Commit Graph

597 Commits (36750ae52d6ef38bd45453aa3db57c833127985d)

Author SHA1 Message Date
Anatolii Bazko 618ad1f1a9
feat: Disable plugin registry if openVSX registry is configured (#1843)
* feat: Disable plugin registry if openVSX registry is configured

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-06-04 10:42:53 +02:00
Anatolii Bazko 634c6228bb
feat: Create editors definitions configmaps (#1838)
* feat: Create editors definitions configmaps

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-05-20 14:20:59 +02:00
Greg Guydo 192216bf44
Check for Kubernetes secret name in oAuthSecret, fallback to plain text (#1836)
* Check for Kubernetes secret name in oAuthSecret, fallback to plain text

* Removed logging, added test cases

* Update documentation

* cleaning up formatting

* update-dev-resources
2024-05-14 16:54:20 +02:00
Anatolii Bazko 32974f029e
feat: Configure probes for che-gateway containers (#1825)
* feat: Configure probes for che-gateway containers

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-04-17 15:22:41 +02:00
Anatolii Bazko a8249260c8
feat: Automation of the expected images to be used by ImagePuller (#1822)
* feat: Retrieve default images from plugin & devfile registries

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-03-29 11:49:58 +01:00
Anatolii Bazko d4d21a2535
chore: operator roles sanitizing (#1814)
* chore: che-operator roles sanitizing

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-03-07 11:01:30 +01:00
Anatolii Bazko 76b21ea632
feat: Use registry.devfile.io by default in Eclipse Che (#1811)
* feat: Use  registry.devfile.io by default in Eclipse Che

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-02-20 13:23:09 +01:00
Anatolii Bazko 1ae01423c1
feat: Add pods/portforward permissions (#1809)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-02-05 17:21:49 +01:00
Anatolii Bazko 44c3582f4f
feat: Don't reset the number of replicas on deployment update (#1804)
* feat: Support HorizontalPodAutoscaler

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-01-29 15:10:56 +01:00
Anatolii Bazko 504f01e2d0
feat: sync Secrets, ConfigMaps and PersistentVolumesClaims to users n… (#1799)
* feat: sync Secrets, ConfigMaps and PersistentVolumesClaims to users namespaces

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-01-24 12:12:52 +01:00
Igor Vinokur 7c7bd4f796
Add Kubernetes host to the no proxy list (#1800)
Add Kubernetes host to the no proxy list
2024-01-18 20:06:16 +02:00
Anatolii Bazko d99f8923f8
feat: Advanced authorization (#1789)
* feat: Advanced authorization

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-12-04 17:09:27 +01:00
Ilya Buziuk 67fd655d9f fix: Removing '-Dcom.redhat.fips=false' from the default JAVA_OPTS
Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>
2023-11-22 19:07:09 +01:00
Anatolii Bazko afa38e288c
feat: Allow to mount secrets into che containers as subpath (#1788)
* feat: Allow to mount secrets into che containers as subpath

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* feat: Allow to mount configmaps into che containers as subpath

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

---------

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-11-22 12:56:54 +01:00
Anatolii Bazko a4e19ead9d
chore: Update dev resources (#1774)
* chore: Update dev resources

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-11-02 15:16:31 +01:00
Samantha Dawley 95351dfad4
Updating go (to match Dockerfile) and golang.org/x/net (#1772)
* Updating go and golang.org/x/net

* Add vendor updates

* Reverting change of go version since tidy only supports 1.18

* Update additional files to use go 1.19.13

* ran update-go-dependencies

* run 'make fmt' to fix formatting issues

Change-Id: I6280c8b6851d83ec69d7d9898ae48ae583dc2dfe
Signed-off-by: Nick Boldt <nboldt@redhat.com>

---------

Signed-off-by: Nick Boldt <nboldt@redhat.com>
Co-authored-by: Nick Boldt <nboldt@redhat.com>
2023-10-31 16:48:38 +01:00
Anatolii Bazko bdfe80f843
feat: Allow to configure 2 github providers simultaneously (#1773)
* feat: Allow to configure 2 github providers simultaneously

Signed-off-by: Anatolii Bazko <abazko@redhat.com>


---------

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-10-30 09:31:50 +01:00
Angel Misevski 851f110311 Add documentation on why proxy configuration is disabled in DWO
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2023-10-19 13:10:10 -04:00
Angel Misevski 387f676773 Disable DWO's workspace proxy handling when proxy configuration is detected
If we allow the DevWorkspace Operator to handle proxy settings for workspaces,
it will add proxy environment variables to workspace containers with the
values it detects on the cluster (or through its own
DevWorkspaceOperatorConfig)

Since these environment variables are defined in the deployment yaml,
their values override values for proxy environment variables defined by
the automount 'proxy-config' configmap.

To avoid this, we configure DWO to not set any proxy settings for
workspaces we manage.

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2023-10-19 13:10:10 -04:00
Anatolii Bazko a75d1857cc
feat: Allow to configure CookieExpire timeframe (#1760)
* feat: Allow to configure CookieExpire timeframe

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-09-29 16:19:31 +02:00
David Kwon 328a2dff18
Add attributes to set gateway container log level in Che CR (#1748)
feat: set traefik and kube-rbac-proxy log level in CR

Signed-off-by: dkwon17 <dakwon@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2023-09-13 15:43:42 -04:00
Anatolii Bazko 72e7852712
chore: Allow che-dasbhoard SA to read ConfigMap in eclipse-che namespace (#1749)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-09-04 17:33:31 +02:00
Anatolii Bazko 6cf8df2b86
feat: Allow to configure ImagePullPolicyt for a user workspace (#1747)
* fear: Allow to configure ImagePullPolicy for a user workspace

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-08-23 09:50:26 +02:00
Anatolii Bazko ea78a2ceb7
chore: operator should not revert readiness and liveness prob configurations (#1743)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-08-16 08:08:45 +02:00
Andrew O 1bd44bdb28
add pod & container security context Che Cluster Fields (#1729)
* feat: add Che Cluster CR fields for pod & container security context

Also modify devEnvironments.disableContainerBuildCapabilities field documentation
to mention it overrides devEnvironments.security.containerSecurityContext
when set to false.

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* feat: configure DWOC pod & container security context from Che Cluster CR

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: Add tests for DWOC pod & security context configuration

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: update dev resources for Che Cluster CR devEnvironments.security field

Also updates dev resources for devEnvironments.disableContainerBuildCapabilities
field documentation.

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: split DevWorkspaceConfig tests into seperate functions

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: clean up DevWorkspaceConfig container builds tests

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: clean up unused error in DevWorkspaceOperatorConfig reconciler

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

---------

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
2023-08-10 16:54:52 +02:00
Andrew Obuchowicz 93691bb289 chore: add tests for configuring persistent workspace home directory config
Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
2023-07-27 15:35:10 +02:00
Andrew Obuchowicz 17ea193f27 feat: allow configuring persistent workspace home directory
Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
2023-07-27 15:35:10 +02:00
Anatolii Bazko c4188e10d8
fix: Downstream tests (#1727)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-07-10 17:41:24 +02:00
Anatolii Bazko 42a4363251
chore: Get rid of mounting CHE_GIT_SELF__SIGNED__CERT__HOST and CHE_GIT_SELF__SIGNED__CERT into che-server pod (#1723)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-07-10 15:50:51 +02:00
Anatolii Bazko 1bf8dde7b6
fix: Disable container build capabilities on Kubernetes (#1719)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-07-05 12:18:53 +02:00
Anatolii Bazko 4db565cb8e
fix: Don't clean up `openVSXURL` on installation (#1716)
* fix: `CheClusterDefaultsCleaner` does not clean up CheCluster CR values on a fresh installation

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-07-04 13:49:08 +02:00
Anatolii Bazko 94934bfe17
fix: Getting branding assets from Eclipse Che Dashboard should not require authentiction (#1708)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-06-15 13:58:24 +02:00
Angel Misevski d748431b2b [fix] Remove project clone config from DevWorkspace when unset
Removing the last field from a CheCluster's
devEnvironments.projectCloneContainer results in the change not being
propagated to the DevWorkspaceOperatorConfig.

Instead, if the CheCluster's field is unset, the
DevWorkspaceOperatorConfig's corresponding field should also be unset.

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2023-06-09 16:56:22 -04:00
Angel Misevski 02ce7749f0
Add fields for configuring project clone container to CheCluster CRD (#1687)
* Update devworkspace-operator dependency version to v0.21.0

Update devworkspace-operator dependency to v0.21.0 and update vendor dir

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Add project clone container config field to CheCluster CR

Add field .spec.devEnvironments.projectCloneContainer to allow
configuring image, env, resources, and pull policy for the project clone
container.

This change reuses the existing Container struct for storing this
config, which means that

* The name field is ignored (it appears to be a discriminator for the
  Deployment struct's containers[] field
* Defaults are handled differently:
  * Default imagePullPolicy is the general pull policy for DWO, with
    default value "Always" (instead of depending on tag as documented)
  * Resource requirements set to "0" are interpreted as "do not set this
    field"

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Add reconcile step that syncs CheCluster project clone to DevWorkspace

Sync the field CheCluster.devEnvironments.projectCloneConfig to the
DevWorkspaceOperatorConfig owned by the operator.

Update tests to cover new functionality.

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

---------

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2023-05-31 09:58:50 +03:00
Anatolii Bazko be2afadd93
chore: Add permissions to user to update and patch deployment/service/pvc (#1691)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-29 09:27:42 +03:00
Anatolii Bazko ae66d5c51d
fix: probePath for plugin and devfile registries deployments (#1690)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-26 16:38:15 +03:00
Anatolii Bazko 109d3c2ce1
fix: NPE in deploy.OverrideDeployment func (#1689)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-26 12:33:53 +03:00
Anatolii Bazko 97f6177500
feat: Set empty CPU limits when possible (#1686)
* feat: Set empty CPU limits when possible

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-25 17:20:44 +03:00
Anatolii Bazko b31b92b137
feat: Allow to configure OpenShift OAuth scope (#1685)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-24 10:17:31 +03:00
Anatolii Bazko 47d5ae3f05
chore: Remove `spec.components.database` and `status.postgresVersion` fields (#1684)
* chore: Remove spec.components.database and status.postgresVersion fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>


---------

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-24 09:07:54 +03:00
Angel Misevski 0c1eed6b78 Update Che Gateway default resources to match previous values
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2023-05-04 16:50:24 -04:00
Mykhailo Kuznietsov b9d8ce34b5
feat: add ability to override Gateway container in devEnvironments (#1639)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Angel Misevski <amisevsk@redhat.com>

---------

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Angel Misevski <amisevsk@redhat.com>
2023-04-25 17:18:38 +03:00
Anatolii Bazko c927cac2bf
feat: allow to specify IngressClassName (#1669)
* feat: allow to specify IngressClassName

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-04-25 08:50:07 +03:00
Andrew O a98d18233e
feat: configure workspace deployment strategy with CheCluster CR (#1666)
* feat: configure workspace deployment strategy with CheCluster CR

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: add tests for configuring workspace deployment strategy

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* chore: update dev resources for devEnvironments.DeploymentStrategy

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

---------

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
2023-04-25 08:43:55 +03:00
Anatolii Bazko 4bcc78a27a
feat: Allow to configure user custom roles (#1663)
* feat: Allow to configure user custom roles without duplicating default ones

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-04-21 14:52:05 +03:00
Andrew O 5bd0cdc19a
feat: configure DWOC ServiceAccount tokens from devEnvironments.serviceAccountTokens (#1643)
* feat: configure DWOC ServiceAccount tokens from devEnvironments.serviceAccountTokens

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
2023-04-17 16:49:09 +03:00
Anatolii Bazko fb6bccfd61
feat: Update Dev Workspace Operator v0.20.0 (#1660)
* feat: Update Dev Workspace Operator v0.20.0

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Restore replaces in go.mod

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Restore replaces in go.mod

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: update DEPENDENCIES.md (#1661)

Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>

* Update DEPENDENCIES.md

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

---------

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Andrew Obuchowicz <aobuchow@redhat.com>
Co-authored-by: Andrew O <aobuchow@redhat.com>
2023-04-14 16:14:30 +03:00
Anatolii Bazko a1bb81f67c
feat: allow not to set resources requests/limits (#1656)
* feat: allow not to set resources requests/limits

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-04-12 15:52:52 +03:00
Anatolii Bazko 5d582d135c
fix: For update of existing installations we should not change the value of disableBuildCapabilities (#1654)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-04-05 15:14:05 +03:00
Anatolii Bazko 3a61595a99
chore: Adapt tests for downstream (#1652)
* chore: Adapt tests for downstream

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* make fmt

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

---------

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-04-04 08:58:40 +03:00