43 Commits

Author SHA1 Message Date
Pudong Zheng
23a8fee3c1 clean up deprecated server-ide-config 2023-02-03 10:01:41 +01:00
Gero Posmyk-Leinemann
06c91990e2 [server, installer] Make admin-login-secret configurable (new default: not set) 2023-02-02 11:53:40 +01:00
Gero Posmyk-Leinemann
11caa55346 [installer] Replace flag withoutWorkspaceComponents with 'Kind != "Full"' 2023-02-02 11:17:40 +01:00
Milan Pavlik
86024e436e [server] Add config for interacting with spicedb 2023-01-31 12:17:38 +01:00
Gero Posmyk-Leinemann
dea13072e9 [server] Add config.admin.loginKey 2023-01-20 11:27:27 +01:00
Alex Tugarev
682eb3d14e [installer] allow ingress from c/iam to c/server
A dedicated service host will be exposed internally to the IAM component.
2023-01-03 12:10:42 +01:00
Wouter Verlaek
b1d53399e7 Experimental app cluster without ws components
Workspace image builds

Update golden output

Deploy ws-manager tls secret in webapp

Remove ws-manager secrets

Update golden outputs

Enable movedImageBuilder by default

Add wsmanager tls to server if not meta install

Update output.golden

Install ws-proxy in meta

Update golden

Move wsproxy to IDE objs

Create experimental flag

Move ws-proxy to idecomponents

Remove ws-manager TLS cert from ws-proxy

skipSelf if WithoutWorkspaceComponents enabled

Fix ws-proxy config
2022-12-13 16:12:23 -03:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1 [installer] manually set allowPrivilegeEscalation to false
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.

This also helps us future proof on any behaviour changes around
this.

Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Milan Pavlik
6f0deca146 [server] Configure PAT signing key 2022-11-30 05:30:59 -03:00
Milan Pavlik
f5dc3d8334 [server] Remove createSubscriptionOnUsage feature flag 2022-11-21 05:13:50 -03:00
Manuel Alejandro de Brito Fontes
def55ee7ba Add option to add authentication to Jaeger and custom tags 2022-10-11 13:51:26 +02:00
Andrew Farries
f2ec516013 [installer] Add liveness probe for server
Add a liveness probe for server that fails if the nodejs event loop lag
exceeds a given threshold.
2022-09-22 16:10:23 +02:00
Simon Emms
53932cef34 [installer]: set the server URLs to the FQDN and add no_grpc_proxy envvar
The @grpc/grpc-node package does not support wildcards in the no_proxy
envvar. Add the FQDN's for the components that the server calls to the
no_grpc_proxy envvar so that these calls are not proxied
2022-09-13 12:38:14 +02:00
Sven Efftinge
79b75ab4d5 Add phone verification 2022-08-29 09:36:13 +02:00
Simon Emms
2fd3dd3586 [installer]: remove the custom labels from the selector labels 2022-08-09 04:16:53 -03:00
Manuel Alejandro de Brito Fontes
14095f470b Refactor configuration of localhost address, metric and debug ports 2022-07-23 11:19:18 -03:00
Thomas Schubart
88e5beb8d6 [bridge] Regularly check for class updates 2022-07-06 23:15:53 +05:30
Simon Emms
8fad588e6b [installer]: add customization functions to components 2022-06-24 17:02:33 +05:30
Milan Pavlik
58a9ebbe3f [experiments] Configure ConfigCat SDK through installer 2022-06-24 15:28:33 +05:30
Jan Keromnes
b93288865e [server] Make Stripe usage-based product price IDs configurable 2022-06-20 14:52:29 +05:30
Andrew Farries
f3680fe1a9 Configure server to use stripe secret 2022-06-13 21:32:23 +05:30
Jan Keromnes
92e2e72e2c [server][dashboard] Add a Stripe settings secret 2022-05-31 13:40:49 +05:30
Andrew Farries
43d98b386d Make server use WebappTracingEnv
Rather than `WorkspaceTracingEnv`.
2022-05-11 13:25:26 +05:30
Andrew Farries
7363937d54 Rename TracingEnv to WorkspaceTracingEnv 2022-05-11 13:25:26 +05:30
Gero Posmyk-Leinemann
d90e6ab4a7 [installer] Fix server GitHub app cert mount 2022-05-06 13:17:21 +05:30
Andrew Farries
252d715c5e Add server vol and mount for github app secret 2022-05-05 20:28:21 +05:30
Andrew Farries
580772ade3 Off topic: Make variable local to block 2022-05-05 20:28:21 +05:30
Gero Posmyk-Leinemann
e955e75f59 [installer] Minor alignments + fixes 2022-05-05 13:16:20 +05:30
Andrew Farries
2093016330 [installer] Make chargbee configurable for server 2022-05-04 14:29:20 +05:30
Andrew Farries
f350f5455f Rename UsePodAffinity to UsePodAntiAffinity 2022-04-29 19:17:15 +05:30
Andrew Farries
bc06510320 Use pod anti-affinity for server if flag is set 2022-04-28 20:04:14 +05:30
Andrew Farries
674db36fbb Make resources configurable for all components
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Christian Weichel
96b2a36540 [ws-daemon] Support GIT_SSL_CAINFO 2022-04-28 18:47:14 +05:30
Andrew Farries
0ae3201a7e Set Replicas for multiple components
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Simon Emms
948ae5192b [installer]: add DropImageRepo functionality to RepoName
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Andrew Farries
3fdd2d9754 Rename common.Affinity to NodeAffinity 2022-04-20 02:48:32 +05:30
Gero Posmyk-Leinemann
92641cacc6 [installer] Add missing ports to server, ws-manager-bridge 2022-04-14 21:00:27 +05:30
Christian Weichel
f2738568e3 [installer] Add custom CA secret support 2022-04-11 22:39:24 +05:30
Gero Posmyk-Leinemann
21263bd4e7 [installer] Introduce metadata.shortname 2022-04-11 21:03:24 +05:30
Simon Emms
840d29a151 [installer]: add annotation to make DB resources restart if changes 2022-03-07 17:38:14 +05:30
Simon Emms
c708e63610 [installer]: allow Installer to specify licensor type
Defaults to "gitpod" and allows "replicated". This is defined
by the secret
2022-02-25 17:24:04 +05:30
Simon Emms
4820e804bb [installer]: move to /install 2022-02-22 17:03:02 +05:30