7592 Commits

Author SHA1 Message Date
Christian Weichel
92c9494a44 [registry-facade] Support daemonSet deployment to ease network load
/werft https=true
/werft ws-feature-flags=registry_facade
2020-10-26 08:51:38 +01:00
Christian Weichel
11406fc397 [user namespace] Disable seccomp to make clone work
The default containerd seccomp profile seems to prevent the clone
syscall with `CLONE_NEWUSER` and/or `CLONE_NEWNS`.
2020-10-23 16:20:08 +02:00
Christian Weichel
438c234bb2 [ws-daemon] Rename InWorkspaceHelper to more apt InWorkspaceService
and introduce rate limiting on that service to mimic the behaviour of
the former canaries.
2020-10-23 16:20:08 +02:00
Christian Weichel
4444675ce0 [user namespaces] Start IDE and terminals as gitpod user again 2020-10-23 16:20:08 +02:00
Christian Weichel
f4e06ea96c [ws-manager] Set restartPolicy to never
ws-manager deletes failed workspace pods and we don't
support failed workspace restarts this way. Kubernetes
trying to restart the container breaks things occasionally.
2020-10-23 16:20:08 +02:00
Christian Weichel
4a9c8f910e [ws-daemon] Provide IWH through unix socket rather than canaries 2020-10-23 16:20:08 +02:00
Christian Weichel
5a7903b089 [supervisor] Introduce user-namespace rings 2020-10-23 16:20:08 +02:00
Christian Weichel
a6a84d0c93 [supervisor] Use SIGTERM instead of PreStop hook 2020-10-23 16:20:08 +02:00
Christian Weichel
4caab8cb07 [ws-daemon] Attempt to unmount shiftfs mark on teardown 2020-10-23 16:20:08 +02:00
Christian Weichel
16ae8cc5cf [ws-sync] Provide shiftfs mark mount upon request 2020-10-23 16:20:08 +02:00
Anton Kosyakov
6d2aae7c43 [supervisor] don't fail the process on tasks' errors 2020-10-23 13:24:27 +02:00
Christian Weichel
1e1b01c052 [image-builder] Better image not found detection 2020-10-22 12:59:40 +00:00
Anton Kosyakov
f774434e25 fix #2036: gp url should await when IDE is up 2020-10-22 14:22:42 +02:00
Anton Kosyakov
5c37b82d3d fixes #2039: don't log this task ran ... in prebuilds 2020-10-22 13:48:53 +02:00
Christian Weichel
84be881306 [ws-daemon] Fix shiftfs-module-loader 2020-10-21 15:29:12 +02:00
Christian Weichel
2e3ec08811 [supervisor] Provide mock Gitpod API for testing 2020-10-21 11:42:31 +02:00
Christian Weichel
2ce766b203 [supervisor] Fix terminal test 2020-10-19 10:26:18 +02:00
Christian Weichel
8d1664f81f [ws-daemon] Search and replace ws-sync
This should have happened in #2003

/werft https=true
2020-10-19 10:26:18 +02:00
Christian Weichel
38d0062390 [content-service] Make MinIO use fit for FWB
/werft https=true
2020-10-19 07:46:04 +02:00
Christian Weichel
d1cca07a62 [supervisor] Repair BackupService for FWB
/werft https=true
2020-10-19 07:46:04 +02:00
Christian Weichel
af40898931 [ws-daemon] Support direct validation of helm chart produced config 2020-10-19 07:46:04 +02:00
Christian Weichel
75558809c7 [go] go mod tidy in all components 2020-10-19 07:46:04 +02:00
Christian Weichel
3cbfd6f191 [common-go] Move CRI to ws-daemon/container 2020-10-19 07:46:04 +02:00
Christian Weichel
7172d822c7 [ws-daemon] Fold ws-manager-node into ws-daemon 2020-10-19 07:46:04 +02:00
Christian Weichel
6d93dd8348 [ws-daemon] Rename ws-sync to ws-daemon 2020-10-19 07:46:04 +02:00
Alex Tugarev
9a03c99bd7 [server] Fix domain scope for session cookie
With this change slicing of hostname will only be applied for preview environments.

ACK this still only works for preview environments deployed without a 2nd level TLD.
OTOH it should quickly enable SH installations with 2nd level TLDs!
2020-10-16 14:59:04 +02:00
Cornelius A. Ludmann
e8dd11c180 Stop Gitpod cube animation when workspace is stopped 2020-10-15 15:47:44 +02:00
Anton Kosyakov
70d2aa85fe fix #1984: blobserve caching across workspaces 2020-10-14 15:51:26 +02:00
Jan Keromnes
277638795a [gitlab] Don't double-encode path when getting the last commit of a Dockerfile
Fixes https://github.com/gitpod-io/gitpod/issues/1995
2020-10-14 14:28:06 +02:00
Anton Kosyakov
75b97c7a6d [supervisor] tasks support 2020-10-14 11:14:31 +02:00
Christian Weichel
77f8c93eb4 [ws-sync] Add shiftfs module loader for user-namespaced workspaces 2020-10-14 11:07:38 +02:00
Christian Weichel
16cb352b5d [ws-manager] Apply feature flags only once if specified multiple times
There's no guarantee that a ws-manager client will list a feature flag
only once in a `StartWorkspaceRequest`. In fact, the combination of the
`GITPOD_DEFAULT_FEATURE_FLAGS` and a user's persistent feature flags
can lead to duplicate FFs being sent by server. This change makes
ws-manager robust against such cases.
2020-10-13 11:10:53 +02:00
Christian Weichel
2f5cca3ff0 [ws-manager] Provide user namespacing ability using a feature flag 2020-10-13 11:10:53 +02:00
Christian Weichel
3a6587470a [supervisor] Directly support newuid/newgidmap CLI 2020-10-13 11:10:53 +02:00
Christian Weichel
a494eb7cff [ws-manager-node] Add uidmapper canary support 2020-10-13 11:10:53 +02:00
Christian Weichel
dad545d10a [ws-manager-node] Make workspace dispatch more widely available
by moving it from `resourcegov` to its own `dispatch` package. This way
we can reuse the dispatch for serving the uidmapper canary.
2020-10-13 11:10:53 +02:00
Christian Weichel
285edb4c7b [go] go mod tidy all components 2020-10-13 11:10:53 +02:00
Christian Weichel
1a509f2f23 [supervisor] Add ws-manager-node IWH to support triggering uid mappings 2020-10-13 11:10:53 +02:00
Christian Weichel
8fd01747dd [content-service] Update Google API package to work with latest gRPC 2020-10-13 11:10:53 +02:00
Christian Weichel
63d6f8fb3f [ws-scheduler] go mod tidy 2020-10-13 11:10:53 +02:00
Christian Weichel
e64b94c844 [ws-manager-node] Use Gitpod CRI instead of containerd directly 2020-10-13 11:10:53 +02:00
Christian Weichel
ac71492b6e [cri] Move cri from ws-sync to common-go for reuse in ws-manager-node 2020-10-13 11:10:53 +02:00
Anton Kosyakov
d8f3229b0a integrate supervisor into code 2020-10-12 13:00:29 +02:00
Anton Kosyakov
fbfdb1f147 enable the supervisor frontend to control when to start the ide frontend 2020-10-12 13:00:29 +02:00
Anton Kosyakov
1a1730847c support integration of the supervisor frontend into the IDE top window 2020-10-10 14:09:04 +02:00
Anton Kosyakov
758ccbe50d fix #1954: prevent multi confirmation dialogs on beforeunload event 2020-10-07 13:19:37 +02:00
Anton Kosyakov
32a4d7a961 add ide settings permission and enable it for devops role 2020-10-07 09:38:02 +02:00
Anton Kosyakov
114dc9d361 [supervisor/theia] fix #1945: allow IDE window to notify the supervisor window about state changes 2020-10-05 16:09:02 +02:00
Anton Kosyakov
1bb8623ac5 [supervisor/frontend] ensure that supervisor returns true for ready checks 2020-10-05 16:09:02 +02:00
Anton Kosyakov
45354a55ab [theia] don't stop listen to port changes if the last window was closed
Otherwise a new window won't receive notifications anymore.
2020-10-05 16:09:02 +02:00