192216bf44
Check for Kubernetes secret name in oAuthSecret, fallback to plain text ( #1836 )
...
* Check for Kubernetes secret name in oAuthSecret, fallback to plain text
* Removed logging, added test cases
* Update documentation
* cleaning up formatting
* update-dev-resources
2024-05-14 16:54:20 +02:00
32974f029e
feat: Configure probes for che-gateway containers ( #1825 )
...
* feat: Configure probes for che-gateway containers
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-04-17 15:22:41 +02:00
44c3582f4f
feat: Don't reset the number of replicas on deployment update ( #1804 )
...
* feat: Support HorizontalPodAutoscaler
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2024-01-29 15:10:56 +01:00
a4e19ead9d
chore: Update dev resources ( #1774 )
...
* chore: Update dev resources
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-11-02 15:16:31 +01:00
95351dfad4
Updating go (to match Dockerfile) and golang.org/x/net ( #1772 )
...
* Updating go and golang.org/x/net
* Add vendor updates
* Reverting change of go version since tidy only supports 1.18
* Update additional files to use go 1.19.13
* ran update-go-dependencies
* run 'make fmt' to fix formatting issues
Change-Id: I6280c8b6851d83ec69d7d9898ae48ae583dc2dfe
Signed-off-by: Nick Boldt <nboldt@redhat.com>
---------
Signed-off-by: Nick Boldt <nboldt@redhat.com>
Co-authored-by: Nick Boldt <nboldt@redhat.com>
2023-10-31 16:48:38 +01:00
a75d1857cc
feat: Allow to configure CookieExpire timeframe ( #1760 )
...
* feat: Allow to configure CookieExpire timeframe
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-09-29 16:19:31 +02:00
328a2dff18
Add attributes to set gateway container log level in Che CR ( #1748 )
...
feat: set traefik and kube-rbac-proxy log level in CR
Signed-off-by: dkwon17 <dakwon@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2023-09-13 15:43:42 -04:00
94934bfe17
fix: Getting branding assets from Eclipse Che Dashboard should not require authentiction ( #1708 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-06-15 13:58:24 +02:00
97f6177500
feat: Set empty CPU limits when possible ( #1686 )
...
* feat: Set empty CPU limits when possible
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-25 17:20:44 +03:00
b31b92b137
feat: Allow to configure OpenShift OAuth scope ( #1685 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2023-05-24 10:17:31 +03:00
e9e578ab15
Add retry middleware to retry connecting to mainurl if connection failed ( #1579 )
...
Signed-off-by: David Kwon <dakwon@redhat.com>
2022-12-16 10:22:28 -05:00
775a979a05
chore: Do not set default openVSXURL if operator is being deployed in… ( #1544 )
...
* chore: Do not set default openVSXURL if operator is being deployed in airgap environment
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-10-26 10:00:37 +03:00
152c8211a6
chore: declare pod securityContext explicitly ( #1458 )
...
* feat: ensure pod security standard
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-08-01 10:00:42 +03:00
b363587f45
fix: Get OAuthClient by its name instead of label selector ( #1428 )
...
* fix: Get OAuthClient
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-07-02 14:08:02 +03:00
aa0806fde4
chore: Refactoring ( #1411 )
...
* chore: Refactoring
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-06-24 19:34:27 +03:00
c364ba4e93
feat(oauth-proxy): configuration enhancements for k8s config ( #1400 )
...
* feat(oauth-proxy): configuration enhancements for k8s config
2022-06-22 09:51:43 +03:00
c87253d34e
Use errors middleware to redirect workspace url to dashboard on 5xx error code ( #1392 )
...
* Use errors middleware to redirect workspace url to dashboard on 5xx error code
Signed-off-by: David Kwon <dakwon@redhat.com>
2022-06-16 09:44:28 -04:00
0bc1049017
feat: CheCluster API v2 ( #1324 )
...
* feat: CheCluster API v2
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-06-09 11:35:01 +03:00
16c92ec513
chore: Don't update CheCluster CR spec to set OAuthClientName and OAu… ( #1393 )
...
* chore: Don't update CheCluster CR spec to set OAuthClientName and OAuthClientSecret fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-28 13:59:05 +03:00
cce1eccbb4
fix: OpenShift oauth proxy config
...
Signed-off-by: Oleksii Orel <oorel@redhat.com>
2022-05-09 16:04:46 +03:00
73bbeaafea
fix: Respect labels for workspace routes set in spec.server.CustomChe… ( #1368 )
...
* fix: Respect labels for workspace routes set in spec.server.CustomCheProperties[CHE_INFRA_OPENSHIFT_ROUTE_LABELS]
* Restart pods when configuration changed
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-02 13:10:06 +03:00
5415da9c4c
fix: Allow to sync deployments when selector changed ( #1361 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-04-27 09:32:40 +03:00
96574bb600
Allow loading preload page without authorization ( #1360 )
...
* feat: remove entry point from server getaway
Signed-off-by: Oleksii Orel <oorel@redhat.com>
* feat: add entry point for dashboard getaway
Signed-off-by: Oleksii Orel <oorel@redhat.com>
* feat: allow loading preload page without authorization
Signed-off-by: Oleksii Orel <oorel@redhat.com>
2022-04-22 21:59:05 +03:00
d5928bdfe3
chore: Improve handling CheHost field ( #1348 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-17 15:06:40 +02:00
51002ea5f2
chore: don't update chehost in CheCluster spec ( #1340 )
...
* chore: don't update chehost in CheCluster spec
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* Add missing files
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-16 11:37:40 +02:00
4516e3bf79
fix: Propagate proxy config into oauth-proxy sidecar container ( #1317 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-02-03 19:05:02 +02:00
92d24388ec
chore: Remove obsolete code after switching to Dev Workspace enabled ( #1291 )
...
* chore: Remove keycloak deployment
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Get rid of codebase related to spec.devWorkspace.enable field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to auth.initialOpenShiftOAuthUser field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to some auth.* fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to some auth.openShiftoAuth field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to auth.nativeUserMode field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server.tlsSupport and server.*ClusterSVCNames fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server expouse strategy fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove deprecated code
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server.tlsSupport and server.cheFlavor field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update helm charts
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: remove RELATED_IMAGE_keycloak
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-01-24 09:52:15 +02:00
45722e2db5
fix: set resources for gateway containers ( #1276 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2022-01-04 10:52:04 +01:00
3262a5acc1
refactor: Do not reconcile on any error inside finalizers ( #1252 )
...
Queue a new reconcile loop on any finalization error, but do not stop current
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-15 16:42:17 +02:00
608bff0187
chore: checluster controller refactoring ( #1244 )
...
* chore: Refactoring checluster controller
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-09 14:13:59 +02:00
88cb1ed7ac
feat: native auth kube ( #1185 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-12-03 12:20:46 +01:00
021031f6df
feat: Use custom cache function in Che Operator ( #1166 )
...
Use custom cache function to limit memory consumption of operator
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-19 18:35:22 +02:00
b4930b5054
fix: Fix license headers ( #1170 )
...
* Fix license headers.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-16 11:17:18 +02:00
8bdbbc1dfa
chore: Refactoring OpenShiftOAuth ( #1167 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-10 17:41:07 +02:00
d104845f89
feat: accessible workspace healthz endpoint ( #1119 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-10-11 19:22:36 +02:00
b8cc02bf9a
feat: Update controller runtime ( #1064 )
...
* Update controller runtime for che-operator and related deps.
Controller runtime update to version v0.9.5
go-client update to version v0.21.3
Udaptated tests to the new controller runtime and go-client.
Use newer image puller.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-10-01 14:54:37 +03:00
1af912b6de
feat: Token validity check ( #1103 )
...
token validity check in native user mode on OpenShift.
2021-10-01 08:20:36 +02:00
bd8e5d0d07
feat: define routing paths for che-server to improve return http codes ( #1076 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-09-24 14:52:30 +03:00
8f9e6c3f65
fix: registries accessible without auth ( #1077 )
...
* fix: registries accessible without auth
Signed-off-by: Michal Vala <mvala@redhat.com>
* fix imports
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-09-17 16:45:02 +02:00
2ad6c4fd6a
feat: secure workspace services ( #1045 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-09-17 12:37:02 +02:00
b4686278e9
fix: Added defaults for Protocol ( #1054 )
2021-09-08 10:00:00 +03:00
491f711eca
Gh19707 secure workspace ( #1001 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-08-19 15:28:55 +02:00
bbb2b4766c
fix: nativeUserMode refresh cookie ( #1000 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-08-10 08:44:27 +02:00
6bf5c65a44
feat: Traefik plugin for header rewrite in nativeUserMode ( #938 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-07-21 13:43:32 +02:00
2fb2314f22
fix: Reuse ServiceDefaultDiffOpts for gateway service ( #950 )
...
* fix: Reuse ServiceDefaultDiffOpts for gateway service
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-07-20 14:08:37 +03:00
f555494a7d
feat: Newer operator sdk ( #826 )
...
* Define new dependencies. Update vendor folder. Use newer operator sdk v1.7.1.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-07-19 14:29:11 +03:00
b9ccdb73d8
feat: native user authentication ( #861 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2021-07-02 16:11:58 +02:00
78d3585b7c
Refactor exposure to have an ability share host among components ( #760 )
...
* Refactor exposure to have an ability share host among components
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2021-04-09 12:09:59 +03:00
268899efa6
Fix getting exposure strategy in case of k8s ( #766 )
...
* Fix getting exposure strategy in case of k8s
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-04-09 10:33:15 +03:00
b12b6e505f
Merge branch 'master' into dwo_sh
...
Signed-off-by: Flavius Lacatusu <flacatus@redhat.com>
2021-04-05 11:56:47 +02:00
Greg Guydo