580 Commits

Author SHA1 Message Date
Alex Tugarev
b7872c1372
Remove deprecated and unused getPortAuthenticationToken method (#17321) 2023-04-24 16:02:45 +08:00
Manuel Alejandro de Brito Fontes
891cd5417d
Update k8s dependencies to v0.26.2 (#17211)
* Update k8s dependencies to v0.26.2

* Update controller-runtime to v0.14.6

* Update cloud storage
 https://github.com/googleapis/google-cloud-go/issues/6857

* Update copy options

* Update wolfi image

* Remove controller-runtime replace directives

* Fix integration tests
2023-04-18 03:59:49 +08:00
Manuel Alejandro de Brito Fontes
541f6f65c5
Remove unused PodSecurityPolicy feature (#17176) 2023-04-13 22:13:53 +02:00
Manuel Alejandro de Brito Fontes
27979c9395
Update go dependencies (#17101)
* Update go dependencies

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Update runc to v1.1.5

* Update docker cli to v23.0.2+incompatible

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-04-12 10:03:52 +02:00
Kyle Brennan
a2176718ec
[dev image] update to Jammy (#16718)
* [dev image] update to Jammy

Ref: https://github.com/gitpod-io/workspace-images/pull/1017

no more `python-dev`

ref:
https://github.com/lewagon/data-setup/issues/219#issuecomment-1207519811
https://wiki.termux.com/wiki/No_more_-dev_packages

* [dev image] update images latest dev image

* [ws-manager] avoid false positive linter errors

* [ws-daemon] fix ineffectual assignment for err

golangci-lint is catching more errors since upgrading to go 1.19.5

* Update to more recent gcloud

* Moar timeout
2023-03-22 19:37:14 +01:00
Manuel Alejandro de Brito Fontes
5b30eb5b8c
Remove unused caCertSecret (#16793)
* Add trust.cert-manager.io for to bundle CA certificates

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Configure CA volume and volumemount in components

* Update ws-manager golden files

* Deploy trust manager in preview

* Remove duplicated volume

* Update installer golden files

* Generate a bundle only for registry-facade

* Update golden files

* Fix initcontainer volume mounts

* Update golden files

* Fix registry-facade certificate

* Update golden files

* Disable skip_verify

* Enable force conflict with apply server side

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Avoid random werft namespace errors

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-21 11:44:13 +01:00
Wouter Verlaek
d5c9519b30
[ws-manager] Log timeout (#16855) 2023-03-15 12:54:07 +01:00
Manuel Alejandro de Brito Fontes
218f64f7c1
Replace node labeler component with a dedicated deployment (#16712)
* Replace node labeler component with a dedicated deployment

* Update go modules

* Fix invalid module name

* Fix modules
2023-03-09 23:38:45 +01:00
Manuel Alejandro de Brito Fontes
d03f23cf82
Reuse context from the reconciler (#16695) 2023-03-07 08:58:04 +01:00
Manuel Alejandro de Brito Fontes
ec6b911f24
Simplify image-builder-mk3 and registry-facade init containers (#16633)
* Simplify image-builder-mk3 and registry-facade init containers

* Include new image-builder-mk3-wsman deployment

* Wait before updating node labels

* Ensure the loop runs more than once
2023-03-03 19:48:01 +01:00
Milan Pavlik
e4e05143e2
[baseserver] Initialize tracer with server (#16586)
* [baseserver] Initialize tracer with server

* fix

* Fix

* fix
2023-03-03 14:57:01 +01:00
Manuel Alejandro de Brito Fontes
329e56580e
Switch registry-facade from hostPort to nodePort and remove hostPort from ws-daemon (#16518)
* Switch registry-facade and ws-daemon from hostPort to nodePort

* Update golden files

* Update ports

* Remove old setting

* Remove $WS_DAEMON_PORT

* Switch to podIP

* Tune GCE VM

* Use withObservability flag
2023-02-24 21:40:54 +01:00
Thomas Schubart
8c6c0f5a8b [ws-manager] Update golden files 2023-02-14 11:41:19 +01:00
Thomas Schubart
70e7cac44f [ws-manager] Do not schedule on experimental nodes 2023-02-14 11:41:19 +01:00
Pudong Zheng
377f00cb02 [ws-manager] Add custom closed timeout
Co-authored-by: Wouter Verlaek <wouter@gitpod.io>
2023-02-10 11:16:15 +01:00
Wouter Verlaek
cb192728d1 Update Go dependencies 2023-02-08 16:47:46 +01:00
Manuel Alejandro de Brito Fontes
bcdde44633 Switch from alpine to wolfi 2023-02-05 12:10:43 +01:00
Manuel Alejandro de Brito Fontes
89eb6f1603 Update tests 2023-01-30 16:36:39 +01:00
Manuel Alejandro de Brito Fontes
92e11940d0 Do not try to connect to not ready ws-daemon pods 2023-01-30 16:36:39 +01:00
Christian Weichel
abeea17ab5 Move ws-manager-mk2 CRD to API package 2023-01-23 14:14:30 +01:00
utam0k
3f352c3748 ws-manager: Add a log and trace not to overlook workspace schedule failure 2023-01-19 11:52:27 +01:00
JenTing Hsiao
8bd4df75e7 ws-manager: skip failure from terminated message
For some reason, the pod is killed with unknown container status and no taints on the underlying node.
Therefore, we skip extracting the failure from the terminated message.

Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-13 06:06:52 +01:00
JenTing Hsiao
9f33031a6d ws-manager: add log to help troubleshoot
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-10 08:22:49 +01:00
JenTing Hsiao
40c1d2eacc ws-manager: avoid duplicate logs
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-09 10:50:48 +01:00
Pavel Tumik
fda0234ae2 fix headless and prebuild pods not removing never ready annotation 2023-01-06 17:28:46 +01:00
JenTing Hsiao
316dbdb52a ws-manager: add new reason out-of-space for workspace_stops_total metric
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-05 11:27:44 +01:00
JenTing Hsiao
bb96008cb6 Fix the metric workspace_starts_failure_total and workspace_stops_total
Increase the metric workspace_starts_failure_total when the workspace stops and
the pod's annotation "gitpod/never-ready" exist. It means the workspace pod never
went into the running state, probably because
- the workspace pod can't allocate to the workspace node
- content initialization failure
- the workspace pod is never ready

Increase the metric workspace_stop_total when the workspace stops and
the pod's annotation "gitpod/never-ready" does not exist. So, the metric
workspace_stop_total does not increase on the start failure.

Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-04 23:47:44 +01:00
JenTing Hsiao
4af9af4a1e Apply suggestions from code review
Co-authored-by: Pavel Tumik <18602811+sagor999@users.noreply.github.com>
2023-01-03 23:48:43 +01:00
JenTing Hsiao
af04243b3b If dryRun, return gRPC FailedPrecondition
If dryRun enables on StartWorkspace/StopWorkspace/TakeSnapshot,
return gRPC FailedPrecondition status code and error message
`under maintenance mode`.

Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-03 23:48:43 +01:00
JenTing Hsiao
a10dc221fb Watch the config.manager change
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2023-01-03 23:48:43 +01:00
Pavel Tumik
edbaaae0c5 [ws-manager] remove unneeded metric 2023-01-03 19:37:43 +01:00
utam0k
24a7d195db ws-manager: Update and add golden files 2022-12-28 23:23:37 +01:00
utam0k
a7fe67dd17 ws-manager: Prevent to slip the CREATING phase 2022-12-28 23:23:37 +01:00
utam0k
67d810e226 ws-manager: Improve the peformance of reconcile handlerr 2022-12-28 23:23:37 +01:00
utam0k
c40fcc8ae6 ws-manager: Prevent to record duplicated metric 2022-12-20 13:29:29 -03:00
Wouter Verlaek
72d9152a71 [image-builder] Enable TLS in workspace clusters
Fix cyclic import cycle

Update altnames

Update golden testdata, todo

Update grpc opts

Testing

Remove blocking dial

Only add TLS in ws cluster

Conditional TLS

Add comments
2022-12-20 02:45:29 -03:00
utam0k
9e22744f98 ws-manager: A bit improve the code not to use the magic number 2022-12-20 00:41:29 -03:00
Manuel Alejandro de Brito Fontes
f22a92a72f Wait for the workspace secret before creating the workspace pod 2022-12-15 21:36:25 -03:00
Pavel Tumik
df1428d6f8 [wsmanager] improve error tracing in finalize workspace content 2022-12-11 19:14:21 -03:00
Christian Weichel
799e6059c4 [content-service] Implement support for S3 2022-12-09 10:29:19 -03:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Pavel Tumik
75a7e4fa41 [ws-manager] improve stop workspace metric 2022-12-05 03:37:15 -03:00
Pavel Tumik
807bc84009 [ws-manager] improve start workspace metric 2022-12-05 03:37:15 -03:00
JenTing Hsiao
b0c039f7c5 ws-manager: log JSON as an object instead of a string
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2022-11-24 10:12:53 -03:00
utam0k
d27715d4a8 ws-manager: Update golden files 2022-11-15 03:30:44 +02:00
utam0k
f613525b66 ws-manager: Allow extra time for workspace to receive SIGKILL 2022-11-15 03:30:44 +02:00
Pavel Tumik
01e79f4865 [pvc] remove fsgroup 2022-11-14 21:34:44 +02:00
Manuel Alejandro de Brito Fontes
6bb1ae2e93 Refactor probe maps to use sync.Map 2022-11-12 00:15:41 +02:00
Manuel Alejandro de Brito Fontes
6c4c785165 [ws-manager] Adjust probe timeouts 2022-11-12 00:15:41 +02:00
utam0k
f19761e2ac ws-manager: Monitor a event about deleting a pod
Signed-off-by: utam0k <k0ma@utam0k.jp>
2022-11-11 07:24:40 +02:00