36 Commits

Author SHA1 Message Date
Pudong
1b106c39ba
[ssh gateway] improve logs for errors (#19252) 2023-12-13 21:38:20 +02:00
Pudong
754495378d
[ws-proxy] use root as default username in non-mk2 (#19241) 2023-12-12 15:57:19 +02:00
Pudong
1b7498059c
[ws-proxy] add missing permission for generated ssh key (#19201) 2023-12-06 21:00:13 +02:00
Pudong
7f83e2f592
[ws-proxy] only get username if workspace not managed by mk2 (#19180)
* [ws-proxy] only get username if workspace not managed by mk2

* remove ssh key from infoprovider

* improve logs

* Update components/ws-proxy/pkg/sshproxy/server.go
2023-12-01 21:41:09 +02:00
Pudong
10fe5b9699
[sshgateway] use ssh CA to auth (#19147)
* [sshgateway] use ssh CA to auth

* change name

* add error log

* fix

* mark volume optional

* [installer] validate ssh-ca secret

* Revert "[installer] validate ssh-ca secret"

This reverts commit ca6ede78a7b5a720fd315eca32eb277cb5063069.

We must support the scenario where the installer has the secret, but, it is not in the cluster yet.

---------

Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2023-11-30 19:17:08 +02:00
Manuel Alejandro de Brito Fontes
e9cfedd0c9
Get SSH username from workspacekit (#19146)
* Get SSH username from workspacekit

* Disable false positive

* Check status code
2023-11-27 19:52:05 +02:00
Manuel Alejandro de Brito Fontes
453bf6ea4a
Refactor configuration of workspace SSH key (#19059)
* Refactor configuration of workspace SSH key

* Update go modules

* Update CRD

* only add SSH Key to workspace CR (#19130)

---------

Co-authored-by: Pudong <tianshi8650@gmail.com>
2023-11-24 15:55:01 +02:00
Pudong
34674c7fdb
Migrate the ssh tunnel from supervisor to ws-proxy (#19119)
* Migrate the ssh tunnel from supervisor to ws-proxy

* Add metrics for tunnel open and close
2023-11-24 14:21:02 +02:00
Anton Kosyakov
cbc308305c
[ssh] flexible auth user (#18880) 2023-10-06 14:52:15 +03:00
Kyle Brennan
8bdbdd55f2
[ws-proxy] additional logging to better errors causing OTHER error_type (#18799)
* [ws-proxy] additional logging to better understand OTHER failures

* Fix
2023-09-26 15:55:05 +03:00
Pudong
3b6621c77f
Fix compatibility with golang crypto ssh (#18406) 2023-08-02 19:25:27 +08:00
Pudong
2e2833a8b5
[ssh-gateway] fix missing output when running simple command (#18366)
* [ssh-gateway] fix missing output when running simple command

* upgrade golang-crypto library

* only close when all of stdout stderr request stream finish

* upgrade golang-crypto
2023-08-01 03:21:26 +08:00
Pudong
fcaf1b3ffa
Check workspace phase in ssh-gateway before connect to workspace (#17876) 2023-06-13 13:53:03 +08:00
Pudong
7d7fcbb366
[ssh-gateway] support stderr forward in shell session (#16546) 2023-02-28 10:01:58 +01:00
Christian Weichel
9992d4fa32 [ws-proxy] Support workspace CRD 2023-01-23 14:14:30 +01:00
Anton Kosyakov
697696029b [gp-run] experimental workspace config debug mode
Co-authored-by: Anton Kosyakov <anton@gitpod.io>
Co-authored-by: Victor Nogueira <victor@gitpod.io>
Co-authored-by: Andrea Falzetti <andrea@gitpod.io>
2023-01-09 06:32:48 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Anton Kosyakov
6533581a0e [ssh-proxy] only mark first active when user establish ssh connection
VS Code Remote SSH will reestablish a ssh connection even if window is not uesd.
It will retrigger heartbeat over and over in SSH Gateway.
SSH Gateway should only triggert heartbeat if pty sessions is present.

Co-authored-by: Pudong <tianshi8650@gmail.com>
2022-11-09 21:46:39 +02:00
Pudong Zheng
23fe8d686c [ssh-gateway] cleanup code 2022-07-19 15:55:15 +02:00
Pudong Zheng
d3ca4b6002 [ssh-gateway] Reject ssh connection when workspace not found 2022-07-19 15:55:15 +02:00
Pudong Zheng
ef5c8646c3 [ws-proxy] improve no-client-auth analytics 2022-07-12 00:37:58 +05:30
Pudong Zheng
1361d22be5 [ssh-gateway] add track for send closed heartbeat 2022-06-28 19:09:38 +05:30
Pudong Zheng
3522b7b3cd [ssh-gateway] only send heartbeat when it explicitly request pty 2022-06-28 19:09:38 +05:30
Pudong Zheng
9dc436aa92 [SSH Gateway] remove priavte key requirement when ownerToken is provide 2022-06-17 12:13:26 +05:30
Pudong Zheng
fe6e39e3a3 [workspace] support user upload ssh keys
Co-authored-by: Huiwen <huiwen@gitpod.io>
Co-authored-by: Christian Weichel <chris@gitpod.io>
Co-authored-by: Pavel Tumik <18602811+sagor999@users.noreply.github.com>
2022-06-15 22:58:25 +05:30
JenTing Hsiao
9631a0b57b Remove deprecated function
The function grpc.WithInsecure() is deprecated, use
grpc.WithTransportCredentials(insecure.NewCredentials()) instead.

Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2022-06-15 13:07:24 +05:30
Pudong Zheng
b675fb702c [ws-proxy] Distinguish between WS_NOTFOUND and WS_ID_INVALID 2022-06-02 02:34:50 +05:30
Pudong Zheng
09d34a55b2 [ws-proxy] SSH gateway support full channel type 2022-05-28 23:46:46 +05:30
Pudong Zheng
701806408b [ws-proxy] fix miss parameter when SSH connection is successful 2022-05-24 21:14:38 +05:30
Pudong Zheng
1787d38165 [ws-proxy] add some ssh metrics
1

2

[debug]

1
2022-05-23 21:50:37 +05:30
Pudong Zheng
3c21eb64f8 add analytics for ssh 2022-05-19 12:06:33 +05:30
Pudong Zheng
f566dc04d2 Change the quick login split field from : to # 2022-01-25 00:00:16 +01:00
Pudong Zheng
f7f4dbde8e If pty channel closed then send closed flag and fix timer leak 2022-01-25 00:00:16 +01:00
Pudong Zheng
16f8fe6f94 refactory and improve SSH gateway compatibility with some automatic client 2022-01-25 00:00:16 +01:00
Christian Weichel
8091962e85 [sshproxy] Add heartbeating 2022-01-25 00:00:16 +01:00
Pudong Zheng
d9955ccc74 Add SSH Gateway to ws-proxy 2022-01-06 17:29:00 +01:00