iQQBot
52a7727b4f
[node-labeler] Refactor node labeling to use taints instead of labels ( #20652 )
...
* [node-labeler] Refactor node labeling to use taints instead of labels
* [agent-smith] Add toleration to daemonset
* Add workspace component tolerations to various Gitpod components if it running in Full installation
* Apply suggestions from code review
Co-authored-by: Kyle Brennan <kyle@gitpod.io>
* Update components/node-labeler/cmd/run.go
Co-authored-by: Kyle Brennan <kyle@gitpod.io>
---------
Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2025-03-11 03:30:39 -04:00
Gero Posmyk-Leinemann
76781bf322
[dev] Update workspace libraries to match kubernetes (containerd, runc, buildkit) ( #20526 )
...
* [workspace] Set lib versions: containerd to 1.6.36, runc 1.1.14 and buildkit to 0.12.5
Reasoning: https://linear.app/gitpod/issue/CLC-982/update-containerd-to-latest-patch-16x-k8s-and-runc-libs-in-gitpod-mono#comment-d5450e2c
* [golangci] Remove superfluous notlint and checks
* [image-builder-mk3] Fix incomplete tests where a library made the field "mediaType" non-optimal
Original change: https://github.com/opencontainers/image-spec/pull/1091
* [docker] Switch from github.com/docker/distribution/reference to github.com/distribution/reference
* [ws-daemon] Internalize libcontainer/specconv because it got dropped between runc 1.1.10 and 1.1.14
2025-01-20 09:32:10 -05:00
Gero Posmyk-Leinemann
7a27ea0839
[installer] Mount custom CA certs into all relevant places ( #20469 )
...
* [installer] Add custom CA cert to papi-server
* [installer] Add custom CA cert to proxy
2024-12-19 11:22:05 -05:00
Pudong
6cc2aae832
[service-waiter] add addition image condition in annotation ( #19494 )
...
* [service-waiter] add addition image condition in annotation
* use common-go package
remove spec.image check
* change download source for kubectl
2024-03-05 16:08:15 +02:00
Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules ( #19376 )
...
* Update containerd and buildkit go modules
* Fix build
* Fix typecheck errors
---------
Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Huiwen
700b6050ba
Make db waiter to wait latest migration ( #18455 )
...
* Make db waiter to wait latest migration
* Move generate out of build
* Remove conn require
* Allow to ignore migration check
* Use shell
* Use fail and remote useless log
* Generate service-waiter txt when create migration
* Revert "Generate service-waiter txt when create migration"
This reverts commit 11c12b83544a448f9784f8aa94cdfd69cfb15f45.
* Add log
2023-08-10 13:51:36 +02:00
Milan Pavlik
a3d54e2a13
[service-waiter] Extend to support redis WEB-602 ( #18196 )
...
* [service-waiter] Extend to support redis
* hook up to installer
2023-07-07 17:59:24 +08:00
Milan Pavlik
1cdb7ab142
[installer] Remove OIDC secret from public-api WEB-206 ( #17331 )
...
* Fix
* retest
* [installer] Remove OIDC secret from public-api
* fix
* remove ci secret
* fix
2023-04-24 20:51:45 +08:00
Milan Pavlik
b57424a76f
[jwt] Installer configures expiry & issuer WEB-102 ( #17314 )
...
* [jwt] Installer configures expiry & issuer
* Fix
* Fix
* retest
* Fix
* Fix
* Fix
2023-04-24 17:07:45 +08:00
Milan Pavlik
0bf91e58fd
[installer] Add key id for each auth keypair - WEB-100 ( #17219 )
...
* [installer] Add key id for each auth keypair
* retest
* fix
* fix
2023-04-17 18:41:49 +08:00
Milan Pavlik
ac0dbf8c52
[papi] Mount Auth PKI - WEB-101 ( #17218 )
...
* [papi] Mount Auth PKI
* Fix
* Fix test
2023-04-14 15:39:54 +02:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes ( #16810 )
...
* Ensure the spread of pods on different nodes
* Replace string ClusterFirst
* Replace Always string in DNSPolicy
* Fix registry-facade affinity
* Fix ws-proxy affinity
* Address feedback
* Update golden files
2023-03-15 10:21:07 +01:00
Milan Pavlik
849334dc5c
[spicedb] Add kube-rbac-proxy to expose metrics endpoint
2023-02-07 15:36:45 +01:00
Alex Tugarev
3ef29bf278
[papi] Add signing secret for JWTs
...
Praparation to use with `golang-jwt/jwt`
2023-01-30 11:15:37 +01:00
Milan Pavlik
0d5cb6c3ff
[installer] Mount database secret to Public API
2023-01-19 10:03:27 +01:00
Christian Weichel
478a75e744
Switch license to AGPL
2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1
[installer] manually set allowPrivilegeEscalation to false
...
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.
This also helps us future proof on any behaviour changes around
this.
Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Milan Pavlik
bc23811665
[installer] Configure personal access token signing key
2022-11-21 17:12:51 -03:00
Andrew Farries
6839026b4b
Add DatabaseWaiterContainer init container
2022-11-18 13:31:48 +02:00
Milan Pavlik
0532f1df38
[public-api] Inject database environment
2022-11-15 16:25:45 +02:00
Laurie T. Malau
aa812d2650
[public api] Add configcat config
2022-11-14 18:08:44 +02:00
Milan Pavlik
cc233e41e6
[installer] Deploy Public API without experimental config
2022-11-09 15:30:39 +01:00
Milan Pavlik
3037016a2e
}}} This is a combination of 2 commits.
...
[stripe] Inject stripe-webhook-secret into public-api
2022-08-26 13:49:11 +02:00
Simon Emms
2fd3dd3586
[installer]: remove the custom labels from the selector labels
2022-08-09 04:16:53 -03:00
Simon Emms
8fad588e6b
[installer]: add customization functions to components
2022-06-24 17:02:33 +05:30
Manuel Alejandro de Brito Fontes
624021f2f2
Simplify configuration of KubeRBACProxyContainerWithConfig and remove collision
2022-06-03 18:07:52 +05:30
Christian Weichel
b7bf69d01e
[public-api-server] Harmonise configuration structure
2022-05-25 17:35:39 +05:30
Milan Pavlik
51450d5141
[public-api] Use standard cli setup
2022-05-19 14:27:33 +05:30
Milan Pavlik
099769c90e
[public-api] Fix kube-rbac-proxy upstream metrics port
2022-05-19 14:01:33 +05:30
Christian Weichel
5dd9465378
[public-api] Adapt to new baseserver structure
2022-05-16 13:23:31 +05:30
Milan Pavlik
b09cda83e1
[public-api] Rename HTTP port to Debug
2022-05-13 14:32:28 +05:30
Milan Pavlik
9e84038beb
[public-api] Set config in installer
2022-05-04 20:05:20 +05:30
Milan Pavlik
6d7e8c587e
[public-api] Add kube-rbac proxy container to deployment
2022-04-29 14:36:15 +05:30
Andrew Farries
674db36fbb
Make resources configurable for all components
...
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Andrew Farries
0ae3201a7e
Set Replicas for multiple components
...
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Milan Pavlik
beaf1b4cd2
[public-api] Use /ready and /live for probes
2022-04-22 13:33:34 +05:30
Simon Emms
948ae5192b
[installer]: add DropImageRepo functionality to RepoName
...
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Milan Pavlik
660b593d4a
[public-api] Add k8s service definition
2022-04-20 16:31:33 +05:30
Milan Pavlik
f6d2783e00
[public-api] Ensure no objects are rendered by installer without experimental config
2022-04-20 15:02:32 +05:30
Andrew Farries
3fdd2d9754
Rename common.Affinity to NodeAffinity
2022-04-20 02:48:32 +05:30
Milan Pavlik
a75b4cf200
[public-api-server] Add deployment into installer
...
Please enter the commit message for your changes. Lines starting
2022-04-13 16:59:26 +05:30
Milan Pavlik
d4bc3fdb52
[public-api-server] Setup component in installer, behind epxerimental config
2022-04-13 14:05:26 +05:30