Milan Pavlik
17e83b9985
[iam] Remove component
2023-01-23 17:33:31 +01:00
Milan Pavlik
0aad145ad4
[public-api] Bind OIDC HTTP service to Public API
2023-01-23 15:24:30 +01:00
Milan Pavlik
0d5cb6c3ff
[installer] Mount database secret to Public API
2023-01-19 10:03:27 +01:00
Alex Tugarev
d5e8899ce5
[intaller] add OIDCServiceAddress to papi config
2023-01-12 12:50:51 +01:00
Andrew Farries
b87f25e94f
[public-api] Set GitpodServiceURL to cluster-local
...
Use a cluster-local websocket URL to connect to `server`.
2023-01-10 20:52:50 +01:00
Christian Weichel
478a75e744
Switch license to AGPL
2022-12-08 13:05:19 -03:00
Tarun Pothulapati
c2eb0c15d1
[installer] manually set allowPrivilegeEscalation to false
...
This PR manually sets the `allowPrivilegeEscalation` container
config to false where we don't need extra capabilities. This
is needed as not setting this explicitely could mean that
it could still be `true` based on other settings.
This also helps us future proof on any behaviour changes around
this.
Signed-off-by: Tarun Pothulapati <tarun@gitpod.io>
2022-12-05 06:28:15 -03:00
Milan Pavlik
89104af0a3
[installer] Fix token signing key subpath
2022-11-22 09:28:51 -03:00
Milan Pavlik
bc23811665
[installer] Configure personal access token signing key
2022-11-21 17:12:51 -03:00
Andrew Farries
6839026b4b
Add DatabaseWaiterContainer init container
2022-11-18 13:31:48 +02:00
Milan Pavlik
0532f1df38
[public-api] Inject database environment
2022-11-15 16:25:45 +02:00
Laurie T. Malau
aa812d2650
[public api] Add configcat config
2022-11-14 18:08:44 +02:00
Milan Pavlik
cc233e41e6
[installer] Deploy Public API without experimental config
2022-11-09 15:30:39 +01:00
Milan Pavlik
2926d142ed
[public-api] Make publiic api package match path
2022-11-09 09:42:39 +01:00
Milan Pavlik
f5bbb50df0
[public-api] Parametrize connection URL based on token
2022-11-04 10:14:08 +01:00
Milan Pavlik
7f3e1e4c50
[public-api] Proxy Cookies to downstream for auth
2022-11-04 08:49:08 +01:00
Simon Emms
2f03c004a7
[installer]: explicitly set all host addresses to 0.0.0.0
2022-09-13 12:38:14 +02:00
Milan Pavlik
2b2dfabdff
[public-api] Fix stripe webhook secret mounting
2022-08-30 10:58:14 +02:00
Milan Pavlik
c831351367
[public-api] Fix Stripe Webhook Secret mount path
2022-08-29 12:01:13 +02:00
Milan Pavlik
3037016a2e
}}} This is a combination of 2 commits.
...
[stripe] Inject stripe-webhook-secret into public-api
2022-08-26 13:49:11 +02:00
Manuel Alejandro de Brito Fontes
64b4d6fcf9
Fix typecheck errors
2022-08-23 08:18:39 +02:00
Andrew Farries
d4ad52596f
Set BillingServiceAddress in public api configmap
2022-08-10 15:55:56 +02:00
Simon Emms
2fd3dd3586
[installer]: remove the custom labels from the selector labels
2022-08-09 04:16:53 -03:00
Andrew Farries
7227cb3311
Add port to public_api_server networkpolicy
...
Allow ingress from proxy to the http port 9002.
2022-08-04 07:01:48 -03:00
Andrew Farries
d0b7ffcbad
Add HTTP port to public api config
2022-08-04 03:36:48 -03:00
Simon Emms
8fad588e6b
[installer]: add customization functions to components
2022-06-24 17:02:33 +05:30
Manuel Alejandro de Brito Fontes
624021f2f2
Simplify configuration of KubeRBACProxyContainerWithConfig and remove collision
2022-06-03 18:07:52 +05:30
Mads Hartmann
7b68fb4a27
Use slices instead of maps for service ports to control ordering
2022-05-30 20:14:48 +05:30
Christian Weichel
b7bf69d01e
[public-api-server] Harmonise configuration structure
2022-05-25 17:35:39 +05:30
Milan Pavlik
51450d5141
[public-api] Use standard cli setup
2022-05-19 14:27:33 +05:30
Milan Pavlik
099769c90e
[public-api] Fix kube-rbac-proxy upstream metrics port
2022-05-19 14:01:33 +05:30
Christian Weichel
5dd9465378
[public-api] Adapt to new baseserver structure
2022-05-16 13:23:31 +05:30
Milan Pavlik
f09b44aa97
[public-api] Add role binding for kube-rbac-proxy to auth metric scrapes
2022-05-13 16:59:28 +05:30
Milan Pavlik
b09cda83e1
[public-api] Rename HTTP port to Debug
2022-05-13 14:32:28 +05:30
Milan Pavlik
eff6f0a2d1
[public-api] Add network policy to allow connections from proxy
2022-05-11 12:53:26 +05:30
Milan Pavlik
9e84038beb
[public-api] Set config in installer
2022-05-04 20:05:20 +05:30
Milan Pavlik
6d7e8c587e
[public-api] Add kube-rbac proxy container to deployment
2022-04-29 14:36:15 +05:30
Andrew Farries
674db36fbb
Make resources configurable for all components
...
Use the common.ResourceRequirements function from the parent commits,
passing in the existing defaults.
2022-04-28 20:04:14 +05:30
Andrew Farries
0ae3201a7e
Set Replicas for multiple components
...
So that they respect the new
`experimental.common.podConfig.<component>.replicas` setting.
2022-04-26 13:14:38 +05:30
Milan Pavlik
beaf1b4cd2
[public-api] Use /ready and /live for probes
2022-04-22 13:33:34 +05:30
Simon Emms
948ae5192b
[installer]: add DropImageRepo functionality to RepoName
...
This moves the ImageName and RepoName functions to the RenderContext
struct.
2022-04-21 18:26:33 +05:30
Milan Pavlik
660b593d4a
[public-api] Add k8s service definition
2022-04-20 16:31:33 +05:30
Milan Pavlik
f6d2783e00
[public-api] Ensure no objects are rendered by installer without experimental config
2022-04-20 15:02:32 +05:30
Andrew Farries
3fdd2d9754
Rename common.Affinity to NodeAffinity
2022-04-20 02:48:32 +05:30
Milan Pavlik
a75b4cf200
[public-api-server] Add deployment into installer
...
Please enter the commit message for your changes. Lines starting
2022-04-13 16:59:26 +05:30
Milan Pavlik
d4bc3fdb52
[public-api-server] Setup component in installer, behind epxerimental config
2022-04-13 14:05:26 +05:30
