110 Commits

Author SHA1 Message Date
Sven Efftinge
3177900282 [installer] args to disable jobs 2023-02-13 17:16:18 +01:00
Sven Efftinge
181076af92 [server] disable long migrations via config 2023-02-13 16:14:18 +01:00
Pudong Zheng
23a8fee3c1 clean up deprecated server-ide-config 2023-02-03 10:01:41 +01:00
Gero Posmyk-Leinemann
06c91990e2 [server, installer] Make admin-login-secret configurable (new default: not set) 2023-02-02 11:53:40 +01:00
Gero Posmyk-Leinemann
11caa55346 [installer] Replace flag withoutWorkspaceComponents with 'Kind != "Full"' 2023-02-02 11:17:40 +01:00
Milan Pavlik
86024e436e [server] Add config for interacting with spicedb 2023-01-31 12:17:38 +01:00
Milan Pavlik
17e83b9985 [iam] Remove component 2023-01-23 17:33:31 +01:00
Wouter Verlaek
0d9b56d8fa Cleanup withoutWorkspaceComponents flag usage 2023-01-23 15:37:32 +01:00
Milan Pavlik
0aad145ad4 [public-api] Bind OIDC HTTP service to Public API 2023-01-23 15:24:30 +01:00
Wouter Verlaek
aa8c62b7e7 [server] Remove image builder address config 2023-01-23 11:58:31 +01:00
Gero Posmyk-Leinemann
49fe74463c [server] Config: Add showSetupModal (default: true) 2023-01-23 08:45:30 +01:00
Gero Posmyk-Leinemann
dea13072e9 [server] Add config.admin.loginKey 2023-01-20 11:27:27 +01:00
Andrew Farries
45f26df7aa [installer] Update server networkpolicy
Allow ingress from the public api server.
2023-01-10 20:52:50 +01:00
Alex Tugarev
682eb3d14e [installer] allow ingress from c/iam to c/server
A dedicated service host will be exposed internally to the IAM component.
2023-01-03 12:10:42 +01:00
Wouter Verlaek
b1d53399e7 Experimental app cluster without ws components
Workspace image builds

Update golden output

Deploy ws-manager tls secret in webapp

Remove ws-manager secrets

Update golden outputs

Enable movedImageBuilder by default

Add wsmanager tls to server if not meta install

Update output.golden

Install ws-proxy in meta

Update golden

Move wsproxy to IDE objs

Create experimental flag

Move ws-proxy to idecomponents

Remove ws-manager TLS cert from ws-proxy

skipSelf if WithoutWorkspaceComponents enabled

Fix ws-proxy config
2022-12-13 16:12:23 -03:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1 [installer] manually set allowPrivilegeEscalation to false
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.

This also helps us future proof on any behaviour changes around
this.

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Sven Efftinge
a96cb7bf36 [ws-classes] simplify workspace classes
simplified by
- removing user-level setting
- removing deprecation
- removing ws-class inheritence between ws sessions
2022-12-01 13:59:00 -03:00
Gero Posmyk-Leinemann
bafbaab329 [server, installer] Make PrebuildRateLimiter period configurable 2022-11-30 07:43:59 -03:00
Milan Pavlik
6f0deca146 [server] Configure PAT signing key 2022-11-30 05:30:59 -03:00
Milan Pavlik
f5dc3d8334 [server] Remove createSubscriptionOnUsage feature flag 2022-11-21 05:13:50 -03:00
Andrew Farries
eb64ee934d Reuse rolebinding and policy from server component 2022-11-16 10:39:45 +02:00
Andrew Farries
1c16027764 Reuse role from server component 2022-11-16 10:39:45 +02:00
Milan Pavlik
5743b9f4d1 [server] Run GC every 5 minutes, dedelete content of up to 100 chunks 2022-11-11 11:10:41 +02:00
Thomas Schubart
6e7cbfb18c [installer] Do not add protected secrets flag by default 2022-11-02 21:25:07 +01:00
Jan Keromnes
aedb5c4046 [installer][server] Clarify 'inactivityPeriodForRepos' by renaming it to '...InDays' 2022-10-26 18:49:41 +02:00
Jan Keromnes
af5311dcfe [installer] Actually add 'inactivityPeriodForRepos' to server configmap 2022-10-26 18:49:41 +02:00
Manuel Alejandro de Brito Fontes
def55ee7ba Add option to add authentication to Jaeger and custom tags 2022-10-11 13:51:26 +02:00
Kyle Brennan
0cd9c5d483 [installer] enable protected_secrets by default
Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2022-10-07 08:56:22 +02:00
Christian Weichel
9c7e7c356d [installer] Support enabling protected secrets 2022-09-30 15:07:31 +02:00
Pudong Zheng
481267b24f [server] decouple get ide config logic from server 2022-09-27 16:12:28 +02:00
Milan Pavlik
e6fc700b14 [server] Purge records older than 1 year from content deletion 2022-09-23 12:54:24 +02:00
Andrew Farries
f2ec516013 [installer] Add liveness probe for server
Add a liveness probe for server that fails if the nodejs event loop lag
exceeds a given threshold.
2022-09-22 16:10:23 +02:00
Andrew Farries
86d80e6d10 [installer] Set maximumEventLoopLag
Hard code the server setting added in the parent commit. If necessary,
this could become configurable (via an experimental config setting).
2022-09-22 16:10:23 +02:00
Pudong Zheng
0c63ab95de move ide config type define to ide-service-api 2022-09-21 11:18:22 +02:00
Milan Pavlik
480e97bd59 [server] Purge 5k instances at a time 2022-09-19 11:33:20 +02:00
Milan Pavlik
b589c6d463 [server] Purge workspaces which are older than 2 years 2022-09-16 13:39:17 +02:00
Gero Posmyk-Leinemann
a7fd1becd6 [server] Delete Workspaces & Workspace Instances after configured period 2022-09-15 15:27:16 +02:00
Simon Emms
53932cef34 [installer]: set the server URLs to the FQDN and add no_grpc_proxy envvar
The @grpc/grpc-node package does not support wildcards in the no_proxy
envvar. Add the FQDN's for the components that the server calls to the
no_grpc_proxy envvar so that these calls are not proxied
2022-09-13 12:38:14 +02:00
Anton Kosyakov
02457e39b8 [ide]: pin latest JB plugin version
since it's always built by main
2022-09-12 19:19:14 +02:00
Anton Kosyakov
bace8c3c5c [jb] split backend and plugin images 2022-09-12 11:21:13 +02:00
Sven Efftinge
79b75ab4d5 Add phone verification 2022-08-29 09:36:13 +02:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9 Fix typecheck errors 2022-08-23 08:18:39 +02:00
Simon Emms
2fd3dd3586 [installer]: remove the custom labels from the selector labels 2022-08-09 04:16:53 -03:00
Thomas Schubart
4b402429b1 Remove fixed resources 2022-08-04 06:57:48 -03:00
Nandaja Varma
ec2f934ad3 [installer] move workspaceImage out of experimental config 2022-07-27 04:40:21 -03:00
Thomas Schubart
ab8eb0b13b [installer] Extend workspace class info 2022-07-25 12:39:20 -03:00
Manuel Alejandro de Brito Fontes
14095f470b Refactor configuration of localhost address, metric and debug ports 2022-07-23 11:19:18 -03:00
Gero Posmyk-Leinemann
53e47b2c98 [server] Use WorkspaceClassesConfig 2022-07-21 05:10:16 -03:00
Thomas Schubart
4f6a5b576c Incorporate review feedback
- Use latest workspace instance to set workspace class
- Add more detailed configuration for workspace classes
- Make workspace classes configurable in installer
2022-07-21 05:10:16 -03:00