259 Commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
3764c7be1f [chart] Enable kube-rbac-proxy for proxy 2021-09-23 04:24:48 -03:00
Cornelius A. Ludmann
dba1afd182 [proxy] Enable Caddy metrics 2021-09-17 17:25:42 -03:00
Gero Posmyk-Leinemann
242cc634ad [proxy] /headless-log-download: actually proxy the download from Gitpod's domain to avoid CORS issues 2021-09-14 14:36:39 +05:30
Manuel Alejandro de Brito Fontes
db6bdba8b9 Improve leeway task to update go modules 2021-09-13 16:14:38 +05:30
Cornelius A. Ludmann
f4c0e07ba3 [proxy] Fix KeyPathNotFoundError in jsonselect Caddy plugin 2021-09-10 13:34:16 +05:30
Cornelius A. Ludmann
b4042875ee [proxy] Replace OpenVSX URL in response body 2021-09-10 13:34:16 +05:30
Cornelius A. Ludmann
c450d62d21 [proxy] Add open-vsx proxy cache 2021-09-10 13:34:16 +05:30
Manuel Alejandro de Brito Fontes
d451b9c730 [proxy] Upgrade Caddy 2021-09-09 14:51:15 +05:30
Gero Posmyk-Leinemann
b86bf2a931 [proxy, server] Introduce '/headless-log-download' endpoint for transparent downloags of headless logs 2021-09-06 14:24:12 +02:00
Manuel Alejandro de Brito Fontes
f7cf8e33e7 Update go dependencies 2021-08-27 12:33:26 -03:00
Jan Koehnlein
30c56b8a94 [caddy] reroute legacy URIs
Fixes #5366
2021-08-27 06:20:26 -03:00
Manuel Alejandro de Brito Fontes
ef353942bd [proxy] Simplify conditional log expression 2021-08-24 09:49:23 +02:00
Leo Di Donato
948b0a572e chore: fix todo
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>

Co-authored-by: Christian Weichel <chris@gitpod.io>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
7d9c2113cd deps(components/proxy/plugins/logif): go modules for logif log encoder
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
fcbfdd3c0d doc(components/proxy/plugins): licenses
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
a01dbf4cb5 update(components/proxy): update caddy plugins in the dockerfile
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
e1375d8811 update(components/proxy/plugins): move existing plugins to their own modules
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
582bf6c6e6 new(components/proxy/plugins): logif log encoder plugin
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
3a65c86da5 new(components/proxy/plugins): jsonselect log encoder plugin
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
c80c61e1bd update(components/proxy): invalidate container image cache if plugins head change
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
364907efff chore: force proxy container image rebuild
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
599c6ce5ec update(components/proxy/conf): emit request path in access logs
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
44a7ac58c3 update(components/proxy/conf): log IFF status is not 0, 200, and 304
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
44983424e5 update(components/proxy/conf): do not log websocket upgrade requests (status code 0)
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
a6592f7efc chore: attempt to trigger a leeway rebuild
I need to force caddy to pick the latest plugin versions

Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
19cdc4b175 update(components/proxy/conf): stackdriver format for access logs
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
74784fafe9 update(components/proxy/conf): log in stackdriver format IFF status is not equal to 200
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Leonardo Di Donato
b6f41c4b35 build(components/proxy): with conditional logging and jsonselect encoders
Signed-off-by: Leonardo Di Donato <leodidonato@gmail.com>
2021-07-26 18:26:30 +02:00
Anton Kosyakov
ed076d77a8 [code] fix #4529: serve each webview from own origin
decoupled from workpace origin (also extension host origin)
2021-07-16 14:08:25 +05:00
Christian Weichel
c8eb943822 [prow] Add OWNERS files 2021-07-15 11:29:47 +02:00
Christian Weichel
fa394081f1 [proxy] Generate random sec-websocket-key if needed 2021-07-15 10:26:28 +02:00
Christian Weichel
5c5456d33b [proxy] Watch Caddyfile and reload changes 2021-07-06 22:02:08 +02:00
Christian Weichel
4fa35c2943 [caddy] Provide artifical sec-websocket-key
/werft no-preview
2021-07-06 22:02:08 +02:00
Manuel Alejandro de Brito Fontes
ce50d2a812 Update alpine to 3.14 2021-07-01 15:42:52 -04:00
Gero Posmyk-Leinemann
5f01d9c1d9 [server] Introduce /headless-logs/... and Server.getHeadlessLog 2021-06-23 13:53:30 +02:00
Lorenzo Fontana
48819134c1 [proxy] COOP header in workspaces only 2021-06-17 13:37:13 +02:00
Lorenzo Fontana
25bb0cc39d [proxy] COOP policy same-origin-allow-popups
Co-Authored-By: Alex Tugarev <alex@gitpod.io>
2021-06-17 13:37:13 +02:00
Manuel Alejandro de Brito Fontes
cf265c3277 Fix caddy header 2021-06-17 13:37:13 +02:00
Lorenzo Fontana
2147eede2b Enable COOP in Caddy
Signed-off-by: Lorenzo Fontana <lo@linux.com>
2021-06-17 13:37:13 +02:00
Christian Weichel
eaa6e80038 [build] Tag images with commit hash instead of leeway pkg version 2021-06-16 18:34:51 +02:00
Anton Kosyakov
7d0986778e [ws-proxy] tune idle connection pool
By default the connection pool is capped only by 2 connections per host.
If a client tries to open many connections then latency increased significantly,
see https://stackoverflow.com/a/60114945/961588.
This commit configures the connection pool be unlimited but capped by 100 connections per host.
It was inspired by measurement in Caddy: https://github.com/caddyserver/caddy/issues/2805
2021-06-14 08:52:43 +05:00
Christian Weichel
f9a2ae3a45 [versions] Produce helm chart compatible versions file 2021-06-13 19:22:45 +02:00
Anton Kosyakov
2e1462787c [caddy] pump port traffic through ws-proxy
It's for core-dev to behave similarly to production.
2021-06-09 07:59:48 +05:00
Manuel Alejandro de Brito Fontes
aaa33789c1 [proxy] Enable tls1.2 as default 2021-06-03 06:26:13 -04:00
Alex Tugarev
3d0ab49212 [proxy] fix api-server config 2021-05-27 15:39:49 +02:00
Christian Weichel
f5f9926787 move payment endpoint proxy config 2021-05-26 08:35:36 +02:00
Alex Tugarev
0bf71f1ed3 initial contribution of components/ee/paiment-endpoint 2021-05-26 08:35:36 +02:00
Manuel Alejandro de Brito Fontes
c6f96378b5 [proxy] Cleanup caddy plugin build 2021-05-21 08:07:34 -04:00
Manuel Alejandro de Brito Fontes
dd0826cc0d [proxy] Configure Caddy 2021-05-19 19:46:57 -04:00
Manuel Alejandro de Brito Fontes
4b952bdc6a Remove NGINX configuration 2021-05-19 19:46:57 -04:00