Manuel Alejandro de Brito Fontes
692963d2e9
Update containerd and buildkit go modules ( #19376 )
...
* Update containerd and buildkit go modules
* Fix build
* Fix typecheck errors
---------
Co-authored-by: Thomas Schubart <thomas@gitpod.io>
2024-02-01 20:22:44 +02:00
Pudong
10fe5b9699
[sshgateway] use ssh CA to auth ( #19147 )
...
* [sshgateway] use ssh CA to auth
* change name
* add error log
* fix
* mark volume optional
* [installer] validate ssh-ca secret
* Revert "[installer] validate ssh-ca secret"
This reverts commit ca6ede78a7b5a720fd315eca32eb277cb5063069.
We must support the scenario where the installer has the secret, but, it is not in the cluster yet.
---------
Co-authored-by: Kyle Brennan <kyle@gitpod.io>
2023-11-30 19:17:08 +02:00
Manuel Alejandro de Brito Fontes
e4a118c410
We only have CRDs now ( #19053 )
2023-11-10 13:46:48 +02:00
Manuel Alejandro de Brito Fontes
5791909dc4
[ws-proxy] Implement graceful shutdown ( #18583 )
...
* [ws-proxy] Implement graceful shutdown
* Align termination grace period with http shutdown timeout
* Address feedback
* Configure http server timeouts
2023-08-28 18:25:54 +02:00
Manuel Alejandro de Brito Fontes
f27b16ee31
Add support for pod disruption budget ( #18547 )
2023-08-25 22:06:51 +02:00
Thomas Schubart
460875058f
[ws-manager-mk2] Remove ws-manager-mk2 from experimental section ( #17848 )
...
* [wsman-mk2] Remove ws-manager-mk2 from experimental
* [ws-daemon] Remove readiness check for service
* [ws-daemon] Use mk2 working area only
* [preview] Remove mk2 customization
* [installer] Remove constant
2023-06-06 22:56:57 +08:00
Thomas Schubart
2fb046fc1c
[wsman-mk2] Remove ws-manager-mk1 ( #17738 )
2023-05-25 17:05:59 +08:00
Thomas Schubart
476d0929e7
Seperate mk1 and mk2 deployment ( #17201 )
...
* [installer] Only deploy one ws-manager
* [installer] Adapt image builder
* [installer] Update ws-proxy
* [installer] Review comment
2023-04-14 14:22:53 +02:00
Manuel Alejandro de Brito Fontes
cb2c14857f
Configure registry-facade secrets without using external dependencies ( #17027 )
...
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-27 10:27:25 +02:00
Manuel Alejandro de Brito Fontes
5b30eb5b8c
Remove unused caCertSecret ( #16793 )
...
* Add trust.cert-manager.io for to bundle CA certificates
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
* Configure CA volume and volumemount in components
* Update ws-manager golden files
* Deploy trust manager in preview
* Remove duplicated volume
* Update installer golden files
* Generate a bundle only for registry-facade
* Update golden files
* Fix initcontainer volume mounts
* Update golden files
* Fix registry-facade certificate
* Update golden files
* Disable skip_verify
* Enable force conflict with apply server side
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
* Avoid random werft namespace errors
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
---------
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-21 11:44:13 +01:00
Manuel Alejandro de Brito Fontes
97f8d4b802
Ensure the spread of pods on different nodes ( #16810 )
...
* Ensure the spread of pods on different nodes
* Replace string ClusterFirst
* Replace Always string in DNSPolicy
* Fix registry-facade affinity
* Fix ws-proxy affinity
* Address feedback
* Update golden files
2023-03-15 10:21:07 +01:00
Manuel Alejandro de Brito Fontes
b1c7959899
Remove scenario assuming workspace clusters run in GCP
2023-01-30 13:52:38 +01:00
Thomas Schubart
b75c1251bb
[installer] Experimental UseWorkspaceManagerMk2
2023-01-24 19:22:32 +01:00
Wouter Verlaek
0d9b56d8fa
Cleanup withoutWorkspaceComponents flag usage
2023-01-23 15:37:32 +01:00
Thomas Schubart
53b5de84da
Fix build
2023-01-23 14:14:30 +01:00
Christian Weichel
a3f8d86f3b
[ws-manager-mk2] Fix build after rebase
2023-01-23 14:14:30 +01:00
Christian Weichel
8caac1cd5b
[ws-manager-mk2] Integrate into installer
2023-01-23 14:14:30 +01:00
Christian Weichel
9992d4fa32
[ws-proxy] Support workspace CRD
2023-01-23 14:14:30 +01:00
Anton Kosyakov
959e584b55
[ws-proxy] support ports location for debug workspace
...
It is a prerequisite to https://github.com/gitpod-io/gitpod/pull/15795 . Based on Pudong's work from https://github.com/gitpod-io/gitpod/pull/15687 .
Co-authored-by: Pudong Zheng <tianshi8650@gmail.com>
2023-01-20 09:44:27 +01:00
Manuel Alejandro de Brito Fontes
9a4c437efd
Fix ws-proxy service ports
2023-01-18 18:45:26 +01:00
Manuel Alejandro de Brito Fontes
28be549be0
Change services node label
2023-01-18 18:45:26 +01:00
Anton Kosyakov
697696029b
[gp-run] experimental workspace config debug mode
...
Co-authored-by: Anton Kosyakov <anton@gitpod.io>
Co-authored-by: Victor Nogueira <victor@gitpod.io>
Co-authored-by: Andrea Falzetti <andrea@gitpod.io>
2023-01-09 06:32:48 +01:00
Wouter Verlaek
b1d53399e7
Experimental app cluster without ws components
...
Workspace image builds
Update golden output
Deploy ws-manager tls secret in webapp
Remove ws-manager secrets
Update golden outputs
Enable movedImageBuilder by default
Add wsmanager tls to server if not meta install
Update output.golden
Install ws-proxy in meta
Update golden
Move wsproxy to IDE objs
Create experimental flag
Move ws-proxy to idecomponents
Remove ws-manager TLS cert from ws-proxy
skipSelf if WithoutWorkspaceComponents enabled
Fix ws-proxy config
2022-12-13 16:12:23 -03:00
Christian Weichel
478a75e744
Switch license to AGPL
2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1
[installer] manually set allowPrivilegeEscalation to false
...
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.
This also helps us future proof on any behaviour changes around
this.
Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
mustard
8b7242cf1c
[installer] make installer full support installation shorname
2022-10-23 15:51:38 +02:00
Manuel Alejandro de Brito Fontes
def55ee7ba
Add option to add authentication to Jaeger and custom tags
2022-10-11 13:51:26 +02:00
Simon Emms
2f03c004a7
[installer]: explicitly set all host addresses to 0.0.0.0
2022-09-13 12:38:14 +02:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9
Fix typecheck errors
2022-08-23 08:18:39 +02:00
Manuel Alejandro de Brito Fontes
43b7cfb0aa
[installer] Fix lint issue
2022-08-10 17:28:54 +02:00
Simon Emms
2fd3dd3586
[installer]: remove the custom labels from the selector labels
2022-08-09 04:16:53 -03:00
Manuel Alejandro de Brito Fontes
14095f470b
Refactor configuration of localhost address, metric and debug ports
2022-07-23 11:19:18 -03:00
Pavel Tumik
0fe39e89c6
[installer] improve ws-proxy configmap
2022-07-13 07:09:59 +02:00
Simon Emms
8fad588e6b
[installer]: add customization functions to components
2022-06-24 17:02:33 +05:30
Tarun Pothulapati
f92e0ad99a
[installer] add customCACert volume to ws-proxy
...
This PR adds `customCACert` volume to `ws-proxy`
Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-06-23 23:41:32 +05:30
Pudong Zheng
c8794637a3
[ws-proxy] use ide-proxy to serve blobserv
2022-06-10 02:47:19 +05:30
Mads Hartmann
7b68fb4a27
Use slices instead of maps for service ports to control ordering
2022-05-30 20:14:48 +05:30
Pudong Zheng
f797fdbac1
[ws-proxy] Add missing kube-rbac-proxy rolebinding
2022-05-23 21:50:37 +05:30
Pudong Zheng
14646e04f2
Enabled analytics for ws-proxy
2022-05-19 12:06:33 +05:30
Andrew Farries
7363937d54
Rename TracingEnv to WorkspaceTracingEnv
2022-05-11 13:25:26 +05:30
Andrew Farries
674db36fbb
Make resources configurable for all components
...
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Andrew Farries
0ae3201a7e
Set Replicas for multiple components
...
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Simon Emms
948ae5192b
[installer]: add DropImageRepo functionality to RepoName
...
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Andrew Farries
3fdd2d9754
Rename common.Affinity to NodeAffinity
2022-04-20 02:48:32 +05:30
Manuel Alejandro de Brito Fontes
baa2a9af12
[installer] Configure-readiness-probes.patch
2022-03-29 22:20:13 +05:30
Nandaja Varma
4b35a6f8ec
[installer] set the ServiceType as LB for ws-proxy
2022-03-29 13:26:12 +05:30
Manuel Alejandro de Brito Fontes
709583fbc5
[ws-proxy] Comfigure kube-rbac
2022-03-22 16:06:28 +05:30
Manuel Alejandro de Brito Fontes
89105f8628
Update signatures due to k8s v1.23 changes
2022-03-03 18:46:10 +05:30
Manuel Alejandro de Brito Fontes
0943c1df9e
[installer] Ensure ws-proxy is scheduled in different nodes
2022-02-22 23:43:02 +05:30
Simon Emms
4820e804bb
[installer]: move to /install
2022-02-22 17:03:02 +05:30