42 Commits

Author SHA1 Message Date
Gero Posmyk-Leinemann
76781bf322
[dev] Update workspace libraries to match kubernetes (containerd, runc, buildkit) (#20526)
* [workspace] Set lib versions: containerd to 1.6.36, runc 1.1.14 and buildkit to 0.12.5

Reasoning: https://linear.app/gitpod/issue/CLC-982/update-containerd-to-latest-patch-16x-k8s-and-runc-libs-in-gitpod-mono#comment-d5450e2c

* [golangci] Remove superfluous notlint and checks

* [image-builder-mk3] Fix incomplete tests where a library made the field "mediaType" non-optimal

    Original change: https://github.com/opencontainers/image-spec/pull/1091

* [docker] Switch from github.com/docker/distribution/reference to github.com/distribution/reference

* [ws-daemon] Internalize libcontainer/specconv because it got dropped between runc 1.1.10 and 1.1.14
2025-01-20 09:32:10 -05:00
Kyle Brennan
24fc202d58
[ws-daemon] reduce requested memory to 2Gi (#20439)
* [ws-daemon] reduce requested memory to 2Gi

* Bump to 3Gi

We need to free up 4.7Gi to schedule an additional XLarge workspace in Enterprise Classic, this helps us achieve that with a margin of 300Mi.

* Revert "Bump to 3Gi"

This reverts commit cc89834f07113ca651af9c6a6cb67c3e5910ebac.
2024-12-11 08:33:32 -05:00
Thomas Schubart
7b3ecc48f1
Tolerate all taints (#19867) 2024-06-12 19:40:08 +08:00
Thomas Schubart
f71329971b
Tolerate GPU taint (#19791) 2024-05-29 19:54:10 +08:00
Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules (#19376)
* Update containerd and buildkit go modules

* Fix build

* Fix typecheck errors

---------

Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Manuel Alejandro de Brito Fontes
d464ef8ecd
Cleanup installer (#18784)
* Cleanup installer

* Remove MessageBus references
2023-09-25 10:58:04 +02:00
Thomas Schubart
460875058f
[ws-manager-mk2] Remove ws-manager-mk2 from experimental section (#17848)
* [wsman-mk2] Remove ws-manager-mk2 from experimental

* [ws-daemon] Remove readiness check for service

* [ws-daemon] Use mk2 working area only

* [preview] Remove mk2 customization

* [installer] Remove constant
2023-06-06 22:56:57 +08:00
Thomas Schubart
4edc0ef4e2
[installer] Increase rollout speed (#17060) 2023-03-28 13:40:26 +02:00
Manuel Alejandro de Brito Fontes
5b30eb5b8c
Remove unused caCertSecret (#16793)
* Add trust.cert-manager.io for to bundle CA certificates

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Configure CA volume and volumemount in components

* Update ws-manager golden files

* Deploy trust manager in preview

* Remove duplicated volume

* Update installer golden files

* Generate a bundle only for registry-facade

* Update golden files

* Fix initcontainer volume mounts

* Update golden files

* Fix registry-facade certificate

* Update golden files

* Disable skip_verify

* Enable force conflict with apply server side

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Avoid random werft namespace errors

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-21 11:44:13 +01:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes (#16810)
* Ensure the spread of pods on different nodes

* Replace string ClusterFirst

* Replace Always string in DNSPolicy

* Fix registry-facade affinity

* Fix ws-proxy affinity

* Address feedback

* Update golden files
2023-03-15 10:21:07 +01:00
Manuel Alejandro de Brito Fontes
218f64f7c1
Replace node labeler component with a dedicated deployment (#16712)
* Replace node labeler component with a dedicated deployment

* Update go modules

* Fix invalid module name

* Fix modules
2023-03-09 23:38:45 +01:00
Manuel Alejandro de Brito Fontes
41ddf50849
[ws-daemon] Check connection to containerd socket (#16654)
* Check connection to containerd socket

* Mount containerd socket directory to avoid reconnect issues if containerd restarts

* Update golden files

* Break loop
2023-03-03 12:59:01 +01:00
Manuel Alejandro de Brito Fontes
b958873e90
Allow registry-facade and ws-daemon to run in dedicated GPU node pools (#16608)
* Allow registry-facade and ws-daemon to run in dedicated GPU node pools

* Update golden files
2023-03-01 12:23:58 +01:00
Manuel Alejandro de Brito Fontes
329e56580e
Switch registry-facade from hostPort to nodePort and remove hostPort from ws-daemon (#16518)
* Switch registry-facade and ws-daemon from hostPort to nodePort

* Update golden files

* Update ports

* Remove old setting

* Remove $WS_DAEMON_PORT

* Switch to podIP

* Tune GCE VM

* Use withObservability flag
2023-02-24 21:40:54 +01:00
Thomas Schubart
9490cc90f2 [installer] Fix content init 2023-01-23 14:14:30 +01:00
Manuel Alejandro de Brito Fontes
9e173ca7a4 Remove shiftfs module loader 2023-01-18 11:07:26 +01:00
Manuel Alejandro de Brito Fontes
82dde8af88 Remove disable kube health monitor 2023-01-17 12:57:25 +01:00
utam0k
a7accce55d ws-daemon: Ensure that node-labeler always monitors the ws-daemon container 2022-12-12 04:00:21 -03:00
Thomas Schubart
06074b311b [content-service] Review Comments
- Ensure all items are fetched
- Remove double init of client
- Specify region and credentials from config
- Remove insecure s3 test (deprecated)
2022-12-09 10:29:19 -03:00
Thomas Schubart
c3a97c9ccb [installer] Configure S3 2022-12-09 10:29:19 -03:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1 [installer] manually set allowPrivilegeEscalation to false
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.

This also helps us future proof on any behaviour changes around
this.

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Manuel Alejandro de Brito Fontes
def55ee7ba Add option to add authentication to Jaeger and custom tags 2022-10-11 13:51:26 +02:00
Simon Emms
90ee6fdc06 [installer]: set proxy server configuration in installer 2022-09-13 12:38:14 +02:00
Simon Emms
99c53cce9b [installer]: create config cluster shiftfs to detect shiftfs status 2022-09-12 21:17:14 +02:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9 Fix typecheck errors 2022-08-23 08:18:39 +02:00
Simon Emms
2fd3dd3586 [installer]: remove the custom labels from the selector labels 2022-08-09 04:16:53 -03:00
Manuel Alejandro de Brito Fontes
afc5bb6880 [ws-daemon] Increase resources more real values 2022-08-01 16:46:45 -03:00
Manuel Alejandro de Brito Fontes
14095f470b Refactor configuration of localhost address, metric and debug ports 2022-07-23 11:19:18 -03:00
Manuel Alejandro de Brito Fontes
316b493057 Refactor ws-daemon and registry-facade postStart hook 2022-07-21 20:22:16 -03:00
Simon Emms
8fad588e6b [installer]: add customization functions to components 2022-06-24 17:02:33 +05:30
Andrew Farries
7363937d54 Rename TracingEnv to WorkspaceTracingEnv 2022-05-11 13:25:26 +05:30
Andrew Farries
674db36fbb Make resources configurable for all components
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Christian Weichel
96b2a36540 [ws-daemon] Support GIT_SSL_CAINFO 2022-04-28 18:47:14 +05:30
Manuel Alejandro de Brito Fontes
dc99d7686b [installer] Increase ws-daemon FailureThreshold 2022-04-26 18:46:38 +05:30
Simon Emms
948ae5192b [installer]: add DropImageRepo functionality to RepoName
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Andrew Farries
3fdd2d9754 Rename common.Affinity to NodeAffinity 2022-04-20 02:48:32 +05:30
Christian Weichel
f2738568e3 [installer] Add custom CA secret support 2022-04-11 22:39:24 +05:30
Manuel Alejandro de Brito Fontes
e894487df2 [ws-daemon] Configure readiness probe 2022-03-29 22:20:13 +05:30
Manuel Alejandro de Brito Fontes
baa2a9af12 [installer] Configure-readiness-probes.patch 2022-03-29 22:20:13 +05:30
Manuel Alejandro de Brito Fontes
89105f8628 Update signatures due to k8s v1.23 changes 2022-03-03 18:46:10 +05:30
Simon Emms
4820e804bb [installer]: move to /install 2022-02-22 17:03:02 +05:30