Christian Weichel
cea44d76d4
[ws-daemon] Make compatible with Kubernetes v1.20.1
...
and remove the pod/service IP sources, as well as the TCP proxy
in the process. We deploy registry-facade as daemonSet, and don't
need those other rather complicated bits anymore.
2021-01-11 15:25:05 +01:00
Christian Weichel
72a120e0c8
Update Kubernetes client-go to v1.20.1
...
Fixes gitpod-io/gitpod#2689
2021-01-11 15:25:05 +01:00
Christian Weichel
ef66ca19a1
[supervisor] execve into ring3
2021-01-08 15:58:39 +01:00
ArthurSens
be14b4897a
Add golangci-linter and fixes most linting issues
...
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
2021-01-05 08:38:03 -03:00
Christian Weichel
b7dda84ad0
[license] Update license header from TypeFox GmbH to Gitpod GmbH
2021-01-04 15:12:02 +01:00
Cornelius A. Ludmann
74f3567c11
[ws-daemon] Add nil pointer guard in content initializer for prebuilds
2020-12-15 16:36:19 +01:00
Alex Tugarev
7eea67a8a1
[ws-daemon] don't fail if prebuilt is not found
2020-12-14 14:17:12 +01:00
Sven Efftinge
d0fc7eb84a
go mod updates
2020-12-10 11:53:43 +01:00
Christian Weichel
4760509b17
[content-initialiser] Improve logging and OWI association
2020-12-03 14:42:49 +01:00
Christian Weichel
4b919e1b31
[ws-daemon] Follow Prometheus naming best practices
2020-12-01 15:48:45 +01:00
Christian Weichel
712d1be698
[ws-daemon] Reintroduce the working_area_free_bytes metric
2020-11-30 17:58:38 +01:00
Christian Weichel
ced1e6ac69
[ws-daemon] Add readiness probe
2020-11-30 11:06:39 +01:00
Christian Weichel
4ac6416837
[ws-daemon] Unblock fixed host source
2020-11-27 18:22:32 +01:00
Christian Weichel
0184c98405
[registry-facade] Fix fixedIPSource
2020-11-27 17:43:34 +01:00
Christian Weichel
8d2002b57b
[ws-daemon] Make content initialiser properly shift UID/GIDs
...
avoids a race between "content ready" and supervisor
/werft https
2020-11-27 09:59:36 +01:00
Christian Weichel
a3e24f8e1e
[ws-daemon] Don't try to collect empty prebuild
2020-11-23 14:17:33 +01:00
Christian Weichel
86e2690270
[seccomp-profile] Allow setns
2020-11-19 10:02:01 +01:00
Christian Weichel
e89727f677
[ws-daemon] Fix snapshot and prebuild remote content init
2020-11-18 10:58:59 +01:00
Christian Weichel
7f04181aa9
[ws-daemon] Make IWS available before content is initialized
...
Fixes gitpod-io/gitpod#2188
2020-11-17 14:13:30 +01:00
Christian Weichel
5b13a358ed
[ws-daemon] Disable dynamic CPU limiting by default ( #2168 )
...
Fixes gitpod-io/gitpod#2163
/werft dynamic-cpu-limits
2020-11-16 12:32:33 +01:00
Christian Weichel
af411ca867
[ws-daemon] Use tar to unarchive backup instead of archive pkg
...
Fixes #2160
2020-11-12 11:05:41 +01:00
Christian Weichel
6e2e96e91d
[ws-daemon] Add workaround for containerd ErrNotFound issue
2020-11-12 08:52:35 +01:00
Christian Weichel
4bbf614979
[ws-daemon] Isolate content initialiser better
2020-11-11 12:00:31 +01:00
Christian Weichel
1343b7a915
[ws-daemon] Don't fail resource controller if cgroup doesn't exist
...
Fixes gitpod-io/gitpod#2149
2020-11-11 11:39:50 +01:00
Christian Weichel
8778574b98
[user-namespaces] Don't require privileged-ws permission anymore
...
with recent changes this feature is safe enough to no longer require
this permission.
2020-11-06 13:53:47 +01:00
Christian Weichel
b914e2df86
[ws-daemon] Allow user-namespaced ops only in user-namespaced workspaces
2020-11-05 08:08:32 +01:00
Christian Weichel
4dfe2e4521
[ws-daemon] Reduce dependency on deprecated syscall package
2020-11-05 08:08:32 +01:00
Christian Weichel
34cd879ded
[supervisor] Use runc's pivotRoot which properly unmounts the old root
2020-11-05 08:08:32 +01:00
Christian Weichel
c8d46111a6
[ws-daemon] Improve userns container preparation
2020-11-05 08:08:32 +01:00
Christian Weichel
2d692fef08
[ws-daemon] Support proc mount API
2020-11-05 08:08:32 +01:00
Christian Weichel
973750b4ac
[seccomp-profile] Allow more syscalls to supoprt rootless Docker
2020-11-04 16:06:12 +01:00
Anton Kosyakov
6b2643ba02
fix #2093 : don't redirect to blobserver if a req has query or fragment
2020-11-03 11:53:31 +01:00
Christian Weichel
33e89cbb69
[user namespaces] Fix userns seccomp profile
2020-10-28 08:46:58 +01:00
Christian Weichel
ecfa0b4ed6
[ws-daemon] Install custom seccomp profile for user namespaced workspace
2020-10-28 08:46:58 +01:00
Christian Weichel
92c9494a44
[registry-facade] Support daemonSet deployment to ease network load
...
/werft https=true
/werft ws-feature-flags=registry_facade
2020-10-26 08:51:38 +01:00
Christian Weichel
438c234bb2
[ws-daemon] Rename InWorkspaceHelper to more apt InWorkspaceService
...
and introduce rate limiting on that service to mimic the behaviour of
the former canaries.
2020-10-23 16:20:08 +02:00
Christian Weichel
4444675ce0
[user namespaces] Start IDE and terminals as gitpod user again
2020-10-23 16:20:08 +02:00
Christian Weichel
4a9c8f910e
[ws-daemon] Provide IWH through unix socket rather than canaries
2020-10-23 16:20:08 +02:00
Christian Weichel
5a7903b089
[supervisor] Introduce user-namespace rings
2020-10-23 16:20:08 +02:00
Christian Weichel
a6a84d0c93
[supervisor] Use SIGTERM instead of PreStop hook
2020-10-23 16:20:08 +02:00
Christian Weichel
4caab8cb07
[ws-daemon] Attempt to unmount shiftfs mark on teardown
2020-10-23 16:20:08 +02:00
Christian Weichel
16ae8cc5cf
[ws-sync] Provide shiftfs mark mount upon request
2020-10-23 16:20:08 +02:00
Christian Weichel
84be881306
[ws-daemon] Fix shiftfs-module-loader
2020-10-21 15:29:12 +02:00
Christian Weichel
2e3ec08811
[supervisor] Provide mock Gitpod API for testing
2020-10-21 11:42:31 +02:00
Christian Weichel
8d1664f81f
[ws-daemon] Search and replace ws-sync
...
This should have happened in #2003
/werft https=true
2020-10-19 10:26:18 +02:00
Christian Weichel
d1cca07a62
[supervisor] Repair BackupService for FWB
...
/werft https=true
2020-10-19 07:46:04 +02:00
Christian Weichel
af40898931
[ws-daemon] Support direct validation of helm chart produced config
2020-10-19 07:46:04 +02:00
Christian Weichel
75558809c7
[go] go mod tidy in all components
2020-10-19 07:46:04 +02:00
Christian Weichel
3cbfd6f191
[common-go] Move CRI to ws-daemon/container
2020-10-19 07:46:04 +02:00
Christian Weichel
7172d822c7
[ws-daemon] Fold ws-manager-node into ws-daemon
2020-10-19 07:46:04 +02:00