250 Commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
61f89f8436
Update go modules (#18372) 2023-07-28 16:20:30 +08:00
Manuel Alejandro de Brito Fontes
54c2040632
Update go modules to 1.20 (#18360) 2023-07-27 22:24:29 +08:00
Robo Quat
72d59cb859
update index (#18352)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-07-27 15:13:28 +08:00
Milan Pavlik
efb573cb51
[proxy] Add services.DOMAIN handlers for IDP and Apps ENG-524 (#18357)
* [proxy] Add services.DOMAIN handlers for IDP and Apps

* retest

* fix

* fix

* fix

* fix

* fix
2023-07-26 22:10:28 +08:00
Robo Quat
ba59f2e90c
update index (#18324)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-07-21 17:40:37 +08:00
Robo Quat
dd5ae6b6b5
update index (#18251)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-07-20 20:52:36 +08:00
Robo Quat
d44af7a7e1
update index (#18047)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-07-10 18:50:27 +08:00
Anton Kosyakov
ce63317578
[configcat] fix IDE-185: user internal route (#18029) 2023-06-23 16:33:13 +08:00
Robo Quat
423ce2ffc9
update index (#18010)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-06-23 15:34:13 +08:00
Robo Quat
b27795e15c
update index (#17856)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-06-12 14:29:02 +08:00
Robo Quat
99e74f600e
update index (#17662)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-06-02 15:05:07 +08:00
Anton Kosyakov
16221d53f9
[analytics plugin] allow to configure segment endpoint (#17593)
in case of dedicated we would like to stream to telemetry exporter instead
2023-05-12 18:21:57 +08:00
Robo Quat
2cd57728ae
update index (#17474)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-05-08 18:46:46 +08:00
Robo Quat
ae59069ecf
update index (#17443)
Co-authored-by: roboquat <roboquat@users.noreply.github.com>
2023-05-02 14:37:40 +08:00
Anton Kosyakov
7bde75d29d
internal analytics endpoint (#17389)
* internal analytics endpoint

to prevent triggering rate limitting on analytics from internal components
see https://gitpod.slack.com/archives/C02EN94AEPL/p1682493547309509

* add AnalyticsPort to service and modify network policy

* include all internal components

* fully qualified service reference

---------

Co-authored-by: Pudong <tianshi8650@gmail.com>
2023-04-27 15:50:35 +08:00
Manuel Alejandro de Brito Fontes
c407cafe2e
Add new github action to update container images digest (#17349)
* Add new github action to update container images digest

* Add latest tag to dockerfiles

* Update .github/workflows/update-image-digest.yml

Co-authored-by: Milan Pavlik <milan@gitpod.io>

---------

Co-authored-by: Milan Pavlik <milan@gitpod.io>
2023-04-26 21:13:34 +08:00
Anton Kosyakov
73f98a0e36
[analytics] use dummy static key for untrusted (#17293)
instead of real to unblock Node.js Segment SDK
2023-04-20 17:07:52 +08:00
Manuel Alejandro de Brito Fontes
891cd5417d
Update k8s dependencies to v0.26.2 (#17211)
* Update k8s dependencies to v0.26.2

* Update controller-runtime to v0.14.6

* Update cloud storage
 https://github.com/googleapis/google-cloud-go/issues/6857

* Update copy options

* Update wolfi image

* Remove controller-runtime replace directives

* Fix integration tests
2023-04-18 03:59:49 +08:00
Anton Kosyakov
bf65f38734
[proxy] add analytics endpoint 2023-04-17 10:28:19 +02:00
Pudong
895054ca36
[proxy] add experimental flag let configcat proxy always serve config from configmap (#17095)
* [proxy] add experimental flag let configcat proxy always serve config from configmap

* use etag

* Update components/proxy/plugins/configcat/configcat.go

Co-authored-by: Filip Troníček <filip@gitpod.io>

* Fix warnings and add a notice

* use `CONFIGCAT_DIR`

---------

Co-authored-by: Filip Troníček <filip@gitpod.io>
2023-04-12 15:59:52 +02:00
Manuel Alejandro de Brito Fontes
27979c9395
Update go dependencies (#17101)
* Update go dependencies

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Update runc to v1.1.5

* Update docker cli to v23.0.2+incompatible

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-04-12 10:03:52 +02:00
Milan Pavlik
b1dec9f34a
[proxy] Remove slow-server config (#16448) 2023-02-27 12:03:57 +01:00
Manuel Alejandro de Brito Fontes
1c9857b0f2 Update Caddy to address some memory regressions 2023-02-17 11:44:21 +01:00
Manuel Alejandro de Brito Fontes
9752a48201 Switch to builder alpine 2023-02-10 09:24:15 +01:00
Manuel Alejandro de Brito Fontes
b336a5cb65 Update go dependencies 2023-02-10 09:24:15 +01:00
Manuel Alejandro de Brito Fontes
302dddf3c4 Update caddy images 2023-02-10 09:24:15 +01:00
Manuel Alejandro de Brito Fontes
bcdde44633 Switch from alpine to wolfi 2023-02-05 12:10:43 +01:00
Gero Posmyk-Leinemann
7a1f01d580 [proxy] Fix meta workspace-handler 2023-02-01 10:20:39 +01:00
Gero Posmyk-Leinemann
c4caa10438 [proxy] Remove dependency on ws-proxy for "Meta" installation 2023-01-31 13:47:38 +01:00
Milan Pavlik
5cc1ab99f5 [proxy] Route /iam/* to public-api-server 2023-01-23 15:31:31 +01:00
Gero Posmyk-Leinemann
fbe474d498 [proxy] Add installation level flag FRONTEND_DEV_ENABLED (default: false) 2023-01-19 10:45:27 +01:00
Gero Posmyk-Leinemann
78e58ee1c1 [proxy, server] Introduce X-Frontend-Dev-URL 2023-01-19 10:45:27 +01:00
Andrew Farries
503ef163f4 Stop setting X-Real-IP on upstream requests
The value of the header was set to the IP address of a machine inside
GCP rather than the the actual client IP address.

To ensure that the header contains the actual client IP address, this
header is now set at the GCP load balancer.
2023-01-16 21:50:24 +01:00
Huiwen
a1670a1675 Add proxy route for public-api 2023-01-10 13:03:49 +01:00
Anton Kosyakov
697696029b [gp-run] experimental workspace config debug mode
Co-authored-by: Anton Kosyakov <anton@gitpod.io>
Co-authored-by: Victor Nogueira <victor@gitpod.io>
Co-authored-by: Andrea Falzetti <andrea@gitpod.io>
2023-01-09 06:32:48 +01:00
Alex Tugarev
9506a02554 [iam] add proxy route /iam/* 2022-12-22 12:40:31 -03:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Andrew Farries
fc3fcf3fc1 Extract request matchers to snippet 2022-12-01 11:53:00 -03:00
Andrew Farries
2071284bbd Pre-flight /auth endpoints 2022-12-01 11:43:01 -03:00
Andrew Farries
2d4df42103 Add cors_origin directive to backend_wss 2022-11-30 07:13:59 -03:00
Gero Posmyk-Leinemann
a845eb167e [proxy] Improve reconnection behavior of websockets 2022-11-30 07:13:59 -03:00
Andrew Farries
f89093da40 Match /api/v1 in the @backend_wss matcher
This reverts commit d9ca120e0b0ac59a1ece3e11c13a4d3659ef6c5a.
2022-11-29 13:40:58 -03:00
Andrew Farries
d9ca120e0b Revert "Match /api/v1 in the @backend_wss matcher"
This reverts commit 79e4e3742ec4fc106055ecac4be763f21aafe362.
2022-11-29 12:00:58 -03:00
Andrew Farries
69187b2103 Use forward_auth to pre-flight ws connections
Use the returned `X-Gitpod-Slow-Database` header to direct the ws
connection to either the `slow-server` or `server` deployment.
2022-11-29 11:19:58 -03:00
Andrew Farries
a7d5bb42fb Pre-flight requests to server /api/* endpoints
Before serving /api requests, make a 'pre-flight' request to
`/api/feature-flags/slow-database` and use the `X-Gitpod-Slow-Database`
header in the response to decide where to send the actual request;
either to the regular `server` service or the new `slow-server` service.
2022-11-28 11:47:57 -03:00
Andrew Farries
79e4e3742e Match /api/v1 in the @backend_wss matcher
Websocket Upgrade requests can hit either `/api/gitpod` (from `server`)
or `/api/v1` (from the public API).

This matcher change ensures that the request is handled by the intended
matcher block rather than the block for `api/*` requests below.
2022-11-28 11:21:58 -03:00
Andrew Farries
cd03a462aa Reverse proxy by Sec-WebSocket-Protocol header
Add matchers for the `Sec-WebSocket-Protocol` header and use them in the
`reverse_proxy` directives.
2022-11-21 10:53:51 -03:00
Andrew Farries
f0252299c4 Run caddy fmt 2022-11-21 10:53:51 -03:00
Milan Pavlik
311e9f4512 Revert "[proxy] Remove workspace download plugin"
This reverts commit c74f84bd2942495e9eafa0e57a3e08334e821613.
2022-11-11 11:25:40 +02:00
Milan Pavlik
c74f84bd29 [proxy] Remove workspace download plugin 2022-11-09 13:19:39 +01:00