45 Commits

Author SHA1 Message Date
iQQBot
52a7727b4f
[node-labeler] Refactor node labeling to use taints instead of labels (#20652)
* [node-labeler] Refactor node labeling to use taints instead of labels

* [agent-smith] Add toleration to daemonset

* Add workspace component tolerations to various Gitpod components if it running in Full installation

* Apply suggestions from code review

Co-authored-by: Kyle Brennan <kyle@gitpod.io>

* Update components/node-labeler/cmd/run.go

Co-authored-by: Kyle Brennan <kyle@gitpod.io>

---------

Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2025-03-11 03:30:39 -04:00
Gero Posmyk-Leinemann
76781bf322
[dev] Update workspace libraries to match kubernetes (containerd, runc, buildkit) (#20526)
* [workspace] Set lib versions: containerd to 1.6.36, runc 1.1.14 and buildkit to 0.12.5

Reasoning: https://linear.app/gitpod/issue/CLC-982/update-containerd-to-latest-patch-16x-k8s-and-runc-libs-in-gitpod-mono#comment-d5450e2c

* [golangci] Remove superfluous notlint and checks

* [image-builder-mk3] Fix incomplete tests where a library made the field "mediaType" non-optimal

    Original change: https://github.com/opencontainers/image-spec/pull/1091

* [docker] Switch from github.com/docker/distribution/reference to github.com/distribution/reference

* [ws-daemon] Internalize libcontainer/specconv because it got dropped between runc 1.1.10 and 1.1.14
2025-01-20 09:32:10 -05:00
Gero Posmyk-Leinemann
7a27ea0839
[installer] Mount custom CA certs into all relevant places (#20469)
* [installer] Add custom CA cert to papi-server

* [installer] Add custom CA cert to proxy
2024-12-19 11:22:05 -05:00
Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules (#19376)
* Update containerd and buildkit go modules

* Fix build

* Fix typecheck errors

---------

Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Huiwen
a5021da396
[installer] make sure dashboard is deployed after server and papi-server (#19042)
* [installer] make sure dashboard is deployed after server and papi-server

* fix build

* Add unit tests

* address feedback

* wait feature flag until get actual value of timed out

* default config cat client nil

* log avg fetch time

* 1

* mock feature flag hang

* Add metric

* fixup
2023-11-14 15:20:52 +02:00
Manuel Alejandro de Brito Fontes
f27b16ee31
Add support for pod disruption budget (#18547) 2023-08-25 22:06:51 +02:00
Anton Kosyakov
ce63317578
[configcat] fix IDE-185: user internal route (#18029) 2023-06-23 16:33:13 +08:00
Anton Kosyakov
16221d53f9
[analytics plugin] allow to configure segment endpoint (#17593)
in case of dedicated we would like to stream to telemetry exporter instead
2023-05-12 18:21:57 +08:00
Anton Kosyakov
7bde75d29d
internal analytics endpoint (#17389)
* internal analytics endpoint

to prevent triggering rate limitting on analytics from internal components
see https://gitpod.slack.com/archives/C02EN94AEPL/p1682493547309509

* add AnalyticsPort to service and modify network policy

* include all internal components

* fully qualified service reference

---------

Co-authored-by: Pudong <tianshi8650@gmail.com>
2023-04-27 15:50:35 +08:00
Milan Pavlik
bce4700f97
[installer] Remove payment endpoint - WEB-144 (#17233)
* [installer] Remove payment endpoint

* fix

* fix

* Fix
2023-04-17 19:48:49 +08:00
Anton Kosyakov
bf65f38734
[proxy] add analytics endpoint 2023-04-17 10:28:19 +02:00
Pudong
895054ca36
[proxy] add experimental flag let configcat proxy always serve config from configmap (#17095)
* [proxy] add experimental flag let configcat proxy always serve config from configmap

* use etag

* Update components/proxy/plugins/configcat/configcat.go

Co-authored-by: Filip Troníček <filip@gitpod.io>

* Fix warnings and add a notice

* use `CONFIGCAT_DIR`

---------

Co-authored-by: Filip Troníček <filip@gitpod.io>
2023-04-12 15:59:52 +02:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes (#16810)
* Ensure the spread of pods on different nodes

* Replace string ClusterFirst

* Replace Always string in DNSPolicy

* Fix registry-facade affinity

* Fix ws-proxy affinity

* Address feedback

* Update golden files
2023-03-15 10:21:07 +01:00
Gero Posmyk-Leinemann
c4caa10438 [proxy] Remove dependency on ws-proxy for "Meta" installation 2023-01-31 13:47:38 +01:00
Gero Posmyk-Leinemann
fbe474d498 [proxy] Add installation level flag FRONTEND_DEV_ENABLED (default: false) 2023-01-19 10:45:27 +01:00
Andrew Farries
503ef163f4 Stop setting X-Real-IP on upstream requests
The value of the header was set to the IP address of a machine inside
GCP rather than the the actual client IP address.

To ensure that the header contains the actual client IP address, this
header is now set at the GCP load balancer.
2023-01-16 21:50:24 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1 [installer] manually set allowPrivilegeEscalation to false
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.

This also helps us future proof on any behaviour changes around
this.

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
mustard
8b7242cf1c [installer] make installer full support installation shorname 2022-10-23 15:51:38 +02:00
mustard
c8d0dd11ab [installer] add configcat env for proxy 2022-09-09 12:25:24 +02:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9 Fix typecheck errors 2022-08-23 08:18:39 +02:00
Simon Emms
2fd3dd3586 [installer]: remove the custom labels from the selector labels 2022-08-09 04:16:53 -03:00
Pudong Zheng
b29d39bb87 integration with ide-proxy 2022-08-05 07:52:49 -03:00
Andrew Farries
4682009fd1 Add backend to payment-endpoint section 2022-08-04 07:01:48 -03:00
Manuel Alejandro de Brito Fontes
b28630772d [installer] Sync alpine version 2022-07-25 06:41:20 -03:00
Manuel Alejandro de Brito Fontes
14095f470b Refactor configuration of localhost address, metric and debug ports 2022-07-23 11:19:18 -03:00
Simon Emms
cd03b24d3c [installer]: move proxy loadbalancer annotations 2022-07-06 16:58:53 +05:30
Simon Emms
86c887cc6e [installer]: deprecate the experimental proxy service type config 2022-07-06 16:58:53 +05:30
Simon Emms
8fad588e6b [installer]: add customization functions to components 2022-06-24 17:02:33 +05:30
Nandaja Varma
f124c06b53 [installer] support service type in experimental config 2022-06-15 14:13:24 +05:30
Mads Hartmann
7b68fb4a27 Use slices instead of maps for service ports to control ordering 2022-05-30 20:14:48 +05:30
Gero Posmyk-Leinemann
c025034894 [cleanup] Remove kedge 2022-05-27 14:51:45 +05:30
Andrew Farries
9a9736d551 Add test for service annotations
Ensure that any annotations specified in the experimental config are
present on the rendered Service.
2022-05-05 13:12:21 +05:30
Andrew Farries
0b599a83ac Add ServiceAnnotations config to proxy
Allow the annotations on the service to be added to by specifying them
in the experimental config.
2022-05-05 13:12:21 +05:30
Andrew Farries
1d2bae11ab Add test for proxy ip configuration 2022-05-04 20:46:20 +05:30
Andrew Farries
2308e174da Add experimental proxy config for static IP
Configure the proxy component with a static IP if the config field is
set.
2022-05-04 20:46:20 +05:30
Andrew Farries
4b94c91168 Refactor: Move proxy service gen into its own file 2022-05-04 20:46:20 +05:30
Andrew Farries
f350f5455f Rename UsePodAffinity to UsePodAntiAffinity 2022-04-29 19:17:15 +05:30
Andrew Farries
1e293619d6 Use pod anti-affinity for proxy if flag is set 2022-04-28 20:04:14 +05:30
Andrew Farries
674db36fbb Make resources configurable for all components
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Andrew Farries
0ae3201a7e Set Replicas for multiple components
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Simon Emms
948ae5192b [installer]: add DropImageRepo functionality to RepoName
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Andrew Farries
3fdd2d9754 Rename common.Affinity to NodeAffinity 2022-04-20 02:48:32 +05:30
Manuel Alejandro de Brito Fontes
89105f8628 Update signatures due to k8s v1.23 changes 2022-03-03 18:46:10 +05:30
Simon Emms
4820e804bb [installer]: move to /install 2022-02-22 17:03:02 +05:30