make Secure flag of CSRF cookie adapt to config

1. Use quota controller to implement the internal quota APIs.
2. The internal quota APIs can exceed the quota limitations.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Add verfication for helm API test

Add doc for e2e API scripting guide

fixes #11074
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

the notification is for send out the event after DB transaction complete.
It's safe to send hook as this middleware is after transaction in the response path.
Signed-off-by: wang yan <wangyan@vmware.com>

1. Before put manifest request, ensure that the requested size resource
include the blobs which are referenced by the manifest but not
associated with project.
2. After put manifest request, associate the blobs which are referenced
by the manifest but not associated with project.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

United error response format for management APIs (legacy and v2.0 APIs)

United error response format for management APIs (legacy and v2.0 APIs)
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Repair the count usage during the upgrading 

Type assertion not work when the ctx in the request changed in the next
handler, so change to use value in the ctx to decide whether to commit
tx.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

As the count quota is against artifact rather than tag in 2.0, the count usage should be recalculated
Signed-off-by: Wenkai Yin <yinw@vmware.com>

To avoid depedency loop, this commit moves the model of ArtifactInfo to
internal pacakge, so that a controller can it from context when needed.
Signed-off-by: Daniel Jiang <jiangd@vmware.com>

1. Introduce `Evaluator` interface which do the permission checking.
2. `admin`, `lazy`, `rbac`, `namespace` and `evaluartor` set are implemented the
`Evaluator` interface.
3. Move project rbac implemention from `project` to `rbac` pkg to reduce
the name  conflict with project instance of model.
4. Do permission checking in security context by `Evaluator`.
5. Cache the regexp in rbac evaluator for casbin.
6. Cache evaluator in namespace evaluator to improve performance.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

Updating the redirects in the old page stubs to point to new site.

Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: Daniel Jiang <jiangd@vmware.com>

Signed-off-by: danfengliu <danfengl@vmware.com>

Restructure the packages of artifact

1. Introduce a new interface Processor to replace Abstractor and Descriptor
2. Provide the base processors for manifest and index to reduce the duplicate code
3. Move the child artifacts checking out of processor
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

feat(replication) sort the adapters shown on UI

Signed-off-by: He Weiwei <hweiwei@vmware.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

Remove the "x-go-type" for artifact definition in swagger

Using "x-go-type" may cause the inconsistence between the swagger definition and the real data model
Signed-off-by: Wenkai Yin <yinw@vmware.com>

Improve UI for add robot page

[feat] Upgrade clarity to 2.3.8

1. Introduce ReqquestMiddleware and RefereshMiddleware.
2. Add request middlware to copy artifact, mount blob, put blob upload,
put manifest, upload chart verson APIs.
3. Add refresh project middleware to delete manifest, delete artifact,
delete chart version, delete repository APIs.
Signed-off-by: He Weiwei <hweiwei@vmware.com>

Improve Webhook UI

add support slack in webhook

Add API for query supported event types and notify types; Return policy name in last trigger info; Remove project_id unique constraint in table notification_policy (#11029)
Signed-off-by: guanxiatao <guanxiatao@corp.netease.com>

Signed-off-by: Ziming Zhang <zziming@vmware.com>

Signed-off-by: peimingming <peimingming@corp.netease.com>

Signed-off-by: AllForNothing <sshijun@vmware.com>

Persistent the URLs and annotations of artifact references in database

Add new parameter for GC page