55 Commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules (#19376)
* Update containerd and buildkit go modules

* Fix build

* Fix typecheck errors

---------

Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Huiwen
f4999b8c14
[installer] update log level of spicedb (#19339) 2024-01-19 10:54:56 +02:00
Gero Posmyk-Leinemann
f372e811b6
[spicedb] Change readiness probe to unblock startup (#19058) 2023-11-10 17:18:48 +02:00
Gero Posmyk-Leinemann
d653f98f42
[spicedb] Apply migrations in the ArgoCD PreSync hook (#18911) 2023-10-12 14:35:20 +03:00
Gero Posmyk-Leinemann
d2adcd8e87
[spicedb] Fix application of migrations with ArgoCD (#18910)
* [spicedb] Make sure we remove the migrations job after execution

* [server] Bump RelationshipUpdater.version to 5

Reason: to trigger re-applying of all potentially broken "shared" relationships

* [spicedb] Bump version of generated types according to docker image used (v.1.25.0)
2023-10-12 11:01:20 +03:00
Sven Efftinge
29a547af85
[spicedb] update spicedb (#18905) 2023-10-10 20:14:18 +03:00
Sven Efftinge
841b616c34
[spicedb] fix stale connection handling (#18631) 2023-09-01 12:53:58 +02:00
Gero Posmyk-Leinemann
a8a67cc28f
[server] Reconnect to spicedb without waiting 2 mins (+ fail on missing config + client call metrics) (#18570) 2023-08-24 15:10:50 +02:00
Sven Efftinge
f7432450b6
[spicedb] rolling update when schema changes (#18561) 2023-08-21 16:54:47 +02:00
Huiwen
700b6050ba
Make db waiter to wait latest migration (#18455)
* Make db waiter to wait latest migration

* Move generate out of build

* Remove conn require

* Allow to ignore migration check

* Use shell

* Use fail and remote useless log

* Generate service-waiter txt when create migration

* Revert "Generate service-waiter txt when create migration"

This reverts commit 11c12b83544a448f9784f8aa94cdfd69cfb15f45.

* Add log
2023-08-10 13:51:36 +02:00
Milan Pavlik
f59c860a32
[spicedb] Add dedicated component (#18266)
* [server] Use relative path for spicedb schema

* Add spicedb component with schema

* fix

* fix

* Fix spicedb schema location

* fix

* Fix

* fix

---------

Co-authored-by: Alejandro de Brito Fontes <aledbf@gmail.com>
2023-07-12 22:38:29 +08:00
Sven Efftinge
86647b5b8a
[spicedb] added installation and admin permission (#18179) 2023-07-07 19:57:24 +08:00
Sven Efftinge
3e215bcd61
[server] more org service (#18174) 2023-07-06 21:07:23 +08:00
Sven Efftinge
66e0cf2946
[server] more project service (#18157)
- more testing
- throw 404 instead of undefined
- more permission checks
2023-07-04 20:35:21 +08:00
Sven Efftinge
0aff5b1c77
[server] perm-check and test project service (#18111) 2023-07-03 23:34:20 +08:00
Sven Efftinge
2920a3b6c7
[server] organization service (#18099) 2023-07-03 22:20:20 +08:00
Milan Pavlik
6ba6c776c9
[perms] Implement organization delete (#18096)
* [perms] Compose org updates

* Fix

* fix

* [perms] Implement organization delete

* fix

* fix

* fix

* Fix
2023-06-29 03:02:46 +08:00
Milan Pavlik
49226d8e15
[perms] Read/write billing - WEB-541, WEB-542, WEB-543, WEB-544, WEB-545, WEB-546, WEB-547 (#18056)
* [perms] Read/write billing

* fix
2023-06-26 22:34:50 +08:00
Milan Pavlik
d8f93f25bf
[spicedb] Upgrade to 1.22.2 (#18054) 2023-06-26 18:36:50 +08:00
Gero Posmyk-Leinemann
427ed104de
[server] Guard org authProvider-related API calls centralizedPermissions (#18041)
* [spicedb] Introduce read-/write_git_provider permissions

* [server] Guard org authProvider-related API calls centralizedPermissions
2023-06-26 17:54:49 +08:00
Milan Pavlik
50ba64bbb7
[perms] Check & Update relationships on removeTeamMember (#18008) 2023-06-23 21:25:13 +08:00
Milan Pavlik
f8cfaaf6f6
[perms] Everyone has member in an org, plus they can have owner (#18021)
* [perms] Everyone has member in an org, plus they can have owner

* fix

* fix
2023-06-23 15:35:13 +08:00
Alex Tugarev
d53077d0ce
[perms] check for read/write permissions on orgs – WEB-512 (#18016)
* [perms] adding permissions for getOrgSettings

* [perms] check for read/write permissions of org
2023-06-22 22:26:12 +08:00
Milan Pavlik
45d65ce24d
[spicedb] Initial schema with projects (#17973)
* [spicedb] Initial schema with projects

* fix

* Fix

* fix

* Fix

* Fix
2023-06-19 23:09:10 +08:00
Milan Pavlik
8fd4c4f756
[spicedb] Upgrade to v1.22.0 WEB-412 (#17937)
* [spicedb] Upgrade to 1.21

* v1.22.0
2023-06-19 17:38:09 +08:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes (#16810)
* Ensure the spread of pods on different nodes

* Replace string ClusterFirst

* Replace Always string in DNSPolicy

* Fix registry-facade affinity

* Fix ws-proxy affinity

* Address feedback

* Update golden files
2023-03-15 10:21:07 +01:00
Milan Pavlik
417ca154f7
[installer] Remove cloud-sql-global (#16452) 2023-02-27 13:43:57 +01:00
Milan Pavlik
f0a22379df [spicedb] Bind metrics server to loopback 2023-02-08 11:13:46 +01:00
Milan Pavlik
849334dc5c [spicedb] Add kube-rbac-proxy to expose metrics endpoint 2023-02-07 15:36:45 +01:00
Milan Pavlik
67f9bd1222 [spicedb] Adjust readiness probe frequency 2023-02-06 18:14:44 +01:00
Milan Pavlik
79691ad53b [spicedb] Log level info 2023-02-06 18:13:44 +01:00
Milan Pavlik
f034b8aca1 [spicedb] Actually enable running dispatch server 2023-02-06 14:52:44 +01:00
Milan Pavlik
fa83b04c01 [spicedb] Enable ingress policy for dispatch endpoint, from sibling 2023-02-06 14:15:44 +01:00
Milan Pavlik
cdc4222894 [spicedb] Add job TTL to migrations 2023-02-03 15:03:41 +01:00
Milan Pavlik
2958f9181c [spicedb] Parametrize dispatching 2023-02-02 11:21:40 +01:00
Milan Pavlik
eb37c80c46 [spicedb] Require secretRef config 2023-02-02 11:20:40 +01:00
Milan Pavlik
c75e4883d0 [spicedb] Basic organizations model 2023-02-01 10:11:39 +01:00
Milan Pavlik
98d9457959 [spicedb] Add role & rolebinding to watch endpoints 2023-02-01 09:05:39 +01:00
Milan Pavlik
86024e436e [server] Add config for interacting with spicedb 2023-01-31 12:17:38 +01:00
Milan Pavlik
057494e7b6 [spicedb] Add github action to validate schema 2023-01-31 11:21:38 +01:00
Milan Pavlik
b9eb2168a2 [spicedb] Enable dispatching 2023-01-30 17:28:38 +01:00
Milan Pavlik
ed914b90b0 [spicedb] Bootstrap schema 2023-01-30 12:39:37 +01:00
Milan Pavlik
e855081174 [spicedb] Remove TTL from migrations job 2023-01-30 12:36:37 +01:00
Milan Pavlik
e603f7b269 [spicedb] Configure preshared key 2023-01-30 12:05:37 +01:00
Milan Pavlik
70a3b244b2 [spicedb] Fix migrations service account name 2023-01-27 13:51:34 +01:00
Milan Pavlik
605eee48c3 [spicedb] Remove duplicate DB_HOST env var for db-waiter 2023-01-27 12:43:34 +01:00
Milan Pavlik
23aabc24a9 [spicedb] Disable remote telemetry 2023-01-27 10:33:34 +01:00
Milan Pavlik
2072cf2e81 [spicedb] Add network policy 2023-01-27 09:54:34 +01:00
Milan Pavlik
6c955480da [spicedb] Fix env vars 2023-01-26 13:56:34 +01:00
Milan Pavlik
035f65957c [spicedb] Deploy in preview 2023-01-26 11:52:34 +01:00