Commit Graph

96 Commits (21b652e2c451431ddf8576db1628be949b3c9599)

Author SHA1 Message Date
Anatolii Bazko 21b652e2c4
feat: Automatically create the container build SCC if containerBuildC… (#1542)
* feat: Automatically create the container build SCC if containerBuildCapability is enabled

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-10-18 10:07:01 +03:00
Anatolii Bazko e855178764
fix: Don't add empty 'githost' key in 'git-tls-creds' ConfigMap (#1538)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-10-11 14:38:34 +03:00
Anatolii Bazko 5373f5320d
feat: Move handling DevWorkspace operator resources out of Che Operator (#1520)
* feat: Remove managing Dev Workspace resources from operator codebase

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-09-22 12:23:54 +03:00
Andrew O 75a31c3bb3
feat: configure DWOC from che-operator CR (#1494)
* feat: configure DWOC from che-operator CR

Currently, only the following fields from the checluster custom resource
are propagated to the DevWorkspace-Operator Configuration:

- `checluster.spec.devEnvironments.Storage.pvcStrategy`
- `checluster.spec.devEnvironments.Storage.perUserStrategyPvcConfig.ClaimSize`
- `checluster.spec.devEnvironments.Storage.perUserStrategyPvcConfig.StorageClass`
- `checluster.spec.devEnvironments.Storage.perWorkspaceStrategyPvcConfig.ClaimSize`
- `checluster.spec.devEnvironments.Storage.perWorkspaceStrategyPvcConfig.StorageClass`

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* Update CSV and autogenerated apiv2 deepcopy

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* Refactoring

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* make fmt

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2022-09-02 19:50:35 +03:00
Anatolii Bazko 61a89f7670
chore: default VSX registry should be open-vsx.org (#1484)
* chore: default VSX registry should be openvsx.org

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-08-17 15:44:35 +03:00
Anatolii Bazko 7de6e58b26
fix: Update namespace object instead of project (#1473)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-08-09 12:13:03 +03:00
David Kwon 35bd69184c
feat: implement secondsOfInactivityBeforeIdling and secondsOfRunBefor… (#1443)
* feat: implement secondsOfInactivityBeforeIdling and secondsOfRunBeforeIdling CR config

Signed-off-by: David Kwon <dakwon@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2022-07-13 13:04:59 -04:00
Anatolii Bazko aa0806fde4
chore: Refactoring (#1411)
* chore: Refactoring

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-06-24 19:34:27 +03:00
Anatolii Bazko 38f6cb6381
feat: CheCluster defaults (#1407)
* feat: CheCluster defaults

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-06-22 11:02:08 +03:00
Piotr Karatkevich c364ba4e93
feat(oauth-proxy): configuration enhancements for k8s config (#1400)
* feat(oauth-proxy): configuration enhancements for k8s config
2022-06-22 09:51:43 +03:00
David Kwon c87253d34e
Use errors middleware to redirect workspace url to dashboard on 5xx error code (#1392)
* Use errors middleware to redirect workspace url to dashboard on 5xx error code

Signed-off-by: David Kwon <dakwon@redhat.com>
2022-06-16 09:44:28 -04:00
Anatolii Bazko 0bc1049017
feat: CheCluster API v2 (#1324)
* feat: CheCluster API v2

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-06-09 11:35:01 +03:00
Anatolii Bazko 16c92ec513
chore: Don't update CheCluster CR spec to set OAuthClientName and OAu… (#1393)
* chore: Don't update CheCluster CR spec to set OAuthClientName and OAuthClientSecret fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-28 13:59:05 +03:00
Anatolii Bazko 5c4d9fa132
fix: Support internal endpoints (#1384)
* fix: Support internal endpoints

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-27 11:53:57 +03:00
Anatolii Bazko 293956fea3
fix: Deletes object with a legacy name to avoid mounting several ones… (#1383)
* fix: Deletes object with a legacy name to avoid mounting several ones under the same path

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-11 18:05:18 +03:00
Lukas Krejci dfcfc3efa7
The git certificate needs to be labeled as mounted to workspace. (#1375) 2022-05-06 10:21:06 +02:00
Lukas Krejci e5c0b73077
Namespace provisioning short name prefix (#1370)
Given that we only support 1 che instance in the cluster, we can shorten
the name prefixing significantly.
2022-05-02 14:02:18 +02:00
Anatolii Bazko 73bbeaafea
fix: Respect labels for workspace routes set in spec.server.CustomChe… (#1368)
* fix: Respect labels for workspace routes set in spec.server.CustomCheProperties[CHE_INFRA_OPENSHIFT_ROUTE_LABELS]
* Restart pods when configuration changed

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-02 13:10:06 +03:00
Lukas Krejci 33a59db047
fix: Use the labels used by the che-server to recognize workspace namespaces (#1359)
Use the app.kubernetes.io/part-of=che.eclipse.org and
app.kubernetes.io/component=workspaces-namespace labels to mark a namespace
as workspace namespace.

This should bring the operator and che-server in line with how they are
marking the managed namespaces.
2022-04-27 16:06:21 +02:00
Anatolii Bazko 51002ea5f2
chore: don't update chehost in CheCluster spec (#1340)
* chore: don't update chehost in CheCluster spec

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add missing files

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-16 11:37:40 +02:00
Anatolii Bazko a850b08a5d
chore: Don't set defaults into CheCluster CR (#1337)
* chore: Don't set defaults into CheCluster CR

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add tests

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-15 14:12:08 +02:00
Anatolii Bazko 4ff511928d
fix: Remove code depending on devworkspace.enable field (#1321)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-02-16 12:16:56 +02:00
Angel Misevski 9a6b62f51d Fix test cases to accomodate using workspaceID in router name
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-03 09:49:55 +01:00
Angel Misevski 44d610dd9c Avoid name collisions in traefik routers in gateway
Fix issue where all healthz routers are being created with the name
'<portnum>-healthz', preventing the traefik gateway from loading them
all at the same time.

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-03 09:49:55 +01:00
Lukas Krejci 12da7adeeb
feat: Support node selector and pod tolerations in devworkspaces (#1301)
Fixes #20884
* Upgrade to devworkspace operator with support for pod tolerations
* Implement additional logic in usernamespace controller to sync config
  from checluster CR to ns annotations understood by the dwo
* Add new fields to CheCluster CRD v1 and v2alpha1
* added support for the new fields in conversion methods between v1 and v2alpha1
2022-02-01 17:51:35 +01:00
Anatolii Bazko 4f08657509
chore: Drop backup/restore functionality (#1300)
* chore: Drop backup/restore functionality

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-02-01 15:51:26 +02:00
Angel Misevski c81c737d81
chore: Update DevWorkspace Operator dependency to v0.12.2 (#1302)
* Update DevWorkspace Operator dependency to v0.12.2

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update vendor directory to include DWO v0.12.2

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Adapt Che routing solver to DevWorkspace Operator changes

Adapt code in Che RoutingSolver to accomodate changes in DWO that
disconnect DevWorkspaceRouting resources from the upstream Devfile API

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Set Go version to 1.16

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update all Go images used to use Go 1.16

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Set up Go to use 1.16 in PR check GitHub actions

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update RBAC

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-01 10:46:21 +02:00
Anatolii Bazko 92d24388ec
chore: Remove obsolete code after switching to Dev Workspace enabled (#1291)
* chore: Remove keycloak deployment

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Get rid of codebase related to spec.devWorkspace.enable field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to auth.initialOpenShiftOAuthUser field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to some auth.* fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to some auth.openShiftoAuth field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to auth.nativeUserMode field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server.tlsSupport and server.*ClusterSVCNames fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server expouse strategy fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove deprecated code

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server.tlsSupport and server.cheFlavor field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update helm charts

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: remove RELATED_IMAGE_keycloak

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-01-24 09:52:15 +02:00
Mykola Morhun 3262a5acc1
refactor: Do not reconcile on any error inside finalizers (#1252)
Queue a new reconcile loop on any finalization error, but do not stop current
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-15 16:42:17 +02:00
Lukas Krejci 0e72bb2ca8
Sync the certificate from che-git-self-signed-cert to user namespaces (#1222)
feat: Sync the git tls certificate configuration in a format digestable by DWO.

Other slightly related changes:
* Make sure the version content annotations survive across multiple conversions
between v1 and v2alpha1.
* Add DWO watch labels so that our stuff is picked up.
* irifrance/gini has moved to go-air/gini
2021-12-15 15:41:55 +01:00
Mykola Morhun e960ba2e56
Make backup / restore of Che installation work with devworkspace mode (#1247)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-10 10:32:33 +02:00
Anatolii Bazko 608bff0187
chore: checluster controller refactoring (#1244)
* chore: Refactoring checluster controller

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-09 14:13:59 +02:00
Oleksandr Andriienko ec8e825ecb
fix: Fix read termination timeout for all namespaces mode. (#1235)
* fix: Fix read termination timeout for all namespaces mode.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-12-08 21:15:04 +02:00
Anatolii Bazko 58bba54964
chore: permissions refactoring (#1202)
* chore: permissions refactoting

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
Co-authored-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 16:56:37 +02:00
Mykola Morhun afa32e66ec
Drop databases before restore. Do not migrate objects related to backup. (#1227)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 12:20:40 +02:00
Anatolii Bazko b4511e3cf9
fix: delegate permissions to `get, list, watch` `pods/log` resources (#1212)
* fix: delegate permissions to get, list, watch pods/log resources

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-06 15:25:57 +02:00
Michal Vala 88cb1ed7ac
feat: native auth kube (#1185)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-12-03 12:20:46 +01:00
Anatolii Bazko 474b0c8421
fix: don't require `app.kubernetes.io/instance:che` label on k8s object to trigger a reconcile (#1204)
* fix: don't require 'app.kubernetes.io/instance:che' label

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-30 15:39:46 +02:00
Anatolii Bazko 1e9fa6a078
chore: Refactor certificates reconsiler (#1171)
* chore: Refactor certificates reconsiler

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-26 13:50:59 +02:00
Anatolii Bazko 2da1195bd9
fix: build downstream (#1194)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-23 09:17:47 +02:00
Mykola Morhun ce4e107719
Apply part-of label to devworkspace resources managed by Che Operator (#1189)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-22 16:45:46 +02:00
Mykola Morhun 021031f6df
feat: Use custom cache function in Che Operator (#1166)
Use custom cache function to limit memory consumption of operator

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-19 18:35:22 +02:00
Igor Vinokur a434cc5953
fix: Add patch, list, update verbs to the configmap role (#1180)
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-11-18 15:49:54 +02:00
Oleksandr Andriienko b4930b5054
fix: Fix license headers (#1170)
* Fix license headers.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-16 11:17:18 +02:00
Anatolii Bazko 8bdbbc1dfa
chore: Refactoring OpenShiftOAuth (#1167)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-10 17:41:07 +02:00
Anatolii Bazko e1b4541ed2
chore: Refactoring OpenShift Initial user reconciler (#1152)
* chore: refactoring OpenShift OAuth User

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Co-authored-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-04 17:42:49 +02:00
Mykola Morhun cb17fce445
Use cached and non-cached clients in backup/restore controllers (#1156)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-21 16:49:57 +03:00
Anatolii Bazko a889b56a9d
fix: Set CHE_INFRA_KUBERNETES_ENABLE__UNSUPPORTED__K8S: true when devworkspace is enabled on k8s (#1155)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-21 15:33:24 +03:00
Anatolii Bazko f838cf48d2
checontroller refactoring (#1138)
* chore: Introduce reconcilemanager, update status when reconciliation failed.

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-19 10:56:49 +03:00
Anatolii Bazko 06aa35c92c
fix: configure runtime controller with namespace event filter (#1146)
* fix: configure runtime controller with namespace event filter
* Increase memory limit to 1Gi

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-18 13:53:52 +03:00