92d24388ec
chore: Remove obsolete code after switching to Dev Workspace enabled ( #1291 )
...
* chore: Remove keycloak deployment
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Get rid of codebase related to spec.devWorkspace.enable field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to auth.initialOpenShiftOAuthUser field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to some auth.* fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to some auth.openShiftoAuth field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to auth.nativeUserMode field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server.tlsSupport and server.*ClusterSVCNames fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server expouse strategy fields
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove deprecated code
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Remove code related to server.tlsSupport and server.cheFlavor field
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update helm charts
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: Update bundle
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
* chore: remove RELATED_IMAGE_keycloak
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-01-24 09:52:15 +02:00
3262a5acc1
refactor: Do not reconcile on any error inside finalizers ( #1252 )
...
Queue a new reconcile loop on any finalization error, but do not stop current
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-15 16:42:17 +02:00
0e72bb2ca8
Sync the certificate from che-git-self-signed-cert to user namespaces ( #1222 )
...
feat: Sync the git tls certificate configuration in a format digestable by DWO.
Other slightly related changes:
* Make sure the version content annotations survive across multiple conversions
between v1 and v2alpha1.
* Add DWO watch labels so that our stuff is picked up.
* irifrance/gini has moved to go-air/gini
2021-12-15 15:41:55 +01:00
e960ba2e56
Make backup / restore of Che installation work with devworkspace mode ( #1247 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-10 10:32:33 +02:00
608bff0187
chore: checluster controller refactoring ( #1244 )
...
* chore: Refactoring checluster controller
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-09 14:13:59 +02:00
ec8e825ecb
fix: Fix read termination timeout for all namespaces mode. ( #1235 )
...
* fix: Fix read termination timeout for all namespaces mode.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-12-08 21:15:04 +02:00
58bba54964
chore: permissions refactoring ( #1202 )
...
* chore: permissions refactoting
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
Co-authored-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 16:56:37 +02:00
afa32e66ec
Drop databases before restore. Do not migrate objects related to backup. ( #1227 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 12:20:40 +02:00
b4511e3cf9
fix: delegate permissions to `get, list, watch` `pods/log` resources ( #1212 )
...
* fix: delegate permissions to get, list, watch pods/log resources
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-06 15:25:57 +02:00
88cb1ed7ac
feat: native auth kube ( #1185 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-12-03 12:20:46 +01:00
474b0c8421
fix: don't require `app.kubernetes.io/instance:che` label on k8s object to trigger a reconcile ( #1204 )
...
* fix: don't require 'app.kubernetes.io/instance:che' label
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-30 15:39:46 +02:00
1e9fa6a078
chore: Refactor certificates reconsiler ( #1171 )
...
* chore: Refactor certificates reconsiler
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-26 13:50:59 +02:00
2da1195bd9
fix: build downstream ( #1194 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-23 09:17:47 +02:00
ce4e107719
Apply part-of label to devworkspace resources managed by Che Operator ( #1189 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-22 16:45:46 +02:00
021031f6df
feat: Use custom cache function in Che Operator ( #1166 )
...
Use custom cache function to limit memory consumption of operator
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-19 18:35:22 +02:00
a434cc5953
fix: Add patch, list, update verbs to the configmap role ( #1180 )
...
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-11-18 15:49:54 +02:00
b4930b5054
fix: Fix license headers ( #1170 )
...
* Fix license headers.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-16 11:17:18 +02:00
8bdbbc1dfa
chore: Refactoring OpenShiftOAuth ( #1167 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-10 17:41:07 +02:00
e1b4541ed2
chore: Refactoring OpenShift Initial user reconciler ( #1152 )
...
* chore: refactoring OpenShift OAuth User
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Co-authored-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-04 17:42:49 +02:00
cb17fce445
Use cached and non-cached clients in backup/restore controllers ( #1156 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-21 16:49:57 +03:00
a889b56a9d
fix: Set CHE_INFRA_KUBERNETES_ENABLE__UNSUPPORTED__K8S: true when devworkspace is enabled on k8s ( #1155 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-21 15:33:24 +03:00
f838cf48d2
checontroller refactoring ( #1138 )
...
* chore: Introduce reconcilemanager, update status when reconciliation failed.
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-19 10:56:49 +03:00
06aa35c92c
fix: configure runtime controller with namespace event filter ( #1146 )
...
* fix: configure runtime controller with namespace event filter
* Increase memory limit to 1Gi
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-18 13:53:52 +03:00
80583a19c0
Add init containers to start Che correctly after node restart ( #1139 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-13 16:15:11 +03:00
434db641f7
fix: Print 'More than one checluster Custom Resource found' warning only there are more than 1 CR ( #1140 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-13 12:47:43 +03:00
d104845f89
feat: accessible workspace healthz endpoint ( #1119 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-10-11 19:22:36 +02:00
fcbc80e79e
fix: do not start DWR controller if devworkspaces are not enabled ( #1133 )
...
* fix: do not start DWR controller if devworkspaces are not enabled
2021-10-09 09:28:34 +03:00
d44546bc86
fix: import ca-bunle even if there are several checluster CR (non all-namespace mode) ( #1135 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-09 09:27:27 +03:00
3cab035d89
Read trusted CA configmaps only from installation namespace ( #1125 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-06 12:49:44 +03:00
ce230cde18
feat: don't take control over DWO which is not managed by Che ( #1085 )
...
* feat: don't take control over DWO which is not managed by Che
2021-10-01 21:51:35 +03:00
3952a53188
Propagate plugin registry URL to plugin registry configmap ( #1118 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-01 19:35:53 +03:00
b8cc02bf9a
feat: Update controller runtime ( #1064 )
...
* Update controller runtime for che-operator and related deps.
Controller runtime update to version v0.9.5
go-client update to version v0.21.3
Udaptated tests to the new controller runtime and go-client.
Use newer image puller.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-10-01 14:54:37 +03:00
f8c3c2e138
Limit list to current namespace for backup and restore ( #1106 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-01 10:22:40 +03:00
53970009dd
fix: delete KIP finalizer and KIP operator on CheCluster CR delete ( #1082 )
...
Signed-off-by: David Kwon <dakwon@redhat.com>
2021-09-29 11:28:54 -04:00
b74443cc8b
Create backup on every Che update ( #1097 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-29 17:18:30 +03:00
6e72d0565f
Fix restore process if keycloak is already deleted ( #1095 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-29 11:08:22 +03:00
d52d5adb16
Set the type and immutability of the secret when copying the self-signed-cert to the user's namespace. ( #1094 )
...
* fix: Set the type and immutability of the secret when copying the self-signed-cert to the user's namespace.
* update the resources
* fix: the events on objects in checluster namespace now properly trigger
reconciliation of all known namespaces.
* Update resources and remove the errorneous \n from the generated yaml.
2021-09-28 11:05:37 +03:00
7a95792c1c
Do not automatically backup to internal backup server if it doesn't exist ( #1090 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-24 17:14:55 +03:00
bd8e5d0d07
feat: define routing paths for che-server to improve return http codes ( #1076 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-09-24 14:52:30 +03:00
f4d80166ed
feat: Add Traefik gateway container CPU & RAM request/limit resources ( #1088 )
...
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-09-24 13:14:58 +03:00
08b26bc573
fix: internal backup server url ( #1072 )
...
Make internal backup server accessible in all namespaces mode
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-22 13:12:33 +03:00
5e657f876b
feat: Syncing of proxy settings and self-signed cert to the user's workspace namespace ( #1027 )
...
Syncing of proxy settings and self-signed cert to the user's workspace namespace.
Co-authored-by: Michal Vala <mvala@redhat.com>
Co-authored-by: Serhii Leshchenko <sleshche@redhat.com>
2021-09-21 21:00:53 +02:00
2ad6c4fd6a
feat: secure workspace services ( #1045 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-09-17 12:37:02 +02:00
a1f30c3356
Create backup on each update ( #1055 )
...
Create backup on update operator
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-15 15:38:58 +03:00
753eafe88c
fix: don't add intial OpenShift OAuth user if native user mode is on ( #1066 )
...
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-09-14 16:54:35 +03:00
8b1dd1527a
feat: Update keycloak from 6.0.1 to 15 ( #1015 )
...
* Use keycloak 15. Add separated option to debug keycloak server.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-09-10 12:36:00 +03:00
f64dcf4bea
Fix kubernetes gateway rules creation
2021-09-09 17:29:27 +03:00
8e0966bed3
Drops single-user mode ( #1043 )
...
* chore: drop single-user support
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-09-09 13:42:41 +03:00
c36958d8ea
fix: Set Che host url in the CR status when Che server deployment is ready ( #1040 )
...
* fix: Set Che host url in the CR status when Che server deployment is ready.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-09-02 17:14:09 +03:00
9da9458dd1
Make dashboard finalize its cluster rbac
2021-08-30 13:35:41 +03:00
Anatolii Bazko