lingwei.kong/hawkbit
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
2,687 Commits 1 Branch 0 Tags
f2a4f6f591d6afc2e4bc807a8f317d4891d1285d
Commit Graph

236 Commits

Author SHA1 Message Date
Avgustin Marinov
f2a4f6f591 Rename docs to site (#1550) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2024-01-18 15:31:20 +02:00
Avgustin Marinov
d15bcce8d2 Remove docker properties from pom (#1549) 
(Example) Docker images are build using Dockerfiles

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2024-01-18 15:21:10 +02:00
Avgustin Marinov
7768e543fd [#1548] Add support for dynamic rollouts (#1533) 
* [#1548] Add support for dynamic rollouts

-- Current status --

Initial draft only !!!, to be improved

TODO:
 * evaluate the target count - if update group/rollout total count fails dynamic updates could (?), actually, contain more targets
 * is it needed to break handler on group creating?
 * if dynamic group schedulers occur to be heavy - maybe a handler per tenant will ensure that one tenant won't break all

*Concept for dynamic groups*:

Rollouts are static and dynamic.
Static rollouts consist of static groups only while dynamic rollouts have a number of static groups (first groups) and then an unlimited number of dynamic groups.

Group targets assignments:
* static groups include ALL matching targets created at the time the rollout was created, nevertheless they have active actions with bigger weight or not. Actions for the rollout and included targeets however are created at the start time.
* dynamic groups however are filled in when started and consider the action weight. The targets included in a dynamic group are:
  * matching (filter and distribution set compatible)
  * not included in this or following rollout static groups (if already included in any of the following rollouts - it's intended to be overridden)
  * not in active actions of any rollouts with equal or bigger weight

In general, when you create a rollout it contains all matching targets available at create time overriding any previous rollouts, actions, and so on. If the rollout is dynamic when its dynamic group becomes running it gets only matching targets that doesn't belong to static groups or have actions with great or equal weight

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>

* [#1548] Add 1000 weight for actions, rollouts and auto assignments without weight

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>

---------

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2024-01-18 11:37:01 +02:00
Stanislav Trailov
b5e9bc8caa Fix/update docker images (#1543) 
* update docker images with latest released version and set revision ot 0.5.0-SNAPSHOT

Signed-off-by: TRS1SF3 <Stanislav.Trailov@bosch.io>

* simple ui rev ision to 0.5.0-SNAPSHOT

Signed-off-by: TRS1SF3 <Stanislav.Trailov@bosch.io>

---------

Signed-off-by: TRS1SF3 <Stanislav.Trailov@bosch.io>
 2024-01-13 10:29:20 +02:00
Avgustin Marinov
ba496a0f52 Fix HATEOAS support for swagger doc (#1528) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-12-22 11:35:28 +02:00
Avgustin Marinov
b2d7e007a6 Fix CVE 2023-1370 (#1521) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-12-15 17:04:48 +02:00
Avgustin Marinov
ba648cae0e Bump Spring Boot version -> 2.7.18 (#1519) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-12-15 12:56:32 +02:00
Avgustin Marinov
026ebe0f7f Allign docker doc (#1500) 
* allign docker documentation
* remove fabric8 files as this is duplicated way for building docker images (along with docker files)

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-12-04 15:15:54 +02:00
Avgustin Marinov
3e4e0e5e42 Fix flatten mode (#1482) 
change flatten mode to do not remove dependency management
thus allowing inheritance with keeping hawkbit dependencies

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-11-20 14:25:24 +02:00
Avgustin Marinov
fc01ad95bb Feature/add default community license (#1480) 
* Make use of dash maven plugin to generate dependencies

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>

* Add (as default) commuity license header

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>

---------

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-11-17 14:49:09 +02:00
Avgustin Marinov
f9eb61757c Make use of dash maven plugin to generate dependencies (#1479) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-11-17 14:14:20 +02:00
Avgustin Marinov
0021b03c9a CI friendly maven poms - use $revision for version (#1477) 
https://maven.apache.org/maven-ci-friendly.html

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-11-16 17:23:01 +02:00
Avgustin Marinov
042e867e5d Docker version upgraded to 17.0.9_9 (#1466) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-11-01 12:52:00 +02:00
Stanislav Trailov
5904bed838 bump spring cloud to 2021.0.8 to fix CVE-2023-4759 (#1464) 
Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>
 2023-10-26 12:03:25 +03:00
Avgustin Marinov
203728f79f Set license name to EPL-2.0 (#1462) 
Change license name in root pom.xml to EPL-2.0
([SPDX format](https://spdx.org/licenses/)) as advised in
[Maven Metadata Best Practices](https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom/-/blob/main/docs/sbom.adoc#sbom-maven-practices)

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-10-24 09:25:38 +03:00
Avgustin Marinov
ecf48430b4 Fix for CVE-2022-31690 (2) (#1460) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-10-23 13:11:26 +03:00
Avgustin Marinov
c1325d7594 Fix CVE-2022-31690 (#1459) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-10-23 12:24:30 +03:00
Avgustin Marinov
8558b96de1 Spring upgrade to 2.7.15 (#1428) 
Spring and some other dependencies upgraded

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-09-14 12:42:17 +03:00
Avgustin Marinov
9c86729a68 [#1393,#1008] Switch to Eclipse v2.0 license (#1427) 
Switching license from EPL v1 to v2. Following
https://www.eclipse.org/legal/epl-2.0/faq.php#h.tci84nlsqpgw

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-09-14 11:03:20 +03:00
Stanislav Trailov
0ee081dafc hawkBit Swagger support (#1423) 
* Swagger support initial concept

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add descriptions for Target tags

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add target filter queries descriptions

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add target api descriptions

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add software modules API descriptions

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add descriptions for DS, DSTags and SMTypes

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add DistributionSetType API descriptions

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add Rollout API descriptions

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Bring back test scope to mariaDb

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Add tags and descriptions to System config API

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Move away OpenAPI config from Start.java

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* provide license header and project version for openapi

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

* Fix error responses with example error body

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>

---------

Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>
 2023-09-13 10:40:31 +03:00
Stanislav Trailov
080075d44e Override spring-security-oauth2-client and h2 dependency versions to fix latest cve findings (#1419) 
Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>
 2023-08-22 17:09:21 +03:00
Stanislav Trailov
b35f45aabc Upgrade nexus maven plugin to 1.6.13 (#1408) 
Signed-off-by: Stanislav Trailov <Stanislav.Trailov@bosch.io>
 2023-08-03 12:28:08 +03:00
Avgustin Marinov
1dc1bdbe94 Upgrade Spring and docker image (#1401) 
Spring -> 2.7.17
base docker image -> 17.0.8_7-jre-alpine

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-08-01 09:46:44 +03:00
Avgustin Marinov
56ea5b15c9 [#1383] Spring Boot 3 Migration / Step 1 (#1384) 
1. PagingAndSortingRepository doesn't extend CrudRepository anymore. For all extending that interface repositories CrudRepository super interface shall be now declared (https://spring.io/blog/2022/02/22/announcing-listcrudrepository-friends-for-spring-data-3-0 -
```
The popular PagingAndSortingRepository used to extend from CrudRepository, but it no longer does. This lets you combine it
with either CrudRepository or ListCrudRepository or a base interface of your own creation. This means you now have to
explicitly extend from a CRUD fragment, even when you already extend from PagingAndSortingRepository.
```
)
2. org.eclipse.hawkbit.autoconfigure.mgmt.ui -> move in hawkbit-ui (to be ready for removal), anyway - it's a better location for ui related configs
3. extends WebMvcConfigurerAdapter -> implements WebMvcConfigurer
4. remove WebSecurityConfigurerAdapter -> https://docs.spring.io/spring-security/reference/5.8/migration/servlet/config.html#_stop_using_websecurityconfigureradapter, https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter
and add @Order to the bean reg!!
5. Use configurers (the other will be deprecated / removed), e.d:  http.csrf().disable() -> http.csrf(AbstractHttpConfigurer::disable)
6. configure(final AuthenticationManagerBuilder auth) -> put in httpsecurity config - http.getSharedObject(AuthenticationManagerBuilder.class).... (https://www.baeldung.com/spring-security-authentication-provider)
7. configure(final WebSecurity webSecurity) ->
```
@Bean
public WebSecurityCustomizer webSecurityCustomizer() {
    return (web) -> web.ignoring().antMatchers("/documentation/**", "/VAADIN/**", "/*.*", "/docs/**");
}
```
(https://spring.io/blog/2022/02/21/spring-security-without-the-websecurityconfigureradapter)
8. AuthenticationManager authenticationManagerBean() ->
```
@Bean
AuthenticationManager authenticationManager(final AuthenticationConfiguration authenticationConfiguration) throws Exception {
    return authenticationConfiguration.getAuthenticationManager();
}
```
(https://backendstory.com/spring-security-how-to-replace-websecurityconfigureradapter/)
9. WebMvcAutoConfiguration could be removed - it uses deprectated methods, and sets properties that are same by default - hence - not neeeded
(https://github.com/spring-projects/spring-framework/issues/23915#issuecomment-563987147)

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-07-17 10:36:26 +03:00
Marinov Avgustin
649c714006 [#1378] Switch to Tomcat 
switch hawkBit web server to Tomcat (was Jetty)

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-06-28 16:23:39 +03:00
Marinov Avgustin
8047ceac03 Update misc dependencies versions 
+ remove org.bsc.maven:maven-processor-plugin
+ awaitility removal of awaitility Duration class fixed

Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-06-28 13:06:48 +03:00
Avgustin Marinov
eb8d559780 Docker version upgrated to java 17 (#1371) 
Signed-off-by: Marinov Avgustin <Avgustin.Marinov@bosch.com>
 2023-06-06 10:25:46 +02:00
Stanislav Trailov
3c815ed2d0 openjdk 11 to 17 (#1368) 
* openjdk 11 to 17
spring-security-core from 5.7.7 to 5.7.8

Signed-off-by: Stanislav Trailov <stanislav.trailov@bosch.io>

* Bump spring boot to 2.7.12

Signed-off-by: Stanislav Trailov <stanislav.trailov@bosch.io>

* deprecated circleci image to cimg

Signed-off-by: Stanislav Trailov <stanislav.trailov@bosch.io>

* Migrate spring boot parent to 2.7.12
Signed-off-by: Stanislav Trailov <stanislav.trailov@bosch.io>

---------

Signed-off-by: Stanislav Trailov <stanislav.trailov@bosch.io>
 2023-06-06 09:23:17 +02:00
Stefan Behl
5d0a9c0f1d Remove dependency net._01001111:jlorem (#1350) 
* Remove dependency jlorem
* Minor optimization
* Minor optimization
 2023-04-19 15:22:06 +02:00
Stefan Behl
d0882fd87d Prepare milestone 0.3.0M8 (#1349) 
* Added new script to determine dependencies and check their licenses

* Added new script to determine dependencies and check their licenses

* Updated check-dependencies script

* Updated dependencies

* Update README.md

* Updated 3rd-party dependencies

* Updated 3rd-party dependencies

* Updated 3rd-party dependencies

* Fix copyright statement

* Fix copyright statement

* Add pinentry-mode config option for Maven GPG plugin
 2023-04-19 13:19:41 +02:00
Michael Herdt
6f854afdae Introduce GitHub action to execute vulnerability scan using Trivy (#1333) 
* Introduce docker maven plugin for hawkbit update server
* Introduce GitHub action to execute vulnerability scan using trivy
 2023-03-28 07:42:04 +02:00
Stefan Behl
4a3a79aa6b Migration to Spring Boot 2.7.10 (#1320) 
* Initial commit
* Fix compile breaks
* Fix hibernate config
* Fix hibernate config
* Fix failing tests
* Improve logging
* Improve logging
* Fix Sonar issues
* Remove BusProperties
* Add BusProperties bean back in
* Fix JPA workaround
* Fix CVE-2021-22044
* Fix test failures
* Fix PR review findings
* Fix CVEs
* Remove H2 version downgrade, fix schema migration, enable legacy mode
* Downgrade Vaadin back to 8.14.3
* Fix EventPublisherHolder
* Fix RemoteTenantAwareEvent
* Fixed EventPublisherAutoConfiguration
* New version of spring-hateoas requires links to be expanded (Mgmt API)
* New version of spring-hateoas requires links to be expanded (Mgmt API)
* Fix PR review findings
* Fix PR review findings
* Fix PR review findings
* Update README.md
* MariaDB Java Client downgrade to maintain compatibility with AWS Aurora
* Temporarily disable RSQL test that depends on DB collation type
* Upgrade to boot 2.7.10
* Upgrade snakeyaml to 1.33
* Upgrade Spring Security OAuth2 to version 5.7.7
* Remove obsolete exclusion of junit-vintage-engine
* Upgrade jackson-bom to 2.14.2
 2023-03-28 07:16:25 +02:00
Michael Herdt
d567b32280 Fix issues in rollout creation dialog (#1329) 
* Introduce text input converter and validator to prevent problems with rollout group definitions.
* Add 2023 bosch.io license
* add new header to pom
* Extend usage of new TrimmingStringConverter.
* fixed compile error
 2023-03-17 15:41:27 +01:00
Shruthi Manavalli Ramanna
3870f11d51 Upgraded few dependencies (#1296) 
* Upgraded versions of gson, netty-all,logback, jackson-bom dependencies

Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>

* Fixed PR comments

Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>

* removed upgraded versions of gson and netty-codec

Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>

Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>
 2022-12-08 17:29:06 +01:00
Markus Block
4be3fbbbee Replacing self-managed SonarQube with Sonarcloud (#1286) 
* replaced sonar url to use sonarcloud
* changed sonar properties in pom for sonarcloud
* changed sonar properties in pom for sonarcloud
* added sonar plugin to avoid warning regarding relocation of sonar project
* refactoring
* removed sonar plugin from pom.xml, will added to seedjopb build parameter
 2022-10-20 16:04:36 +02:00
Florian Ruschbaschan
32718676a4 Feature/java11 build (#1280) 
* hawkBit on Java 11

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Preparing java 11 build

- Update eclipse-link maven plugin dependencies
- Fixing warnings, adopt to java-11 style

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Preparing java 11 build

- Fixing warnings, adapt to java-11 style
- Added since to deprecated

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Fixing sonar warnings

- removed deprecated API

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Fixing sonar warnings & failing test

- Added suppressWarning
- added WithSpringAuthorityRule to clean-up listener

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Compile warnings

- Test if final causes issues in tests

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Removed deprecated code

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Reverted changes

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Removed final as this causes invalid reflective access exceptions

- The eclipselink generated classes seem to modify the field directly
- update plugin version

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Upgrade eclipselink from 2.7.9 to 2.7.10

* Remove @deprecated endpoints from MgmtTargetTagResource

* Remove dependencies already defined in eclipselink-maven-plugin

* Try eclipselink 2.7.11-RC1

* Set project encoding to UTF-8

* Upgrade surefire and failsafe plugins to 3.0.0-M7

* Try fixed string instead of a random generated one

* Replace JsonBuilder by Jackson ObjectMapper usage

* Use JsonBuilder again

* Use APPLICATION_JSON_UTF8 instead of APPLICATION_JSON

* Try to replace com.vaadin.external.google:android-json by org.json:json

* Add debugging outputs

* Improve debugging outputs

* Improve debugging outputs

* Use Jackson instead of JsonBuilder

* Use Jackson instead of JsonBuilder 2nd part

* Use Spring json dependency

* Use eclipselink 2.7.11

* Fix RootControllerDocumentationTest

* Improve helper methods of AbstractDDiApiIntegrationTest

* Upgrade SpringBoot and SpringCloud versions

* Improve deprecation notice for 0.3.0M8

* Fix BaseAmqpServiceTest

* Fix SpecificationsBuilderTest

* Removed deprecated code

* Define maven-enforcer-plugin version

* Remove com.google.code.findbugs.jsr305

Signed-off-by: Florian Ruschbaschan <florian.ruschbaschan@bosch.io>

* Update circleci image to openjdk:openjdk:11.0.13-jdk-buster

Signed-off-by: Florian Ruschbaschan <florian.ruschbaschan@bosch.io>

* Fix javadoc generation and license check

Signed-off-by: Florian Ruschbaschan <florian.ruschbaschan@bosch.io>

* Fix review findings

Signed-off-by: Florian Ruschbaschan <florian.ruschbaschan@bosch.io>

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>
Signed-off-by: Florian Ruschbaschan <florian.ruschbaschan@bosch.io>
Co-authored-by: Dominic Schabel <dominic.schabel@bosch.io>
Co-authored-by: Peter Vigier <Peter.Vigier@bosch.io>
Co-authored-by: Markus Block <markus.block@bosch-si.com>
 2022-09-19 10:33:31 +02:00
Bondar Bogdan
537548defb Update jsoup (#1276) 
* upgraded jsoup to 1.15.3
* removed deprecated safe html annotation
* added own valid string jsoup validator, disabled hibernate parallel method declaration constraint
* adapted valid string validator
* static method
* return invalid value in case of processing exception

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
 2022-09-05 15:49:38 +02:00
Bondar Bogdan
0e6ef2e468 upgrade spring framework to 5.2.20 (#1243) 
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
 2022-04-01 12:45:58 +02:00
Peter Vigier
44a85f20eb Feature/fix sonar warnings (#1226) 
* Fixed sonar warnings

- "Cognitive Complexity"
- "Do not use replaceAll when not using a regex"
- java:S5869 - Character classes in regular expressions should not contain the same character twice
- Improved bad name
- Typos
- reduced code duplications
- Replaced hand-made wait-utility with Awaitility
- Log messages
- Duplicate code
- Typos
- Removed Thread.sleep, instead relaxed check condition
- Removed use of deprecated API
- Removed use of deprecated API
- Added supress-warnings as I do not see a better way to write the tests
- Removed Thread.sleep / redundant functionality to Awaitility
- Fixed other warnings (use isZero, isEmpty, hasToString)
- Removed/Reduced duplicate code
- Added generics
- Fixed asserts
- removed: field.setAccessible(true) actually should not be needed for public static fields!
- Too long constructor passes arguments in wrong order - how surprisingly...
- Clean-up use of varargs arguments
- Fixed regex
- Fixed typos and other minor stuff
- Making public constructors protected in abstract classes
- Swapped expected and asserted argument
- volatile not enough for syncing threads
- volatile not enough for syncing threads
- out-commented code
- Made regex not-greedy, added tests for verification
- Avoid exposure of thread-local member var

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Fixed Sonar warnings

* License header fix

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* License header fix #2

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Fixing review findings

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>

* Fixing tests

- Fixed '&' usage in javadoc and typos
- Fixing some warnings

Signed-off-by: Peter Vigier <Peter.Vigier@bosch.io>
 2022-01-31 21:59:46 +01:00
Natalia Kislicyn
7a1905cf5b add license header for Bosch.IO 2022 (#1221) 
Signed-off-by: Natalia Kislicyn <natalia.kislicyn@bosch.io>
 2022-01-18 11:46:22 +01:00
Bondar Bogdan
146735012a Artifact Encryption plug point (#1202) 
* added ArtifactEncryption interface, injected it into SM creation UI module, added encryption metadata key generation upon SM creation, used encryptor during file upload

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* add default artifact encryption implementation based on gcm aes algorithm

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* changed ArtifactEncryptor interface to manage encryption secrets by itself

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* cleaned up stale code, fixed sonar

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* fixed software module encryption within transaction

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* added artifact encryption secrets store

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* extended ArtifactEncryption interface to allow decryption, secrets store provides removeSecret, added missing javadocs

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* intriduced DbArtifact interface, use EncryptionAwareDbArtifact for artifact decryption during download

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* introduced ArtifactEncryptionService to minimize duplications and unneccessary dependency injections

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* declared ArtifactEncryptionService as a bean

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* added persistant encryption flag to software module

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* further adptations for encryption flag persistence

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* added ArtifactEncryptionException, fixed encryption check in UI

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* added encryption error handling

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* added encrypted flag to DDI/DMF, adapted exception handling

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* adapted rest docs

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* Add test to verify artifact encryption is not given by default

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* Add isEncrypted() to toString() of JpaSoftwareModule, fix typos

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* Fix sql migration scripts

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* Calculate encrypted artifact size by subtract encryption size overhead

Signed-off-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>

* publish upload failed without waiting for interuption during UI file upload

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* upgraded cron utils to 9.1.6

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

Co-authored-by: Florian Ruschbaschan <Florian.Ruschbaschan@bosch.io>
 2021-11-18 09:07:05 +01:00
Bondar Bogdan
e5dbbbbc7b Vaadin security upgrade to 8.14.1 (#1188) 
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
 2021-10-15 15:48:18 +02:00
Robert Sing
76be812cf1 Feature - TargetType compatibility check (#1180) 
* added targettype compatibility check in deployment

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* added targettype compatibility for autssignment

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* added / fixed tests for auto assignment compatibility check

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* adapted rollout creation to use JPA specifications for compatibility checks

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* fix unit tests and javadoc

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* fix copyright header

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* fixed review findings

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* fixed review findings

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* replaced validated-DS management calls

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* improved compatibility check in DeploymentManagementTest

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>

* fixed review findings

Signed-off-by: Robert Sing <robert.sing@bosch-si.com>
 2021-10-15 15:39:21 +02:00
Bondar Bogdan
87199937c4 Dependency upgrades (#1170) 
* Increase jsoup version

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* bumped vaadin/guava/common-io to newest versions

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>

* substituted deprecated guava create temp dir method

Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
 2021-08-30 15:39:23 +02:00
Stefan Behl
2af4e850b8 Consider Target Fields when validating RSQL filters (#1121) 
* Removed unnecessary DB queries when editing/validating RSQL query in Target Filter Management (#1023)

Added valid TargetFields to RSQL validation when editing Target Filter.

Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>

* Corrected visit OrNode implementation.

Changed isValid to receive FieldNameProvider as parameter

Reduced code duplication by moving commonly used utility methods to AbstractFieldNameRSQLVisitor from ValidationRSQLVisitor abd JpqQueryRSQLVisitor

Refactored and extended Unit Tests.

Minor corrections and typos.

Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>

* Added Maven entry for devolo 2020 copyright header.

Signed-off-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>

* Fix failing unit tests

* # WARNING: head commit changed in the meantime

Signed-off-by: Stefan Behl <stefan.behl@bosch.io>

* Fix Sonar findings.

Signed-off-by: Stefan Behl <stefan.behl@bosch.io>

* Cleanup

Signed-off-by: Stefan Behl <stefan.behl@bosch.io>

* Fix PR review findings

* Fix invalid queries in unit tests

Signed-off-by: Stefan Behl <stefan.behl@bosch.io>

* Added test case to create filter with invalid query via Mgmt REST API

Signed-off-by: Stefan Behl <stefan.behl@bosch.io>

Co-authored-by: Sergey Gerasimov <sergey.gerasimov@devolo.de>
 2021-07-02 09:25:12 +02:00
Shruthi Manavalli Ramanna
df7b0701d7 Removed flyway downgrade so that spring default is pickedup (#1114) 
Signed-off-by: Shruthi Manavalli Ramanna <shruthimanavalli.ramanna@bosch-si.com>
 2021-05-21 10:03:21 +02:00
Dominic Schabel
81defa10a6 Migration to JUnit5 as default test runtime (#1082) 
* Migrate tests to JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* REST docs tests migrated to JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Migrated security and UI tests to JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Migrated management tests to JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Reflecting changes from JUnit5 migration

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Fix RabbitMQ test detection

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Drop support for JUnit4

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
 2021-03-15 13:40:40 +01:00
Bogdan Bondar
b185d653be upgraded Vaadin to 8.12.3 
Signed-off-by: Bogdan Bondar <Bogdan.Bondar@bosch.io>
 2021-02-22 12:57:49 +01:00
Dominic Schabel
9c5360e59d JUnit5 support (#1063) 
* First preparation for JUnit5

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>

* Exclusion of JUnit5 removed

Signed-off-by: Dominic Schabel <dominic.schabel@bosch.io>
 2021-02-12 08:22:26 +01:00
Ammar Bikic
ac8c174b2c Merge remote-tracking branch 'origin/master' into fix_migration_to_new_spring_boot_version_merge_master 
Signed-off-by: Ammar Bikic <ammar.bikic@bosch.io>
 2021-01-15 17:28:49 +01:00