42 Commits

Author SHA1 Message Date
iQQBot
52a7727b4f
[node-labeler] Refactor node labeling to use taints instead of labels (#20652)
* [node-labeler] Refactor node labeling to use taints instead of labels

* [agent-smith] Add toleration to daemonset

* Add workspace component tolerations to various Gitpod components if it running in Full installation

* Apply suggestions from code review

Co-authored-by: Kyle Brennan <kyle@gitpod.io>

* Update components/node-labeler/cmd/run.go

Co-authored-by: Kyle Brennan <kyle@gitpod.io>

---------

Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2025-03-11 03:30:39 -04:00
Gero Posmyk-Leinemann
76781bf322
[dev] Update workspace libraries to match kubernetes (containerd, runc, buildkit) (#20526)
* [workspace] Set lib versions: containerd to 1.6.36, runc 1.1.14 and buildkit to 0.12.5

Reasoning: https://linear.app/gitpod/issue/CLC-982/update-containerd-to-latest-patch-16x-k8s-and-runc-libs-in-gitpod-mono#comment-d5450e2c

* [golangci] Remove superfluous notlint and checks

* [image-builder-mk3] Fix incomplete tests where a library made the field "mediaType" non-optimal

    Original change: https://github.com/opencontainers/image-spec/pull/1091

* [docker] Switch from github.com/docker/distribution/reference to github.com/distribution/reference

* [ws-daemon] Internalize libcontainer/specconv because it got dropped between runc 1.1.10 and 1.1.14
2025-01-20 09:32:10 -05:00
Gero Posmyk-Leinemann
7a27ea0839
[installer] Mount custom CA certs into all relevant places (#20469)
* [installer] Add custom CA cert to papi-server

* [installer] Add custom CA cert to proxy
2024-12-19 11:22:05 -05:00
Pudong
6cc2aae832
[service-waiter] add addition image condition in annotation (#19494)
* [service-waiter] add addition image condition in annotation

* use common-go package
remove spec.image check

* change download source for kubectl
2024-03-05 16:08:15 +02:00
Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules (#19376)
* Update containerd and buildkit go modules

* Fix build

* Fix typecheck errors

---------

Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Huiwen
700b6050ba
Make db waiter to wait latest migration (#18455)
* Make db waiter to wait latest migration

* Move generate out of build

* Remove conn require

* Allow to ignore migration check

* Use shell

* Use fail and remote useless log

* Generate service-waiter txt when create migration

* Revert "Generate service-waiter txt when create migration"

This reverts commit 11c12b83544a448f9784f8aa94cdfd69cfb15f45.

* Add log
2023-08-10 13:51:36 +02:00
Milan Pavlik
a3d54e2a13
[service-waiter] Extend to support redis WEB-602 (#18196)
* [service-waiter] Extend to support redis

* hook up to installer
2023-07-07 17:59:24 +08:00
Milan Pavlik
1cdb7ab142
[installer] Remove OIDC secret from public-api WEB-206 (#17331)
* Fix

* retest

* [installer] Remove OIDC secret from public-api

* fix

* remove ci secret

* fix
2023-04-24 20:51:45 +08:00
Milan Pavlik
b57424a76f
[jwt] Installer configures expiry & issuer WEB-102 (#17314)
* [jwt] Installer configures expiry & issuer

* Fix

* Fix

* retest

* Fix

* Fix

* Fix
2023-04-24 17:07:45 +08:00
Milan Pavlik
0bf91e58fd
[installer] Add key id for each auth keypair - WEB-100 (#17219)
* [installer] Add key id for each auth keypair

* retest

* fix

* fix
2023-04-17 18:41:49 +08:00
Milan Pavlik
ac0dbf8c52
[papi] Mount Auth PKI - WEB-101 (#17218)
* [papi] Mount Auth PKI

* Fix

* Fix test
2023-04-14 15:39:54 +02:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes (#16810)
* Ensure the spread of pods on different nodes

* Replace string ClusterFirst

* Replace Always string in DNSPolicy

* Fix registry-facade affinity

* Fix ws-proxy affinity

* Address feedback

* Update golden files
2023-03-15 10:21:07 +01:00
Milan Pavlik
849334dc5c [spicedb] Add kube-rbac-proxy to expose metrics endpoint 2023-02-07 15:36:45 +01:00
Alex Tugarev
3ef29bf278 [papi] Add signing secret for JWTs
Praparation to use with `golang-jwt/jwt`
2023-01-30 11:15:37 +01:00
Milan Pavlik
0d5cb6c3ff [installer] Mount database secret to Public API 2023-01-19 10:03:27 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1 [installer] manually set allowPrivilegeEscalation to false
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.

This also helps us future proof on any behaviour changes around
this.

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Milan Pavlik
bc23811665 [installer] Configure personal access token signing key 2022-11-21 17:12:51 -03:00
Andrew Farries
6839026b4b Add DatabaseWaiterContainer init container 2022-11-18 13:31:48 +02:00
Milan Pavlik
0532f1df38 [public-api] Inject database environment 2022-11-15 16:25:45 +02:00
Laurie T. Malau
aa812d2650 [public api] Add configcat config 2022-11-14 18:08:44 +02:00
Milan Pavlik
cc233e41e6 [installer] Deploy Public API without experimental config 2022-11-09 15:30:39 +01:00
Milan Pavlik
3037016a2e }}} This is a combination of 2 commits.
[stripe] Inject stripe-webhook-secret into public-api
2022-08-26 13:49:11 +02:00
Simon Emms
2fd3dd3586 [installer]: remove the custom labels from the selector labels 2022-08-09 04:16:53 -03:00
Simon Emms
8fad588e6b [installer]: add customization functions to components 2022-06-24 17:02:33 +05:30
Manuel Alejandro de Brito Fontes
624021f2f2 Simplify configuration of KubeRBACProxyContainerWithConfig and remove collision 2022-06-03 18:07:52 +05:30
Christian Weichel
b7bf69d01e [public-api-server] Harmonise configuration structure 2022-05-25 17:35:39 +05:30
Milan Pavlik
51450d5141 [public-api] Use standard cli setup 2022-05-19 14:27:33 +05:30
Milan Pavlik
099769c90e [public-api] Fix kube-rbac-proxy upstream metrics port 2022-05-19 14:01:33 +05:30
Christian Weichel
5dd9465378 [public-api] Adapt to new baseserver structure 2022-05-16 13:23:31 +05:30
Milan Pavlik
b09cda83e1 [public-api] Rename HTTP port to Debug 2022-05-13 14:32:28 +05:30
Milan Pavlik
9e84038beb [public-api] Set config in installer 2022-05-04 20:05:20 +05:30
Milan Pavlik
6d7e8c587e [public-api] Add kube-rbac proxy container to deployment 2022-04-29 14:36:15 +05:30
Andrew Farries
674db36fbb Make resources configurable for all components
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Andrew Farries
0ae3201a7e Set Replicas for multiple components
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Milan Pavlik
beaf1b4cd2 [public-api] Use /ready and /live for probes 2022-04-22 13:33:34 +05:30
Simon Emms
948ae5192b [installer]: add DropImageRepo functionality to RepoName
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Milan Pavlik
660b593d4a [public-api] Add k8s service definition 2022-04-20 16:31:33 +05:30
Milan Pavlik
f6d2783e00 [public-api] Ensure no objects are rendered by installer without experimental config 2022-04-20 15:02:32 +05:30
Andrew Farries
3fdd2d9754 Rename common.Affinity to NodeAffinity 2022-04-20 02:48:32 +05:30
Milan Pavlik
a75b4cf200 [public-api-server] Add deployment into installer
Please enter the commit message for your changes. Lines starting
2022-04-13 16:59:26 +05:30
Milan Pavlik
d4bc3fdb52 [public-api-server] Setup component in installer, behind epxerimental config 2022-04-13 14:05:26 +05:30