367 Commits

Author SHA1 Message Date
Robo Quat
d807368121
update index (#20134)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-08-20 02:16:19 -04:00
Robo Quat
12c582b815
update index (#20101)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-08-12 03:03:14 -04:00
Robo Quat
08733d6bff
update index (#20097)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-08-09 05:11:47 -04:00
Robo Quat
4f6e87ce03
update index (#20092)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-08-08 05:30:46 -04:00
Robo Quat
519b67858f
update index (#20064)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-07-26 14:36:34 +02:00
Robo Quat
e7ffef9282
update index (#20060)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-07-24 13:14:32 +02:00
Robo Quat
4bccf5282c
update index (#20022)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-07-15 09:04:53 +02:00
Robo Quat
c295f8299f
update index (#20010)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-07-09 03:16:54 -04:00
Robo Quat
823aae71f7
update index (#19982)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-07-05 04:29:18 -04:00
Filip Troníček
da1053e101
Make auth cookie stricter (#19973)
* Use `__Host-` prefix for cookie

* Fix tests

* Remove domain from cookie

* Fix logout

* remove unused fn

* fix user logout properly

* [server] Make domain-only cookie work for GitHub oauth login

... by adding additional step so we can set the cookie for the base domain only

* test: fix by redirecting before callbacl/authorize

* [server] SessionHandler: Allow to login with both primary and secondary cookies

* [server] Clear 2ndary cookie on logout

* Fix filtering cookie values when primary cookie is empty

* Fix logouts

* Fix tests

---------

Co-authored-by: Gero Posmyk-Leinemann <gero@gitpod.io>
2024-07-01 08:53:14 +02:00
Robo Quat
3bf7b41f10
update index (#19974)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-06-28 16:29:23 +02:00
Robo Quat
21fca564f4
update index (#19962)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-06-24 12:35:19 +02:00
Robo Quat
cfa8326a22
update index (#19939)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-06-20 17:58:15 +02:00
Robo Quat
fa293346c2
update index (#19929)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-06-19 12:50:14 +02:00
Robo Quat
a7e820c1f7
update index (#19809)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-06-04 14:49:15 +08:00
Robo Quat
19a1764984
update index (#19792)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-05-29 16:42:10 +08:00
Gero Posmyk-Leinemann
eca86a2111
[ws-proxy] Filter cookies on all routes that send traffic to the workspace (except supervisor) (#19773)
* [ws-proxy] Filter cookies on all routes that send traffic to the workspace (except supervisor)

* [ws-proxy] more tests
2024-05-28 14:45:08 +08:00
Gero Posmyk-Leinemann
f079d8dc81
[server, ws-proxy] Test cookie filter against real name generator (#19770)
* [server, ws-proxy] Extract CookieNameFromDomain into server/go, so installer (for config generation) and ws-proxy (for tests) can both depend on it

* review comment
2024-05-27 15:27:07 +08:00
Gero Posmyk-Leinemann
486dab1bbf
[ws-proxy] Tighten cookie filter (#19672) 2024-04-26 11:03:04 +02:00
Robo Quat
8a5af9012e
update index (#19544)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-04-03 09:14:42 +02:00
Manuel Alejandro de Brito Fontes
5992b0f614
Update go dependencies (#19577)
* Update go dependencies

* Update S3

* Caddy plugins cannot use 1.22

* Update controller runtime signatures

* Update webhook suite test

* Update IPFS signatures

* Update go modules

* Update ipfs-cluster to v1.0.8

* Fix node-labeler build

* Fix IPFS CID parsing

* Update ipfs-cluster version

* Update controller-runtime signature

* Update statefulset signature

* Disable controller-runtime metrics

* Add comments
2024-03-26 20:55:35 +01:00
Robo Quat
12db87060f
update index (#19520)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-03-14 05:10:23 +02:00
Robo Quat
730eed3bc5
update index (#19478)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-02-28 12:00:09 +02:00
Robo Quat
e7bedfacd0
update index (#19407)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-02-11 00:09:52 +02:00
Robo Quat
8c8577ea2b
update index (#19399)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-02-07 23:19:50 +02:00
Robo Quat
7115b4b57e
update index (#19379)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-02-01 18:39:43 +02:00
Robo Quat
d95aae6797
update index (#19370)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-01-31 19:58:43 +02:00
Robo Quat
cde558cfa9
update index (#19355)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-01-26 17:03:02 +02:00
Robo Quat
9033ef210a
update index (#19333)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-01-25 01:45:01 +02:00
Robo Quat
fcccc0ddb6
update index (#19322)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-01-15 01:11:51 +02:00
Robo Quat
d240f9c785
update index (#19288)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2024-01-04 15:32:42 +02:00
Robo Quat
3c4160f497
update index (#19266)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-12-15 10:47:22 +02:00
Pudong
1b106c39ba
[ssh gateway] improve logs for errors (#19252) 2023-12-13 21:38:20 +02:00
Pudong
754495378d
[ws-proxy] use root as default username in non-mk2 (#19241) 2023-12-12 15:57:19 +02:00
Pudong
9759f0081c
[ws-proxy] use ecdsa private key for createKey fake api (#19211) 2023-12-11 16:59:18 +02:00
Manuel Alejandro de Brito Fontes
1e4e60614c
Update caddy to v2.7.6 (#19232)
* Update caddy to v2.7.6

* Update go modules
2023-12-11 14:14:18 +02:00
Robo Quat
ba07eb951a
update index (#19197)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-12-07 10:40:14 +02:00
Pudong
1b7498059c
[ws-proxy] add missing permission for generated ssh key (#19201) 2023-12-06 21:00:13 +02:00
Pudong
7f83e2f592
[ws-proxy] only get username if workspace not managed by mk2 (#19180)
* [ws-proxy] only get username if workspace not managed by mk2

* remove ssh key from infoprovider

* improve logs

* Update components/ws-proxy/pkg/sshproxy/server.go
2023-12-01 21:41:09 +02:00
Robo Quat
3a6b125511
update index (#19176)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-12-01 13:57:08 +02:00
Pudong
555c738cd0
hook create key route in ws-proxy (#19174) 2023-11-30 19:28:07 +02:00
Pudong
10fe5b9699
[sshgateway] use ssh CA to auth (#19147)
* [sshgateway] use ssh CA to auth

* change name

* add error log

* fix

* mark volume optional

* [installer] validate ssh-ca secret

* Revert "[installer] validate ssh-ca secret"

This reverts commit ca6ede78a7b5a720fd315eca32eb277cb5063069.

We must support the scenario where the installer has the secret, but, it is not in the cluster yet.

---------

Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2023-11-30 19:17:08 +02:00
Robo Quat
df2c4ebbb7
update index (#19121)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-11-28 12:41:06 +02:00
Manuel Alejandro de Brito Fontes
e9cfedd0c9
Get SSH username from workspacekit (#19146)
* Get SSH username from workspacekit

* Disable false positive

* Check status code
2023-11-27 19:52:05 +02:00
Manuel Alejandro de Brito Fontes
453bf6ea4a
Refactor configuration of workspace SSH key (#19059)
* Refactor configuration of workspace SSH key

* Update go modules

* Update CRD

* only add SSH Key to workspace CR (#19130)

---------

Co-authored-by: Pudong <tianshi8650@gmail.com>
2023-11-24 15:55:01 +02:00
Pudong
34674c7fdb
Migrate the ssh tunnel from supervisor to ws-proxy (#19119)
* Migrate the ssh tunnel from supervisor to ws-proxy

* Add metrics for tunnel open and close
2023-11-24 14:21:02 +02:00
Robo Quat
b754a0f891
update index (#19079)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-11-20 11:25:57 +02:00
Robo Quat
5c7015565b
update index (#19034)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-11-11 00:46:48 +02:00
Wouter Verlaek
185c0428c2
[scrubber] Improve KeyValue performance (#19052)
* [scrubber] Improve KeyValue performance

* Update benchmark comment

* update go mod

* Add metaID to hashed fields

---------

Co-authored-by: Pudong Zheng <pudong@gitpod.io>
2023-11-10 16:17:48 +02:00
Manuel Alejandro de Brito Fontes
e4a118c410
We only have CRDs now (#19053) 2023-11-10 13:46:48 +02:00