59 Commits

Author SHA1 Message Date
iQQBot
7137b3a8ba
[proxy] add security headers (#20970)
Co-authored-by: Ona <no-reply@ona.com>
2025-07-23 07:44:34 -04:00
iQQBot
301f1b73da
upgrade golang to 1.24.3 (#20846)
* upgrade golang to 1.24.3

* fix caddy

* update go debug

* fix non-constant format string in call to fmt Format method
2025-05-28 13:32:00 -04:00
Christian Weichel
337f8f3960
Bump golang.org/x/crypto (#20683)
* Bump golang.org/x/crypto

* Don't bump toolchain

* go mod tidy

* go mod tidy

* Fix proxy build
2025-03-21 06:49:50 -04:00
Kyle Brennan
aaa928c67d
[proxy] treat errors for /analytics as 503 (#19970)
Elevations of 502 errors for Proxy can trigger ProxyBadGateway, which can be a warning that end-users are having trouble (like if supervisor is returning 502s).

Sometimes /analytics returns 502, like with Enterprise, if telemetry-exporter has trouble. In these scenarios, we do not need/want to trigger ProxyBadGateway (which alerts on-call).

So, for /analytics errors, we return a response code of 503, instead of 502.
2024-06-26 15:03:21 +02:00
Manuel Alejandro de Brito Fontes
1e4e60614c
Update caddy to v2.7.6 (#19232)
* Update caddy to v2.7.6

* Update go modules
2023-12-11 14:14:18 +02:00
Gero Posmyk-Leinemann
f78eff2467
Frontend development: redirect instead of proxy (#19177)
* [dev] make-user-admin: Grant all admin permissions

* [dev] Change frontend-dev to redirect instead of transparently proxy

This removes the "proxy needs network access to upstream" constraint, by relying on the developers browser

* [dev] front-end dev: more convenience, and added to readme
2023-12-05 16:48:13 +02:00
Anton Kosyakov
1d3b862976
[configcat] ensure that browser updates the cacge (#19125) 2023-11-23 16:10:01 +02:00
Manuel Alejandro de Brito Fontes
b9e8c94508
Update caddy to v2.7.5 (#18912)
* Update caddy to v2.7.5

* Update go modules

* Switch builder image
2023-10-13 09:21:21 +03:00
Manuel Alejandro de Brito Fontes
8ef82ff356
Update go modules to 1.21 (#18805) 2023-09-26 17:52:05 +03:00
Manuel Alejandro de Brito Fontes
19a3fff4bd
Update caddy to v2.7.2 (#18441) 2023-08-07 18:41:33 +08:00
Manuel Alejandro de Brito Fontes
61f89f8436
Update go modules (#18372) 2023-07-28 16:20:30 +08:00
Manuel Alejandro de Brito Fontes
54c2040632
Update go modules to 1.20 (#18360) 2023-07-27 22:24:29 +08:00
Anton Kosyakov
16221d53f9
[analytics plugin] allow to configure segment endpoint (#17593)
in case of dedicated we would like to stream to telemetry exporter instead
2023-05-12 18:21:57 +08:00
Anton Kosyakov
73f98a0e36
[analytics] use dummy static key for untrusted (#17293)
instead of real to unblock Node.js Segment SDK
2023-04-20 17:07:52 +08:00
Anton Kosyakov
bf65f38734
[proxy] add analytics endpoint 2023-04-17 10:28:19 +02:00
Pudong
895054ca36
[proxy] add experimental flag let configcat proxy always serve config from configmap (#17095)
* [proxy] add experimental flag let configcat proxy always serve config from configmap

* use etag

* Update components/proxy/plugins/configcat/configcat.go

Co-authored-by: Filip Troníček <filip@gitpod.io>

* Fix warnings and add a notice

* use `CONFIGCAT_DIR`

---------

Co-authored-by: Filip Troníček <filip@gitpod.io>
2023-04-12 15:59:52 +02:00
Manuel Alejandro de Brito Fontes
27979c9395
Update go dependencies (#17101)
* Update go dependencies

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>

* Update runc to v1.1.5

* Update docker cli to v23.0.2+incompatible

---------

Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-04-12 10:03:52 +02:00
Manuel Alejandro de Brito Fontes
b336a5cb65 Update go dependencies 2023-02-10 09:24:15 +01:00
Gero Posmyk-Leinemann
fbe474d498 [proxy] Add installation level flag FRONTEND_DEV_ENABLED (default: false) 2023-01-19 10:45:27 +01:00
Gero Posmyk-Leinemann
78e58ee1c1 [proxy, server] Introduce X-Frontend-Dev-URL 2023-01-19 10:45:27 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Milan Pavlik
311e9f4512 Revert "[proxy] Remove workspace download plugin"
This reverts commit c74f84bd2942495e9eafa0e57a3e08334e821613.
2022-11-11 11:25:40 +02:00
Milan Pavlik
c74f84bd29 [proxy] Remove workspace download plugin 2022-11-09 13:19:39 +01:00
Manuel Alejandro de Brito Fontes
423fc66d49 Update Caddy function signature 2022-10-19 20:58:34 +02:00
Manuel Alejandro de Brito Fontes
7da2ba7324 Update Caddy to v2.6.2 2022-10-19 20:58:34 +02:00
Milan Pavlik
e8ed0103b0 [proxy] Use AllowedOrigins instead of BaseDomain for CORS 2022-10-13 10:30:28 +02:00
Manuel Alejandro de Brito Fontes
d5eb5815b5 Update to 1.19 2022-10-04 15:17:22 +02:00
Manuel Alejandro de Brito Fontes
3f6cbd07f1 Update go dependencies 2022-10-04 15:17:22 +02:00
Christian Weichel
d6023c989a Revert "Switch to Go workspaces"
This reverts commit 6bc34cf17512cb0a10a3a6cce44141b1f06b624e.
2022-09-29 05:28:29 +02:00
Christian Weichel
6bc34cf175 Switch to Go workspaces 2022-09-28 08:45:28 +02:00
mustard
cadc7d9552 [proxy] add configcat plugin 2022-09-09 12:25:24 +02:00
Andrew Farries
c4363513a5 Run gofmt
gofmt -w .

From the repository root.
2022-08-08 10:54:52 -03:00
Manuel Alejandro de Brito Fontes
651498a2c3 Update Caddy to v2.5.2 2022-07-14 07:42:01 +02:00
Manuel Alejandro de Brito Fontes
eab5b21cb1 Update Caddy to v2.5.0 2022-04-26 15:28:38 +05:30
Manuel Alejandro de Brito Fontes
1b88c8058e Update go modules 2022-04-25 15:52:37 +05:30
Anton Kosyakov
a78f4efa61 [server] add vscode(-insiders) ouath2 clients 2022-04-12 13:12:25 +05:30
Manuel Alejandro de Brito Fontes
a563242ef3 Update go dependencies 2022-03-03 18:46:10 +05:30
Manuel Alejandro de Brito Fontes
82d786e2bb Remove ws-scheduler 2022-01-24 20:08:17 +01:00
Pudong Zheng
e524d9df23 Add ssh-tunnel in proxy 2022-01-17 16:22:10 +01:00
Laurie T. Malau
6ab6ab2a78 Adapt server config for workspace download 2021-12-01 10:20:27 +01:00
Cornelius A. Ludmann
619c8eafad Add OpenVSX proxy component 2021-10-08 08:19:55 -03:00
Manuel Alejandro de Brito Fontes
7ede29579c Update go dependencies 2021-09-30 11:31:47 -03:00
Gero Posmyk-Leinemann
242cc634ad [proxy] /headless-log-download: actually proxy the download from Gitpod's domain to avoid CORS issues 2021-09-14 14:36:39 +05:30
Manuel Alejandro de Brito Fontes
db6bdba8b9 Improve leeway task to update go modules 2021-09-13 16:14:38 +05:30
Cornelius A. Ludmann
f4c0e07ba3 [proxy] Fix KeyPathNotFoundError in jsonselect Caddy plugin 2021-09-10 13:34:16 +05:30
Cornelius A. Ludmann
b4042875ee [proxy] Replace OpenVSX URL in response body 2021-09-10 13:34:16 +05:30
Manuel Alejandro de Brito Fontes
d451b9c730 [proxy] Upgrade Caddy 2021-09-09 14:51:15 +05:30
Gero Posmyk-Leinemann
b86bf2a931 [proxy, server] Introduce '/headless-log-download' endpoint for transparent downloags of headless logs 2021-09-06 14:24:12 +02:00
Manuel Alejandro de Brito Fontes
f7cf8e33e7 Update go dependencies 2021-08-27 12:33:26 -03:00
Manuel Alejandro de Brito Fontes
ef353942bd [proxy] Simplify conditional log expression 2021-08-24 09:49:23 +02:00