Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backports and gomod dependency updates (stable-5.21) #13244

Merged
merged 32 commits into from Apr 2, 2024

Conversation

tomponline
Copy link
Member

Getting ready for LXD 5.21.1.

Signed-off-by: Simon Deziel <simon.deziel@canonical.com>
Signed-off-by: Simon Deziel <simon.deziel@canonical.com>
Signed-off-by: Simon Deziel <simon.deziel@canonical.com>
@tomponline tomponline self-assigned this Apr 2, 2024
@github-actions github-actions bot added Documentation Documentation needs updating API Changes to the REST API 5.21 LTS labels Apr 2, 2024
Copy link
Contributor

@markylaing markylaing left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one nit about the commit ordering, otherwise LGTM.

.gitignore Show resolved Hide resolved
MggMuggins and others added 20 commits April 2, 2024 15:04
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
This way we can apply multiple filters on internal server and project metrics at once.
Additionally this ensures that entity URLs are always called with the right type.
Otherwise this will raise a warning for every sample.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…erts

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…tityTypeCertificateMetricsUnrestricted

This effectively replaces identityTypeCertificateMetrics with identityTypeCertificateMetricsRestricted
and adds the new type identityTypeCertificateMetricsUnrestricted.

By replacing identityTypeCertificateMetrics with identityTypeCertificateMetricsRestricted
we ensure that restricted metrics certificates that were falsely moved to identityTypeCertificateMetrics
are still considered to be secure.

On the other side this marks unrestricted certificates as restricted by default.
This has to be manually modified by unrestricting the respective metrics certficiate.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…cted and unrestricted type

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…TypeCertificateMetricsUnrestricted

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…cted and IdentityTypeCertificateMetricsUnrestricted

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
…tyTypeCertificateMetricsUnrestricted

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
This allows granting the can_view_metrics entitlement on specific projects
so that requests to the metrics endpoint containing the project query parameter
only return the respective project's metrics.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Ensure that restricted certificates are mapped to IdentityTypeCertificateMetricsRestricted and vice versa.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
Additionally check the responses if the endpoint gets queried using the project parameter
as this is producing different results for restricted and unrestricted metrics certificates.

Signed-off-by: Julian Pelizäus <julian.pelizaeus@canonical.com>
In preparation for canonical#13193; makes it less gross to return additional
fields.

This also allows ParseLXDFileHeaders to return error and validates
the values of the `X-LXD-*` headers

Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
MggMuggins and others added 8 commits April 2, 2024 15:04
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Implements the `instances_files_permissions` api extension

Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Fixes canonical#12724

Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Wesley Hershberger <wesley.hershberger@canonical.com>
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
(cherry picked from commit 26ea414cf2fcc70101d929cb42b180a77825de31)
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
License: Apache-2.0
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
(cherry picked from commit 19e428ced76907c21fd2eb19f8e34a848b09fa7e)
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
License: Apache-2.0
markylaing
markylaing previously approved these changes Apr 2, 2024
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
@tomponline tomponline merged commit 3ffeadc into canonical:stable-5.21 Apr 2, 2024
27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
5.21 LTS API Changes to the REST API Documentation Documentation needs updating
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants