114 Commits

Author SHA1 Message Date
Manuel Alejandro de Brito Fontes
aa61917989
Remove TLS EOF errors from logs (#16930)
Signed-off-by: Manuel de Brito Fontes <aledbf@gmail.com>
2023-03-21 10:23:13 +01:00
Thomas Schubart
2c259c4dc8
[ws-manager-mk2] Support public SSH keys (#16413) 2023-03-13 14:50:49 +01:00
Huiwen
12ed1367f4 Reuse the same workspace patterns 2023-02-07 09:43:45 +01:00
Christian Weichel
9992d4fa32 [ws-proxy] Support workspace CRD 2023-01-23 14:14:30 +01:00
Anton Kosyakov
959e584b55 [ws-proxy] support ports location for debug workspace
It is a prerequisite to https://github.com/gitpod-io/gitpod/pull/15795. Based on Pudong's work from https://github.com/gitpod-io/gitpod/pull/15687.

Co-authored-by: Pudong Zheng <tianshi8650@gmail.com>
2023-01-20 09:44:27 +01:00
Anton Kosyakov
697696029b [gp-run] experimental workspace config debug mode
Co-authored-by: Anton Kosyakov <anton@gitpod.io>
Co-authored-by: Victor Nogueira <victor@gitpod.io>
Co-authored-by: Andrea Falzetti <andrea@gitpod.io>
2023-01-09 06:32:48 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Jean Pierre
9adc2e0458 Minor cleanup 2022-10-03 22:20:19 +02:00
Jean Pierre
350404f82d Add vscode callback route 2022-09-12 20:25:13 +02:00
Victor Nogueira
fe690d2782 Remove the port number from "X-Forwarded-Host" header as it's is already defined in "X-Forwarded-Port" 2022-07-09 18:16:56 +05:30
Pudong Zheng
dc33a0b1ca [ws-proxy] use target host for foreign resource 2022-07-06 13:40:53 +05:30
Pudong Zheng
394eda070c [ws-proxy] remove blobserve readonly mode 2022-07-06 13:40:53 +05:30
Pudong Zheng
2f5e402524 [ws-proxy] Add test case for blobserve and workspace port 2022-07-05 14:17:52 +05:30
Victor Nogueira
a5e828ffa2 Add X-Forwarded-Port header
It's required by some software, like [FusionAuth](https://fusionauth.io/).
2022-07-04 17:20:51 +05:30
Pudong Zheng
cf6a34ae6b [ws-proxy] not use target host when serve workspace port route 2022-07-01 15:34:39 +05:30
Pudong Zheng
9dc436aa92 [SSH Gateway] remove priavte key requirement when ownerToken is provide 2022-06-17 12:13:26 +05:30
Pudong Zheng
fe6e39e3a3 [workspace] support user upload ssh keys
Co-authored-by: Huiwen <huiwen@gitpod.io>
Co-authored-by: Christian Weichel <chris@gitpod.io>
Co-authored-by: Pavel Tumik <18602811+sagor999@users.noreply.github.com>
2022-06-15 22:58:25 +05:30
Pudong Zheng
c8794637a3 [ws-proxy] use ide-proxy to serve blobserv 2022-06-10 02:47:19 +05:30
Pudong Zheng
c2b3752c39 Add OwnerUserId in workspaceInfo
patch
2022-05-19 12:06:33 +05:30
Jean Pierre
aa2c51c804 Serve webview resources from blobserve 2022-05-19 08:12:33 +05:30
Pavel Tumik
ede6cace47 [ws-proxy] fix ACME challenge handler 2022-04-19 05:58:31 +05:30
Manuel Alejandro de Brito Fontes
0ac53c0794 [ws-proxy] Deny ACME challenges 2022-04-07 18:40:20 +05:30
Jean Pierre
8dd2ddd844 Add new foreign route 2022-03-15 13:12:21 +05:30
Pudong Zheng
8fa98f9e68 add ssh_host_key router 2022-02-21 16:43:01 +05:30
Gero Posmyk-Leinemann
c0bbf911db [dashboard, ws-proxy, supervisor] Break potential DDOS cycle by disabling autostart
When triggered:
     a) inFrame or
     b) when redirect from IDE url (by ws-proxy)
2022-02-14 11:06:35 +01:00
Sven Efftinge
f8086b9a25 [server] use owner and repo name for workspace id
This change introduces optional arguments in generateWorkspaceId
for the first two segments. And makes use of it in workspace factory
using the repos org/group and name.

fixes https://github.com/gitpod-io/gitpod/issues/4129
2022-01-07 10:33:00 +01:00
Pudong Zheng
b0a97a4aef new dns terraform 2022-01-06 17:29:00 +01:00
Manuel Alejandro de Brito Fontes
ff2f54edbb [wa-proxy] Improve TLS default configuration 2021-11-25 15:55:21 +01:00
Cornelius A. Ludmann
47d4ac5345 [ws-proxy] Get supervisor image from pod annotation
instead from ws-proxy config
2021-11-15 08:45:12 +01:00
Christian Weichel
1de8d787e1 [ws-proxy] Provide access to headless workspaces 2021-11-12 10:58:09 +01:00
Manuel Alejandro de Brito Fontes
526c95e344 Decouple ws-proxy from ws-manager 2021-11-05 10:33:03 +01:00
Cornelius A. Ludmann
e7c93eb382 [ws-manager] Add destkop_ide_image 2021-10-26 15:02:04 +02:00
Manuel Alejandro de Brito Fontes
1eb8f86a7b Refactor GRPC TLS connection default 2021-10-12 16:09:59 -03:00
Manuel Alejandro de Brito Fontes
58a9e395a8 [proxy] Do not log supervisor proxy errors 2021-09-24 03:57:49 -03:00
rl-gitpod
a4751772fe [integration-test] Add support for new IDE config and sanity checks 2021-09-22 20:42:47 -03:00
rl-gitpod
2847ef3ace [ws-proxy] Use instance ID to not stomp on newer workspaces when handling events 2021-09-22 20:42:47 -03:00
Manuel Alejandro de Brito Fontes
c46507f03c [ws-proxy] Change log level if no owner cookie is present 2021-09-13 16:18:38 +05:30
Manuel Alejandro de Brito Fontes
5ba43eba6f [ws-proxy] Improve log message and reduce verbosity 2021-09-07 07:44:13 +02:00
Manuel Alejandro de Brito Fontes
b7a3b87337 Remove duplication of GRPC configuration 2021-09-01 17:44:31 +02:00
Manuel Alejandro de Brito Fontes
347ad95d80 Switch from fmt.Errorf to xerrors.Errorf 2021-08-30 02:47:28 -03:00
Manuel Alejandro de Brito Fontes
84c6c68073 [ws-proxy] Configure grpc keepalive DialOption options 2021-08-24 08:52:23 +02:00
Christian Weichel
140c897d0d Remove old headless log infrastructure 2021-07-28 12:33:31 +02:00
Manuel Alejandro de Brito Fontes
f6aea008e9 [ws-proxy] Skip DNS errors when workspace is not available 2021-07-26 15:51:30 +02:00
Christian Weichel
afe7eda668 [ws-proxy] Disable compression on supervisor API
to avoid "stuttering log output" in image-builder
2021-07-22 16:32:26 +02:00
Anton Kosyakov
ed076d77a8 [code] fix #4529: serve each webview from own origin
decoupled from workpace origin (also extension host origin)
2021-07-16 14:08:25 +05:00
Anton Kosyakov
f6ad999455 [code] fix #4568: inline static links to blobserve 2021-07-07 08:04:28 +02:00
Cornelius A. Ludmann
cf6a5dc723 [ws-proxy] Allow workspace router to match URLs from other clusters 2021-06-28 14:19:47 +02:00
Cornelius A. Ludmann
8ef75abd27 [ws-proxy] Rename theiaRouter to ideRouter 2021-06-28 14:19:47 +02:00
Manuel Alejandro de Brito Fontes
bd3ba7cdec Refactor port parsing 2021-06-16 10:45:31 -04:00
Anton Kosyakov
7d0986778e [ws-proxy] tune idle connection pool
By default the connection pool is capped only by 2 connections per host.
If a client tries to open many connections then latency increased significantly,
see https://stackoverflow.com/a/60114945/961588.
This commit configures the connection pool be unlimited but capped by 100 connections per host.
It was inspired by measurement in Caddy: https://github.com/caddyserver/caddy/issues/2805
2021-06-14 08:52:43 +05:00