Anatolii Bazko
47a01d7276
Automatically propagate ca-certs configmap content into server and identity provider ( #487 )
...
* Automatically propagate serverTrustStoreConfigMap context to server and identity provider
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-10-13 14:04:20 +03:00
Nick Boldt
c5ab66b099
CRW-1254 can we use the standard,... ( #484 )
...
* CRW-1254 can we use the standard, non-deprecated registry registry.redhat.io instead of registry.access.redhat.com for ubi minimal images? also we should use the safer path /ubi8/ubi-minimal vs. /ubi8-minimal so that OCP 4.x airgap mirroring works
Change-Id: I04112ce8cf9a3311872e7fb295fd742d75055d06
Signed-off-by: nickboldt <nboldt@redhat.com>
* revert to registry.access.redhat.com, but keep ubi8/ubi-minimal instead of ubi8-minimal
Change-Id: I60370daa74b03c8370a912068f5ce5d8f6cbee29
Signed-off-by: nickboldt <nboldt@redhat.com>
* include generated che-operator.clusterserviceversion.yaml files thanks to ./olm/update-nightly-bundle.sh and operator-sdk 0.10.1
Change-Id: I9718547051a918c2a91fa49645521655c8d3dc9a
Signed-off-by: nickboldt <nboldt@redhat.com>
* Update csv files
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-10-07 10:32:29 +03:00
Serhii Leshchenko
cc93735274
Refactor deploy package ( #474 )
...
* Move exposure logic to one place & Group deploy classes
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-10-05 17:34:43 +03:00
Vitalii Parfonov
6953a195ed
Add keycloak admin username and password to the che deployment ( #446 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2020-10-01 16:16:50 +03:00
Anatolii Bazko
37e6a9d18f
Define labels for route/ingress ( #449 )
...
* Define labels for route/ingress
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-09-25 14:17:19 +03:00
Nick Boldt
f0545195f8
CRW-1229 use ArchitectureDependentEnv values instead of amd64-specific ones to match values set in defaults.go ( #454 )
...
Change-Id: I88022bd2b4faa09c1cbf489d75b198ddc98f19c1
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-09-21 10:08:31 -04:00
Lukas Krejci
bda65a4e40
Manage the Traefik gateway for implementing single host on OpenShift ( #378 )
...
Co-authored-by: Michal Vala <michal.vala@gmail.com>
2020-09-16 15:21:57 +02:00
Anatolii Bazko
c824447348
Add validation for username field to be dns compatible ( #444 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-09-16 12:26:09 +03:00
Mykola Morhun
ef0a2fa705
Correctly convert wildcards in nonProxyHosts for JAVA_OPTS ( #440 )
...
* Correctly convert wildcards in nonProxyHosts for JAVA_OPTS
* Fix propogation of wildcard non-proxy hosts into Keycloak
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-09-16 11:46:52 +03:00
Serhii Leshchenko
4c9b256619
Fix reconciling of single user Che ( #432 )
2020-09-08 16:23:30 +03:00
Mykola Morhun
aeef0ef21a
Make additional requiest for test route certs if first one fails without proxy ( #424 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-09-02 11:53:51 +03:00
Anatolii Bazko
8ebde182a0
Add more checks to tls certificates into che configmap ( #425 )
...
* Add more checks to tls certificates into che configmap
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-09-02 11:02:41 +03:00
Mykola Morhun
4d77be4117
Add server TLS key and cert into Che configmap if a separate namespace for Che workspaces is configured ( #421 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-08-31 14:23:35 +03:00
Flavius Lacatusu
ed6594528c
Create a general deployContext to pass to all functions
...
Signed-off-by: Flavius Lacatusu <flacatus@redhat.com>
2020-08-27 11:30:20 +02:00
Mykola Morhun
4c138d82b8
Do not use proxy settings for test route while getting cluster CA certificate ( #409 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-08-19 17:10:49 +03:00
Michal Vala
611738366f
don't set probes when debug=true ( #399 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2020-08-13 14:31:39 +02:00
Anatolii Bazko
bcf77d451b
Allow to customize cheHost ( #380 )
...
* Allow to customize cheHost
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-08-12 11:21:01 +03:00
Anatolii Bazko
68764c888d
Use architecture dependent images ( #398 )
...
* Use architecture dependent images
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-08-10 09:01:22 +03:00
Anatolii Bazko
08c51a4e11
Ignore the error if test route already exists ( #383 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-08-04 14:39:43 +03:00
Anatolii Bazko
9ed6e3789e
Remove secrets when checluster is removed ( #379 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-08-03 10:59:53 +03:00
Anatolii Bazko
c64d61faf4
Allow to use external PostgreSQL ( #371 )
...
* Allow to use exteranl PostgreSQL
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-07-30 09:06:27 +03:00
Anatolii Bazko
006304de41
Update the configmap property name ( #356 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-07-23 14:21:09 +03:00
Anatolii Bazko
26c69782bd
Use the default ingress strategy if there is no value in CR ( #346 )
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-07-16 11:16:02 +03:00
Anatolii Bazko
96916bb790
Add truststore config map name to che config map ( #344 )
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-07-15 18:39:32 +03:00
Anatolii Bazko
b193773469
Fix deployment Eclipse Che with single-host strategy ( #341 )
...
* Fix deployment Eclipse Che with single-host strategy
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-07-15 16:20:44 +03:00
Max Shaposhnik
ec7e316c2e
Added test check
2020-07-09 09:31:40 +03:00
Max Shaposhnik
38599b0e95
Add property to allow use authenticator for proxies;
2020-07-08 23:16:18 +03:00
Anatolii Bazko
110149a5c7
Respect openshift cluster wide proxy ( #272 )
...
* Respect OpenShift cluster wide proxy
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-07-08 16:08:20 +03:00
Oleksandr Andriienko
adfe698031
feature: Use image digest in csv ( #274 )
...
* Use image digest in the released csvs. Use correct image for e2e tests. Use correct operator image for olm tests.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-07-08 10:43:35 +03:00
Mykola Morhun
912fd52fc4
Implement autodetetion for self-signed certificate flag ( #301 )
...
Implement autodecetion for self-signed certificate flag
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-06-15 11:01:46 +03:00
Anatoliy Bazko
4fa8121f76
Do not read env var specific to k8s infra
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-06-02 15:15:42 +03:00
Anatoliy Bazko
dbf0fca9c3
Fix certs paths
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-06-02 10:40:36 +03:00
Anatoliy Bazko
df91fa33c7
Propogate custom CA certificate into Keycloak trust store
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-29 16:33:25 +03:00
Anatoliy Bazko
4ce1c473cb
Update ssl_requires to NONE
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-29 15:11:12 +03:00
Anatoliy Bazko
d6dcc1864e
Revert "Merge pull request #273 from eclipse/sslrequired"
...
This reverts commit 1a274ab172 , reversing
changes made to a0f108dcac .
2020-05-27 15:22:23 +03:00
Anatoliy Bazko
eb57944cc1
Update keycloak db to turn sslRequird to none
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-22 12:36:20 +03:00
Anatoliy Bazko
b9942aacff
Move defaults to env var
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-13 08:19:17 +03:00
Anatoliy Bazko
69a6007c56
Update make-release.sh, set nightly tags for master
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-07 13:34:52 +03:00
Anatoliy Bazko
5f8d79810c
Port 7.12.1 csv to master
...
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-05-02 15:48:52 +03:00
Sergii Kabashniuk
25c9bdb853
More effective usage of heap && Make Che server JAVA_OPTS sutable for Java 8 and Java 11 ( #224 )
...
For 1 GB container 842.94M instead of 455.50M
docker run -m 1GB openjdk:8u242-jre-slim java \
-XX:MaxRAMPercentage=85.0 \
-XshowSettings:vm \
-version
VM settings:
Max. Heap Size (Estimated): 842.94M
Ergonomics Machine Class: server
Using VM: OpenJDK 64-Bit Server VM
openjdk version "1.8.0_242"
OpenJDK Runtime Environment (build 1.8.0_242-b08)
OpenJDK 64-Bit Server VM (build 25.242-b08, mixed mode)
docker run -m 1GB openjdk:8u242-jre-slim java \
-XX:MaxRAMFraction=2 -XX:+UseParallelGC -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20 -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -Dsun.zip.disableMemoryMapping=true -Xms20m \
-XshowSettings:vm \
-version
VM settings:
Min. Heap Size: 20.00M
Max. Heap Size (Estimated): 455.50M
Ergonomics Machine Class: server
Using VM: OpenJDK 64-Bit Server VM
openjdk version "1.8.0_242"
OpenJDK Runtime Environment (build 1.8.0_242-b08)
OpenJDK 64-Bit Server VM (build 25.242-b08, mixed mode)
2020-04-30 15:31:05 +02:00
Mykola Morhun
bc47b7b1af
Automate TLS secrets generation for Kubernetes family infrastructures ( #220 )
...
* Automate TLS secrets generation for Kubernetes family infrastructures
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-04-28 16:48:58 +03:00
Anatolii Bazko
e655435d5d
Release version 7.12.0 ( #228 )
...
* Update defaults tags to 7.12.0
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Update nightly olm files
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Release OLM files to 7.12.0
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Fix release script
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-04-24 14:14:20 +03:00
Anatolii Bazko
a8c155409d
Make che-operator non blocking ( #212 )
...
* Make che-operator non-blocking
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-04-10 17:19:14 +03:00
Anatolii Bazko
facc487a94
Take `WorkspaceNamespaceDefault` into account ... ( #217 ) ( #218 )
...
... even when OpenShift OAuth is enabled
This fixes issue https://github.com/eclipse/che/issues/16574
Signed-off-by: David Festal <dfestal@redhat.com>
Co-authored-by: David Festal <dfestal@redhat.com>
2020-04-09 16:42:42 +03:00
Anatolii Bazko
bbc7579a55
Release version 7.11.0 ( #215 )
...
* Update defaults tags to 7.11.0
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Update nightly olm files
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Release OLM files to 7.11.0
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Fix olm.sh
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
* Minor fixes of the release process
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-04-08 10:35:51 +03:00
Anatolii Bazko
fdaeb5e060
Store credentials into secrets instead of plain text of CheCluster CR fields ( #198 )
...
* Use secrets instead of plain text
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-03-25 09:57:36 +02:00
Anatolii Bazko
0952fa99a3
Port changes from 7.9.x to master ( #201 )
...
* Always add the devfile registry public URL env var (#192 )
This fixes the [CRW-710](https://issues.redhat.com/browse/CRW-710 ) blocker JIRA bug (blocking CRW 2.1 release)
Signed-off-by: David Festal <dfestal@redhat.com>
* Correctly propagate proxy settings in the operator and Keycloak (CRW-709) (#200 )
* Correctly propagate proxy settings in the operator and Keycloak .This fixes issue https://issues.redhat.com/browse/CRW-709
* Use the same Go release in PR checks as in the main Docker file to avoid a syntax arror in the PR check jobs
Signed-off-by: David Festal <dfestal@redhat.com>
* Refactoring
Co-authored-by: David Festal <dfestal@redhat.com>
2020-03-19 11:12:39 +02:00
Anatolii Bazko
016e7f11cd
Support single-user mode ( #185 )
...
* Support single-user mode
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-03-17 09:29:53 +02:00
Mykola Morhun
896d651e3c
Set default Che secret name in Che server config map if tlsSecretName is not specified in CR ( #194 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-03-13 17:44:00 +02:00
Mykola Morhun
716852f8a0
Refactor setting of tlsSecretName in NewIngress ( #193 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-03-13 12:43:44 +02:00