #
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Fri, 1 May 2020 19:10:44 +0000 (15:10 -0400)]
Merge branch '16349-non-utc-timestamps'
fixes #16349
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Fri, 1 May 2020 18:51:41 +0000 (14:51 -0400)]
Merge branch '16212-pam-install-docs'
refs #16212
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Fri, 1 May 2020 18:27:52 +0000 (14:27 -0400)]
16212: Merge branch 'master'
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Fri, 1 May 2020 18:26:32 +0000 (14:26 -0400)]
16212: Add PAM configuration hints.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Lucas Di Pentima [Fri, 1 May 2020 13:30:04 +0000 (10:30 -0300)]
Fixes 'apt-get install' example on SSO install page.
No issue #
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Ward Vandewege [Thu, 30 Apr 2020 19:32:57 +0000 (15:32 -0400)]
Arvados on Kubernetes now has workbench2 as well.
closes #16384
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Lucas Di Pentima [Thu, 30 Apr 2020 18:37:27 +0000 (15:37 -0300)]
Fixes documentation quotation usage. No issue #
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Tom Clegg [Wed, 29 Apr 2020 21:09:19 +0000 (17:09 -0400)]
Merge branch '16343-create-cr-with-logincluster-token'
fixes #16343
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 29 Apr 2020 19:37:32 +0000 (15:37 -0400)]
16349: Set time zone to UTC at db connection level.
This covers the trash time comparisons in materialized_permission_view
as well as explicit uses of CURRENT_TIMESTAMP in Rails queries.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Ward Vandewege [Mon, 27 Apr 2020 19:58:34 +0000 (15:58 -0400)]
Updated Arvados on Kubernetes documentation.
No issue #
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Peter Amstutz [Wed, 29 Apr 2020 17:12:10 +0000 (13:12 -0400)]
Merge branch '16263-fed-test-on-jenkins' refs #16263
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 28 Apr 2020 20:44:30 +0000 (16:44 -0400)]
16366: "InternalURLs" and "AccessViaHosts" are consistent in install
refs #16366
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Mon, 27 Apr 2020 20:57:55 +0000 (16:57 -0400)]
16349: Skip converting DB timestamps to & from localtime.
The previous code already returned the correct time. This change
merely avoids converting the time to the local time zone in
PostgreSQL, and back to UTC again in Rails.
This might also avoid rare problems in unusual edge cases where Rails
and PostgreSQL session use different time zones, like a configuration
mishap or a race during a daylight savings time transition.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Mon, 27 Apr 2020 20:37:49 +0000 (16:37 -0400)]
16349: Fix TZ-sensitive comparison in token expiry checks.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Mon, 27 Apr 2020 20:37:19 +0000 (16:37 -0400)]
16349: Test token expiry using actual token validation func.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Fri, 24 Apr 2020 21:24:33 +0000 (17:24 -0400)]
16263: Ensure arvbox in $PATH
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Fri, 24 Apr 2020 19:13:36 +0000 (15:13 -0400)]
16263: jenkin script to run whole fed-migrate test
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Fri, 24 Apr 2020 15:52:24 +0000 (11:52 -0400)]
16263: make the checker happy
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Fri, 24 Apr 2020 15:25:58 +0000 (11:25 -0400)]
16263: Fed tests can set arvbox mode (dev or localdemo)
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Fri, 24 Apr 2020 14:49:59 +0000 (10:49 -0400)]
16364: Fix arvbox websockets demo build
refs #16364
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Fri, 24 Apr 2020 13:52:51 +0000 (09:52 -0400)]
16364: Fix arvbox websockets startup
Also make controller run as root to migrate to PAM
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Lucas Di Pentima [Thu, 23 Apr 2020 01:37:29 +0000 (22:37 -0300)]
Merge branch '16356-arvboot-health-externalurl'
Closes #16356
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Wed, 22 Apr 2020 21:25:06 +0000 (18:25 -0300)]
16356: Adds missing Health service section.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Tom Clegg [Wed, 22 Apr 2020 21:10:37 +0000 (17:10 -0400)]
16212: Add PAM authentication option to install docs.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Lucas Di Pentima [Wed, 22 Apr 2020 21:09:43 +0000 (18:09 -0300)]
16356: Merge branch 'master' into 16356-arvboot-health-externalurl
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Wed, 22 Apr 2020 21:09:24 +0000 (18:09 -0300)]
16356: Makes health aggregator accessible from the outside on arvados boot.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Tom Clegg [Wed, 22 Apr 2020 20:50:06 +0000 (16:50 -0400)]
16343: Fix handling of local CR creation when LoginCluster is used.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 22 Apr 2020 20:33:27 +0000 (16:33 -0400)]
16343: Test container request creation with LoginCluster enabled.
Reveals bug when cluster does not list itself as a remote.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 22 Apr 2020 20:31:06 +0000 (16:31 -0400)]
16343: Add debug logs in token checking code.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Ward Vandewege [Wed, 22 Apr 2020 01:34:47 +0000 (21:34 -0400)]
Merge branch '16328-keep-proxy-uses-config.yaml-to-find-keepstores'
closes #16328
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Ward Vandewege [Wed, 22 Apr 2020 01:33:48 +0000 (21:33 -0400)]
16328: Merge branch 'master' into 16328-keep-proxy-uses-config.yaml-to-find-keepstores
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Ward Vandewege [Mon, 13 Apr 2020 21:57:03 +0000 (17:57 -0400)]
16328: If config.yml is available, use the keepstores defined there instead of
the legacy autodiscover mechanism via the API server.
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Tom Clegg [Tue, 21 Apr 2020 18:34:18 +0000 (14:34 -0400)]
Merge branch '16048-reload-config'
closes #16048
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Lucas Di Pentima [Tue, 21 Apr 2020 17:58:24 +0000 (14:58 -0300)]
Merge branch '16341-rack-security-upgrades'
Closes #16341
Lucas Di Pentima [Tue, 21 Apr 2020 16:55:10 +0000 (13:55 -0300)]
16341: Upgrades rack on API & Workbench.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Mon, 20 Apr 2020 16:46:51 +0000 (13:46 -0300)]
Merge branch 'dantetwc-master'. Closes #16340
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Dante Tsang [Mon, 20 Apr 2020 15:20:40 +0000 (23:20 +0800)]
Arvados-DCO-1.1-Signed-off-by: Dante Tsang <dante@dantetsang.com>
Updated AUTHORS file
Dante Tsang [Mon, 20 Apr 2020 10:23:56 +0000 (18:23 +0800)]
- Fixed FetchAll method for Container queue in order to make use of preemptible instance
Lucas Di Pentima [Fri, 17 Apr 2020 20:01:40 +0000 (17:01 -0300)]
Merge branch '16029-arvboot-listenhost-ssl-altname'
Refs #16029
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Lucas Di Pentima [Fri, 17 Apr 2020 14:52:59 +0000 (11:52 -0300)]
16029: Creates SSL certificate with -listen-host as alternate name.
This allows to run arvados boot on a docker container and access it
from the outside without the browser complaining about invalid certs.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Tom Clegg [Thu, 16 Apr 2020 23:52:47 +0000 (19:52 -0400)]
Add example of scripting arvados-server boot.
No issue #
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Thu, 16 Apr 2020 19:40:28 +0000 (15:40 -0400)]
Remove "template=template0" from db connection params.
It's not a valid connection param. Only pass it to Rails in test mode
as a pseudo connection param.
No issue #
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Ward Vandewege [Mon, 13 Apr 2020 23:23:48 +0000 (19:23 -0400)]
Fix typo in error message.
No issue #
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Lucas Di Pentima [Mon, 13 Apr 2020 18:45:04 +0000 (15:45 -0300)]
Merge branch '16313-minimum-container-memory-limit'
Closes #16313
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Peter Amstutz [Mon, 13 Apr 2020 18:38:15 +0000 (14:38 -0400)]
Bump mithril for advisory https://npmjs.com/advisories/1094
no issue #
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Lucas Di Pentima [Mon, 13 Apr 2020 18:34:12 +0000 (15:34 -0300)]
16313: Updates minimum requestd ram on docker containers from 4 to 16 MB.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Peter Amstutz [Mon, 13 Apr 2020 18:00:32 +0000 (14:00 -0400)]
Pin jssha to 2.4.2
no issue #
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Mon, 13 Apr 2020 14:42:47 +0000 (10:42 -0400)]
Merge branch '16263-logincluster-user-list-fix' refs #16263
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Mon, 13 Apr 2020 14:25:11 +0000 (10:25 -0400)]
16263: Add test for BypassFederation
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Fri, 10 Apr 2020 19:44:14 +0000 (15:44 -0400)]
16048: arvados-server boot: restart everything when config changes.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Ward Vandewege [Fri, 10 Apr 2020 12:56:56 +0000 (08:56 -0400)]
Fix tests.
refs #16326
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Ward Vandewege [Thu, 9 Apr 2020 22:29:13 +0000 (18:29 -0400)]
Merge branch '16326-doc-and-keepstore-update'
refs #16326
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Ward Vandewege [Thu, 9 Apr 2020 21:53:31 +0000 (17:53 -0400)]
documentation: update descriptions for MaxKeepBlobBuffers and MaxConcurrentRequests
keepstore: MaxConcurrentRequests set to zero should mean no limit
refs #16326
Arvados-DCO-1.1-Signed-off-by: Ward Vandewege <ward@jhvc.com>
Tom Clegg [Thu, 9 Apr 2020 20:58:36 +0000 (16:58 -0400)]
Warn if MaxKeepBlobBuffers > MaxConcurrentRequests.
No issue #
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 8 Apr 2020 14:11:23 +0000 (10:11 -0400)]
Merge branch '16212-pam-login'
refs #16212
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 7 Apr 2020 21:26:46 +0000 (17:26 -0400)]
16212: Populate all api_client_auth fields.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 7 Apr 2020 19:25:16 +0000 (15:25 -0400)]
Merge branch '16053-install-deps'
refs #16053
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 7 Apr 2020 14:32:48 +0000 (10:32 -0400)]
16053: Avoid using host's tmp/cache dir in railsapi.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Mon, 6 Apr 2020 19:54:34 +0000 (15:54 -0400)]
Merge branch '16217-ws-metrics'
refs #16217
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Lucas Di Pentima [Mon, 6 Apr 2020 14:01:18 +0000 (11:01 -0300)]
16263: Pulls from official git repo when running federation tests.
This is helpful to ask for specific branches that aren't published on github.
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas@di-pentima.com.ar>
Tom Clegg [Thu, 2 Apr 2020 15:33:46 +0000 (11:33 -0400)]
Merge branch '16270-instance-type'
fixes #16270
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Thu, 2 Apr 2020 14:52:44 +0000 (10:52 -0400)]
16263: User migration test also checks federated user behavior
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Wed, 1 Apr 2020 20:44:02 +0000 (16:44 -0400)]
16270: Fill in missing scratch fields on InstanceType entries.
Previously they were being filled in correctly when written as an
array in the config file, but not when written as a map.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 1 Apr 2020 17:42:43 +0000 (13:42 -0400)]
16217: Restore http.Hijacker capability to wrapped ResponseWriter.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 1 Apr 2020 17:42:08 +0000 (13:42 -0400)]
16217: Fix test (satisfy additional handler interface).
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 1 Apr 2020 15:59:06 +0000 (11:59 -0400)]
16217: Update startup scripts to run "arvados-server ws".
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 1 Apr 2020 15:50:03 +0000 (11:50 -0400)]
16212: Return error for users/authenticate endpoint in SSO mode.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Wed, 1 Apr 2020 15:49:16 +0000 (11:49 -0400)]
16212: Don't forward users/authenticate to Rails in legacy mode.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Wed, 1 Apr 2020 01:03:42 +0000 (21:03 -0400)]
16263: Tweak federation tests, use CWL 1.1
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 21:42:03 +0000 (17:42 -0400)]
16263: Add bypass_federation test
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 21:16:57 +0000 (17:16 -0400)]
16263: Fix no_federation -> bypass_federation in boolParms
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 21:12:31 +0000 (17:12 -0400)]
16263: Fix only_admin_can_bypass_federation
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Tue, 31 Mar 2020 20:55:16 +0000 (16:55 -0400)]
16217: Update boot command to run ws via arvados-server.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 20:51:35 +0000 (16:51 -0400)]
16217: Merge branch 'master'
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Tue, 31 Mar 2020 20:45:49 +0000 (16:45 -0400)]
16263: Missed rename
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 20:33:27 +0000 (16:33 -0400)]
16263: Rename no_federation -> bypass_federation
Enforce if bypass_federation is true that user is admin.
Update API revision and make federation migrate check for it.
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 18:42:46 +0000 (14:42 -0400)]
16263: Add no_federation to user update
We might agree on a different API but try this and see if it helps
pass the test.
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Tue, 31 Mar 2020 17:52:23 +0000 (13:52 -0400)]
16053: Merge branch 'master'
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 17:51:31 +0000 (13:51 -0400)]
16053: Error out on unimplemented install in production mode.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 17:11:17 +0000 (13:11 -0400)]
16212: Merge branch 'master'
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 17:10:06 +0000 (13:10 -0400)]
16212: Upate generated default config.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 17:08:32 +0000 (13:08 -0400)]
16212: Fix propagation of logout redirect target.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 15:27:01 +0000 (11:27 -0400)]
16212: Add clues/details to authentication error messages.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 15:26:01 +0000 (11:26 -0400)]
16212: Make test timeout more predictable by pulling image first.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Tue, 31 Mar 2020 14:32:17 +0000 (10:32 -0400)]
16212: Ensure added user doesn't prevent subsequent database reset.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Tue, 31 Mar 2020 02:30:10 +0000 (22:30 -0400)]
16263: local_user_list -> no_federation in boolParams
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Tue, 31 Mar 2020 02:14:23 +0000 (22:14 -0400)]
16263: Generalize "local_user_list" flag to "no_federation"
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Mon, 30 Mar 2020 21:26:40 +0000 (17:26 -0400)]
16212: Disallow overriding HTTP method on GET requests.
Removes an opportunity to circumvent CORS restrictions.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Mon, 30 Mar 2020 21:26:22 +0000 (17:26 -0400)]
16212: Fix wrong API endpoint for users/batch_update.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Tom Clegg [Mon, 30 Mar 2020 21:26:13 +0000 (17:26 -0400)]
16212: Move user/pass authentication to its own endpoint.
Overloading the /login endpoint turns out to be too awkward: method,
CORS permissions, and response type are all different.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
Peter Amstutz [Mon, 30 Mar 2020 21:12:17 +0000 (17:12 -0400)]
16263: UserMerge shouldn't be federated
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Mon, 30 Mar 2020 18:50:06 +0000 (14:50 -0400)]
16263: Fix omitempty placement
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Peter Amstutz [Mon, 30 Mar 2020 18:43:36 +0000 (14:43 -0400)]
16263: Add omitempty to GetOptions
Don't try to migrate if activate_remote_user fails.
Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
Tom Clegg [Mon, 30 Mar 2020 16:44:53 +0000 (12:44 -0400)]
16212: Allow X-Http-Method-Override header in CORS requests.
Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@tomclegg.ca>
projects / arvados.git / log