2560 Commits

Author SHA1 Message Date
Jan Keromnes
2d443923f2 [server] Restrict snapshot access based on repository access
Also refactor:
- Simplify GuardedSnapshot.workspace
- WorkspaceLogAccessGuard → RepositoryResourceGuard
- RepositoryService.canAccessHeadlessLogs → RepositoryProvider.hasReadAccess
2022-02-21 15:47:01 +05:30
Cornelius A. Ludmann
1e5962dfb8 [installer] Add disableDefinitelyGp config option
/werft no-preview
2022-02-21 14:50:01 +05:30
Pudong Zheng
85cda2bd1e [ws-manager] fix incorrect status when image pull is open 2022-02-21 14:11:00 +05:30
Cornelius A. Ludmann
6884789166 [installer] Add missing nil check for experimental ws-daemon config
/werft no-preview
2022-02-20 21:00:00 +05:30
Pudong Zheng
64cc14ee1a Fixes incorrect podSelectorLabels with workspace 2022-02-20 20:59:00 +05:30
Pavel Tumik
f41c652a84 [ws-manager] startWorkspace: properly handle edge cases when pod fails to start 2022-02-18 19:59:58 +05:30
Manuel Alejandro de Brito Fontes
a0454c3ccb [ws-manager] Wait for workspace pod to be ready 2022-02-18 19:59:58 +05:30
Christian Weichel
6f8bbba2d4 [installer] Remove default workspace template 2022-02-18 15:21:58 +05:30
Pudong Zheng
26e277768f Fix dotfiles permission 2022-02-18 09:56:58 +01:00
jakobhero
9a4492ef9c include anonymous ID in server-side tracking where possible 2022-02-18 09:51:58 +01:00
Alex Tugarev
64973296a4 [server] add cpu profiler
use: kill -s SIGUSR1 <pid>
2022-02-17 17:40:57 +01:00
Christian Weichel
70e1da29cf [supervisor] Fix dotfile installation 2022-02-17 16:05:57 +01:00
Gero Posmyk-Leinemann
f35571976f [bridge] Binding for PreparingUpdateEmulator 2022-02-17 16:03:57 +01:00
utam0k
572baded7d nsinsider: Match the usage of nsinsider to the current codebase. 2022-02-17 14:53:57 +01:00
Gero Posmyk-Leinemann
8c6d938de0 [bridge] Fix PreparingUpdateEmulator initialization 2022-02-17 13:42:57 +01:00
Tarun Pothulapati
5f6114c282 telemetry: add more fields to data
Fixes https://github.com/gitpod-io/gitpod/issues/7866

This PR updates the `installation-admin-controller` to also retrieve
more data to send with telemetry. These are not part of the
`installationAdminDb` as we do not want to store this in the database
but lazily retrieve whenever a request is sent to `/data` endpoint
of the `installation-admin` express app unlike the `uuid` and settings
which need to be stored and updated.

The following fields are added:
- `totalUsers` : specifies the total number of users in the instance
- `totalWorkspaces`: specifies the total number of **regular** workspaces in the instance
- `totalInstances`: specifies the total number of **regular** workspace instances in the gitpod instance

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-02-17 12:08:57 +01:00
Gero Posmyk-Leinemann
a3d1b614f8 [ws-manager-bridge] Emulate InstanceUpdates for 'Preparing' phase to decouple messagebus 2022-02-17 11:43:57 +01:00
Gero Posmyk-Leinemann
3179adc802 [ws-manager-bridge] Fix logging/metrics errors 2022-02-17 11:43:57 +01:00
Gero Posmyk-Leinemann
feb7907da1 [ws-manager-bridge] Make non-governing bridges distribute updates locally 2022-02-17 11:43:57 +01:00
Gero Posmyk-Leinemann
ddaea0e1c2 [messagebus] Remove shovel config, and all non-local (or outdated) exchanges 2022-02-17 11:43:57 +01:00
Cornelius A. Ludmann
064837a9d4 [installer] Add MINIO_SKIP_CLIENT=yes to minio
This skips MinIO client configuration in the minio container. The client configuration leads to a crash loop on air-gap installations and since we don't use the minio client in Gitpod we simply skip the client configuration.

/werft no-preview
2022-02-17 10:50:57 +01:00
Pudong Zheng
ce70183fe2 [supervisor] remove unneed "no child process" check 2022-02-17 09:14:57 +01:00
Pudong Zheng
212e8b198a remove unneed reaper in supervisor run 2022-02-17 09:14:57 +01:00
Alex Tugarev
e205b485c3 [server] add basic support for BitBucket Server 2022-02-16 21:04:56 +01:00
Anton Kosyakov
0f95d44035 jb: enable debug flow for backend plugin 2022-02-16 18:35:56 +01:00
Gero Posmyk-Leinemann
e6e1804884 [dashboard] Ensure we fetch IDEOptions onload + onNewInstance 2022-02-16 17:31:56 +01:00
Anton Kosyakov
8f33d27756 [jb] clarify to install release not EAP gateway 2022-02-16 17:02:56 +01:00
Thomas Schubart
bf1100bc2a Update readme 2022-02-15 19:57:55 +01:00
Thomas Schubart
4f9e294b8a Add overview of namespaces 2022-02-15 19:57:55 +01:00
utam0k
9b630550a6 docs: Add a diagram of the worksapce architecture to the README.md 2022-02-15 19:57:55 +01:00
Alex Tugarev
236523ee1c [server] disable perMessageDeflate on websockets
... which should improve memory usage.
2022-02-15 16:33:55 +01:00
Filip Troníček
08d0c6c89d Bump Node version for building VS Code
- Some cleanup 🧹
2022-02-15 15:52:55 +01:00
Gero Posmyk-Leinemann
544862b9e0 [protocol] Fix toPermissionSet 2022-02-15 13:49:36 +01:00
akosyakov
40d92d58c3 jb-gw: wrap start hint comment if it does not fit 2022-02-15 13:47:36 +01:00
akosyakov
43928ae6b9 jb-gw: consolidate welcome and recent screens 2022-02-15 12:30:36 +01:00
Jan Keromnes
bb9474a456 [server] Order suggested repository URLs case-insensitively 2022-02-15 11:08:36 +01:00
Gero Posmyk-Leinemann
caa8a23300 [ws-manager-api, protocol] Slight refactor of cluster selection
1. Generalized cluster selection for "HasPermission" AdmissionConstraints
 Before the "constraintNewWorkspaceCluster" was seen as special case, that also was too general. This way it's straight forward to extend to other permissions

 2. Separated "cluster authorization" into a separate Constraint which is applied to all ClusterSets. Before the authoritzation was more an optimization of the cluster precedence
2022-02-15 10:37:36 +01:00
Gero Posmyk-Leinemann
ec35e4f86b [protocol, server] Move "toPermissionSet" into protocol 2022-02-15 10:37:36 +01:00
Gero Posmyk-Leinemann
ddc7aaa72c Revert "[server, db] AuthProviderEntry: Introduce oauthRevision to avoid repeated materialization of encrypted data"
This reverts commit 07e013ecc2808240b768710886ff52fac0f921bd.
2022-02-14 20:35:35 +01:00
Cornelius A. Ludmann
58dff456b0 Move /installer to /components/installer 2022-02-14 18:42:35 +01:00
Jan Koehnlein
f8e3369bc9 prevent users from deleting their login auth provider 2022-02-14 17:52:36 +01:00
Gero Posmyk-Leinemann
bcf031498e Revert "Create an index for contextURL column"
This reverts commit e0f7bfe976924005a4591ed9d3eb9e919111336a.
2022-02-14 17:51:35 +01:00
Gero Posmyk-Leinemann
4feee36008 [server] Instead of FOLLOWS_FROM, enhance notifications with clientMetadata directly 2022-02-14 16:17:35 +01:00
Gero Posmyk-Leinemann
24551594b9 [server] tracing: Avoid using FOLLOWS_FROM references due to lots of errors 2022-02-14 16:17:35 +01:00
Gero Posmyk-Leinemann
087d569306 [server] Trace userAgent 2022-02-14 16:17:35 +01:00
Christian Weichel
734a41e273 [content-service] Don't let composite initializer swallow errors 2022-02-14 16:16:35 +01:00
Gero Posmyk-Leinemann
c0bbf911db [dashboard, ws-proxy, supervisor] Break potential DDOS cycle by disabling autostart
When triggered:
     a) inFrame or
     b) when redirect from IDE url (by ws-proxy)
2022-02-14 11:06:35 +01:00
Thomas Schubart
4af0e0dfb4 Ensure docker in workspace works with fuse 2022-02-14 10:14:35 +01:00
Alex Tugarev
c4b09831a8 [server/ide-config] update only, if file was modified
... but ignore frequent file accesses.
2022-02-14 09:34:35 +01:00
Pudong Zheng
43c2767909 [server] only resolve image by content changed or interval 2022-02-14 09:34:35 +01:00