GitLab

Disable security headers for rm portal popup window

Fix possible NPE in NodeSourceData

Disable directory listing

Also added an extra response header recommended by a pen test

Add security headers to jetty responses

A few recommended security headers are added dynamically by jetty server

Added web properties to allow configuration of these headers

Allow referencing dataspace uris in tasks

This is useful for example in fork environment settings or inside generic information

Add endpoint to remove a list of jobs finished earlier than the given…

Topology use hostname instead of InetAddress

InetAddress was used as key to several maps.

This does not work properly as InetAddress are equals if their associated ipv4 address are equals thus 127.0.1.1 from different hosts are considered equals.

Instead of using InetAddress, we now use hostnames.

Restrict TLS versions and cyphers

Also, fixed ssl dump in log debug

Fix variables propagation issue

During the workflow parsing, a job variable became converted to a task variable

Added unit and functional tests

Disable scheduling loop node partitioning

Even though in general usage the current implementation works, it became very inefficient when there are nodes protected by tokens. In that case, if many tasks (10K more) needs to be scheduled, the scheduling loop is querying the rm several thousand times for a small number of nodes.

This change disable the node partitioning. When there are 10K tasks to be scheduled and all are "compatible", the scheduling loop send a single request to the RM, which returns in a single call the available nodes.

Filter unauthorized jobs in getTaskIds and getTaskStates

Filter variables and generic info when the user is not allowed to

Additionally, add a rest endpoint to check job permissions for a list of jobs

Add more SSL configurations

AOSynchronization : Fix groovy memory leak v4

Parse groovy closure manually and store the generated scripts in the cache,
Then call script.run() from the cached script, this will prevent the GroovyClassLoader from generating new classes.

Reduce job cache size

Fix hikari slf4j version dependency

Edit citizen access