Alex Tugarev
f06a53b04a
[server] validate host names of dynamic auth providers
...
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-10 13:59:08 +01:00
Sven Efftinge
adae764c90
[auth] properly assign name and full name
2020-12-10 11:53:43 +01:00
Christian Weichel
f44a3a728b
[misc] Add missing license header
2020-12-09 15:05:26 +01:00
Alex Tugarev
529abf8860
[server] fix issues with tos flow and login
2020-12-08 15:03:01 +01:00
Alex Tugarev
6d72a5f236
[transfer] Replace "TypeFox" with "Gitpod"
...
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-08 10:41:44 +01:00
Alex Tugarev
906fd2e2d1
[server] integrate ToS flow with authentication
...
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-12-07 17:28:24 +01:00
Alex Tugarev
9812a9f2ce
clean up
2020-12-07 17:28:24 +01:00
Alex Tugarev
b354264a0f
[server/auth] refreshed tokens missing user name
...
this should fix pushing to bitbucket.
2020-12-05 13:48:46 +01:00
Alex Tugarev
8634315954
[server/bitbucket] create API client options explicitly for tests
...
in tests Basic auth is used for API calls instead of Bearer tokens, this got mixed up with git authorization, where the OAuth2 token is also used for, but with a different username.
2020-12-05 12:15:49 +01:00
Christian Weichel
72588f1fa4
[server] Fix shared workspace access
2020-12-03 21:55:56 +01:00
Alex Tugarev
01e763573b
[gitlab/server] fix tests / error codes
2020-12-03 09:20:39 +01:00
Alex Tugarev
ab62677230
[server] PATCH for agent-base@4.2.1
...
which is pulled in and hoisted via proxy-agent-base (gcloud, probot, etc.), and eagerly patches node's `https.request` function. this monkey patching is bogus though!
the `patch-patch` module provides a patched patch to be loaded first, which will load (and therefore cache) the initial patch module, and fix the substitution of `https.request` afterwards in order to be compatible with current node API again.
2020-12-03 09:20:39 +01:00
Alex Tugarev
27568b10b9
[server] bump gitlab
2020-12-03 09:20:39 +01:00
Anton Kosyakov
8c993133cb
[supervisor] git token provider support
2020-12-02 09:40:35 +01:00
Anton Kosyakov
4ab9a6e899
[supervisor] token provider kind
2020-12-02 09:40:35 +01:00
Christian Weichel
1ae02969eb
[workspace] Remove privileged workspace config flag
2020-11-27 10:54:56 +01:00
Moritz Eysholdt
705e2b75ec
Move TypeFox/gitpod-test-repo to gitpod-io/gitpod-test-repo
2020-11-27 09:22:43 +01:00
Anton Kosyakov
2b74b1e742
[dashboard] redirect from prebuild only when it is stopped
2020-11-25 16:24:46 +01:00
Christian Weichel
b5ccf062c7
[prebuild] Allow different users to start prebuilds on the same context
2020-11-18 15:09:21 +01:00
Christian Weichel
1cfd7759f7
[server] Respect "feature preview" feature flags
...
and make the IDE image persist on the instance,
not the workspace.
/werft https
2020-11-17 14:10:21 +01:00
Anton Kosyakov
8a73627689
[server] integrate heapdump
...
in order to create heap snapshots at runtime with kill -s SIGUSR2 <pid>
2020-11-11 09:17:07 +01:00
Anton Kosyakov
ca949a4a70
[enforcement] use a new server per a request to avoid race conditions
2020-11-11 09:17:07 +01:00
Anton Kosyakov
3fd8113c9b
[server] fix leaking listeners
2020-11-11 09:17:07 +01:00
Christian Weichel
8778574b98
[user-namespaces] Don't require privileged-ws permission anymore
...
with recent changes this feature is safe enough to no longer require
this permission.
2020-11-06 13:53:47 +01:00
jgallucci32
24f49d0bb4
Remove encoding from pre-flight response URI
...
Fixes issue where the response URI for uploading plugins is double-encoded which generates a "400 Bad Request" error when uploading to Minio.
Signed-off-by: jgallucci32 <john.gallucci.iv@gmail.com>
2020-11-04 16:19:30 +01:00
Christian Weichel
43e26558bb
[merge] Provide instance updates
2020-11-04 05:50:23 +01:00
Christian Weichel
6d93dd8348
[ws-daemon] Rename ws-sync to ws-daemon
2020-10-19 07:46:04 +02:00
Alex Tugarev
9a03c99bd7
[server] Fix domain scope for session cookie
...
With this change slicing of hostname will only be applied for preview environments.
ACK this still only works for preview environments deployed without a 2nd level TLD.
OTOH it should quickly enable SH installations with 2nd level TLDs!
2020-10-16 14:59:04 +02:00
Jan Keromnes
277638795a
[gitlab] Don't double-encode path when getting the last commit of a Dockerfile
...
Fixes https://github.com/gitpod-io/gitpod/issues/1995
2020-10-14 14:28:06 +02:00
Christian Weichel
2f5cca3ff0
[ws-manager] Provide user namespacing ability using a feature flag
2020-10-13 11:10:53 +02:00
Anton Kosyakov
32a4d7a961
add ide settings permission and enable it for devops role
2020-10-07 09:38:02 +02:00
Christian Weichel
d55bf6b460
[server] Fix permissions in takeSnapshot
...
/werft no-preview
2020-10-05 09:38:28 +02:00
Cornelius A. Ludmann
9699516079
Allow setting port visibility in .gitpod.yml
...
Fixes gitpod-io/gitpod#1867
2020-09-25 17:21:57 +02:00
Anton Kosyakov
e02b65bfba
[server] add function:stopWorkspace scope to default api token
2020-09-25 14:46:34 +02:00
Christian Weichel
c91e90e20f
[server] Support delegate resource scopes delegating to the owner guard
...
This way we can express `create` scopes properly.
2020-09-22 12:14:07 +02:00
Christian Weichel
e40f2532d6
[server] Add missing license header
2020-09-22 12:14:07 +02:00
Christian Weichel
6974720578
Create a default Gitpod API token for each workspace
2020-09-22 12:14:07 +02:00
Anton Kosyakov
ed00963c1c
[server] fix workspace lookup regressions
2020-09-21 14:40:14 +02:00
Christian Weichel
9e52bbd6d8
[server] Support API access through scoped bearer tokens
2020-09-18 12:31:42 +02:00
Christian Weichel
66b47ec66e
[server] Support proper error propagation in the websocket layer
2020-09-18 12:31:42 +02:00
Christian Weichel
89ccc1a98f
[server] Implement owner-only resource guard
2020-09-18 12:31:42 +02:00
Christian Weichel
b71f68fc1a
[server] Map IDE image as part of workspace config
2020-09-14 10:01:00 +02:00
Anton Kosyakov
7fc7fbd828
[supervisor/frontend] support loading screen
2020-09-14 10:01:00 +02:00
Anton Kosyakov
da278d55ba
[ide/code] initial image
...
Signed-off-by: Anton Kosyakov <anton.kosyakov@typefox.io>
2020-09-14 10:01:00 +02:00
Sean Hellum
3acaf5e083
Allow user to use default image on failure ( #1795 )
2020-09-09 10:49:21 -05:00
Christian Weichel
a81145c21e
[theia] Use supervisor get port status
2020-09-09 15:08:24 +02:00
Christian Weichel
372a3610be
[supervisor] Move from /api to /_supervisor
2020-09-07 09:50:32 +02:00
Christian Weichel
8f3d87237d
Use the new API routes instead of /gitpod/ready
2020-09-07 09:50:32 +02:00
Christian Weichel
757c19a935
[registry-facade] Move from theia version to IDE image
...
This move allows us to specify an IDE docker image at workspace startup,
rather than just selecting from a fixed set of Theia images.
2020-09-04 14:12:06 +02:00
Alex Tugarev
e3cc9726ac
[login] first user must accept ToS
...
Signed-off-by: Alex Tugarev <alex.tugarev@typefox.io>
2020-09-03 10:51:20 +02:00