Commit Graph

89 Commits (cad643a6e5af2f85b9eebe8e5e7dbc5af50a0853)

Author SHA1 Message Date
Anatolii Bazko cad643a6e5
fix: dashboard ingress configuration with custom cheHost (#856)
* Secure che-dashboard ingress with spec.server.cheHostTLSSecret

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-06-07 18:08:33 +03:00
Anatolii Bazko eefe1952b4
chore(Dockerfile): Switch to go 1.15 (#848)
* Switch to go 1.15

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-05-28 11:19:14 +03:00
Anatolii Bazko d93e5e7320
Che Operator updates DWO and DWCO resources (#832)
* Che Operator updates DWO and DWCO resources

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-05-19 14:07:30 +03:00
Max Shaposhnik 7de21268be
Fix redirect URL-s for Che-public client to allow factory redirects; 2021-04-27 13:55:32 +03:00
Max Shaposhnik 302e470c43 Script fixups 2021-04-21 14:43:38 +03:00
Flavius Lacatusu 744acc1988
Fix DWO deployment in minikube (#789)
* Check `chemanagers` and `subscriptions` resources existence before requesting API.
* Fix bug with reading objects from FS

Signed-off-by: Flavius Lacatusu <flacatus@redhat.com>
2021-04-21 14:11:11 +03:00
Nick Boldt a033591526
to build in brew, and to be able to update FROM lines via updateBaseImages, need to have comment w/ URL and FROM line co-located; so move ARGs lower (#770)
Change-Id: I04a0ca3da4dc3e6d95236b7e280170ad608f3bf9
Signed-off-by: nickboldt <nboldt@redhat.com>
2021-04-13 08:51:50 -04:00
Lukas Krejci 92d317caf5
Use v1beta1 api for the chemanager crd. (#757)
* Fixes eclipse/che#19500. Use v1beta1 api for the chemanager crd.

* Update olm.
2021-04-07 10:49:01 +03:00
Nick Boldt 681303b223
bug(fix) don't install dnf as we don't need it (microdnf can do cve updates too) (#746)
* try installing with dnf as it supports modules (but microdnf does not?)

Change-Id: Ia1bd0f6aff78751c3570a23cf12b4d953850531b
Signed-off-by: nickboldt <nboldt@redhat.com>

* don't install dnf as we don't need it (microdnf can do cve updates too)

Change-Id: I9f36113905f082b3b7b27eb3fd08770826b66e61
Signed-off-by: nickboldt <nboldt@redhat.com>
2021-03-30 09:52:24 +03:00
Nick Boldt ef794e2384
CRW-1655 unpack zips to generic folders as we can't do COPY with wildcard folders (#735)
* Draft: CRW-1655 unpack zips to generic folders as we can't do COPY with wildcard folders

Change-Id: Ifd3d0a6d3167af760bae5ea72ffde79ba7354664
Signed-off-by: nickboldt <nboldt@redhat.com>

* also update all rpms, not just specific ones (that might no longer exist)

Change-Id: I6c7b21d65572b6de7ea2895020b0581c05dda918
Signed-off-by: nickboldt <nboldt@redhat.com>

* install httpd-tools for /usr/bin/htpasswd; install dnf so we can update RPMs w/ latest CVE fixes

Change-Id: Ic4c9ba91d5bfcd9fa919adb697528dea050225e7
Signed-off-by: nickboldt <nboldt@redhat.com>
2021-03-29 09:59:02 -04:00
Nick Boldt 7b09ae0fce
document differences between Che operator and CRW operator build process (CRW-1655) (#726)
Change-Id: If2731ead18ca8a90506b34c1911a43e8b17f4498
Signed-off-by: nickboldt <nboldt@redhat.com>
2021-03-22 09:13:13 +02:00
Sergii Kabashniuk e0ff1bfbd9
Che Operator should be able to install the Devworkspace che operator (#707)
Teach Che operator to install devworkspace-che-operator alongside with devworkspace-operator when devworkspaces are enabled.

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Sergii Kabashniuk <skabashn@redhat.com>
Co-authored-by: Lukas Krejci <lkrejci@redhat.com>
Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2021-03-11 09:13:16 +01:00
Anatolii Bazko 052a637430
Che operator should be able to install DevWorkspace operator (#689)
* Che operator should be able to install DevWorkspace operator

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fix typo

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add missing roles

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update cluster roles

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update nightly bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fixes

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add missing files

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fixes

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fix tests

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add tests

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update nightly bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Improvements

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add logs

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fix test

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Fix tests

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update nightly bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update clusterroles

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update test

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update test

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update nightly bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-03-04 21:59:34 +02:00
Nick Boldt ce614f70e3
update to latest base images (#692)
Change-Id: I341ca6fa5c6ae34e0c3d4e18704f6c8c65f92de7
Signed-off-by: nickboldt <nboldt@redhat.com>
2021-03-02 12:19:15 +02:00
Anatolii Bazko 75da259f72
Allow to configure github and bitbucket oauth config (#677)
* Allow to configure github and bitbucket oauth config

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-02-17 14:32:04 +02:00
Oleksandr Andriienko c6c7299a17 Merge remote-tracking branch 'upstream/master' into createInitialOpenshift4UserForOAuth 2021-01-28 17:20:35 +02:00
Anatolii Bazko 482155b7e2
Automate the setup of github identity provider with internal keycloak (#589)
* GitHub identity provider provision

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-01-13 17:06:54 +02:00
Anatolii Bazko 5ae85f9ac7
Revert golang version to 1.13 (#617)
* Revert golang to 1.13

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-01-11 13:14:17 +02:00
Nick Boldt 1c4030a696
latest go in devtools/go-toolset-rhel7 is go... (#613)
* latest go in devtools/go-toolset-rhel7 is go 1.14, so use that

Change-Id: Ib2ac4b85ebbf210e887012edb179a3146229df78
Signed-off-by: nickboldt <nboldt@redhat.com>

* Update go.mod

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Update modules.txt

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2021-01-08 09:24:49 -05:00
Oleksandr Andriienko 81d0cb603b Create initial Openshift 4 user for oAuth.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-12-27 21:36:33 +02:00
Oleksandr Andriienko ae79476106
Improve oauth handling. (#551)
* Improve oauth handling.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-12-21 10:38:37 +02:00
Oleksandr Andriienko b893a2785a
Revert add bundle commit github action. We can't use it for protected master branch. (#523)
* Revert add bundle commit github action. We can't use it for protected master branch.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Update nightly bundle.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Pin ubuntu version for push github action.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-11-07 00:43:09 +02:00
Nick Boldt 227046459c
fix: Revert "CRW-1254 can we use the standard ubi URLs" (turns out no, it breaks stuff); also bump versions to 7.20.0-13.nightly (#494)
* Revert "CRW-1254 can we use the standard,... (#484)"

This reverts commit c5ab66b099.

* bump versions to 7.20.0-13.nightly

Change-Id: I7006cbb4676157e0837e1cd5df702c4165bb5c91
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-10-13 12:06:49 -04:00
Nick Boldt c5ab66b099
CRW-1254 can we use the standard,... (#484)
* CRW-1254 can we use the standard, non-deprecated registry registry.redhat.io instead of registry.access.redhat.com for ubi minimal images? also we should use the safer path /ubi8/ubi-minimal vs. /ubi8-minimal so that OCP 4.x airgap mirroring works

Change-Id: I04112ce8cf9a3311872e7fb295fd742d75055d06
Signed-off-by: nickboldt <nboldt@redhat.com>

* revert to registry.access.redhat.com, but keep ubi8/ubi-minimal instead of ubi8-minimal

Change-Id: I60370daa74b03c8370a912068f5ce5d8f6cbee29
Signed-off-by: nickboldt <nboldt@redhat.com>

* include generated che-operator.clusterserviceversion.yaml files thanks to ./olm/update-nightly-bundle.sh and operator-sdk 0.10.1

Change-Id: I9718547051a918c2a91fa49645521655c8d3dc9a
Signed-off-by: nickboldt <nboldt@redhat.com>

* Update csv files

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-10-07 10:32:29 +03:00
Nick Boldt f55a9185ec
CVE fix: librepo (#450)
Change-Id: I56d18fbd6686a917df9bd5aef0cab8e0adf1db1a
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-09-18 08:57:00 +03:00
che-bot b85472926f
Copy 7.18.1 csv to master (#434)
* Copy 7.18.1 csv to master

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

* Revert changes in operator.yaml

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-09-09 20:44:02 +03:00
ghatwala fb96c136c2
Adding ARM support (#308)
Signed-off-by: Amit Ghatwal <ghatwala@us.ibm.com>
2020-07-31 16:23:51 +03:00
Mykhailo Kuznietsov 57ea0f86f8
Copy nightly csv to master (#369)
* Copy nightly csv to master

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

* Fix minishift update test script

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-07-29 21:14:02 +03:00
Mykhailo Kuznietsov 1c223e17a6
Copy nightly csv to master (#351)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-07-18 00:56:41 +03:00
Mykhailo Kuznietsov 5cbf73146b Copy nightly csv to master
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-06-25 14:07:41 +03:00
Nick Boldt 13fc81f695
seems that while it's on the PATH, go can't be resovled w/o PATH update (#292)
Change-Id: I75a1ef5f4591c0dd5a566ff7cdc4824a1c8a37c6
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-05-29 23:06:12 -04:00
Nick Boldt 5c8eb12951
as of go 1.13 image, PATH already includes /opt/rh/go-toolset-1.13/root/usr/bin (#291)
Change-Id: I994d8aa4001e24162a2eb1d8b0a36ce269985f00
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-05-29 22:47:58 -04:00
Nick Boldt 2aabafc93c
[base] Update from ubi8-minimal:8.1-409 to ubi8-minimal:8.2-267 (#289)
Change-Id: I2f8a33b7c233c79f2fa5dfa95f703ee6e9b411ef
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-05-29 22:43:21 -04:00
nickboldt 0659df91f0 [base] Update from devtools/go-toolset-rhel7:1.12.12-4 to devtools/go-toolset-rhel7:1.13.4-18
Change-Id: I91c3c6ad19000b23ce4c82200898978a2a2538f9
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-05-29 22:40:41 -04:00
Nick Boldt 47597cb113
replace case with simple if-then (#266)
* replace case with simple if-then

Change-Id: I4663437944ec274b116a332e063b77b86b41ff95
Signed-off-by: nickboldt <nboldt@redhat.com>

* s/OOS/GOOS
2020-05-20 11:55:19 -04:00
Shivani Junawane 8a4e1d5edf
Added support for ppc64le with signoff (#255)
Signed-off-by: Shivani Junawane <shivanij@us.ibm.com>
2020-05-15 11:43:23 -04:00
Oleksandr Andriienko 03978b3724
fix: Check identity providers for oauth instead of check amount users. (#248)
* Back off openshift oauth, when oauth can't be used

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Use freezed go modules.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Add newer olm bundle.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-05-15 11:43:58 +03:00
Nick Boldt 5ca80ead77
[base] Update from ubi8-minimal:8.1-398 to ubi8-minimal:8.1-409 (#216)
Change-Id: I0e11d840e7b6746cb5356c9552623f978a506520
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-04-07 17:59:51 -04:00
aditi_jadhav 1090732dff
Added support for s390x (#203)
Signed-off-by: aditi jadhav <aditi.jadhav@ibm.com>
2020-03-23 09:20:23 +02:00
Nick Boldt 682e4f14b4
bump to latest... (#181)
* bump to latest registry.access.redhat.com/ubi8-minimal:8.1-398

Change-Id: I5a648aba1bca8c9dbacdff0bcf4722684d27a78a
Signed-off-by: nickboldt <nboldt@redhat.com>

* run olm/update-nightly-olm-files.sh to generate fresh 9.9.9 csvs and diffs

Change-Id: I623fc973285cbdc0548143abe90e4df7f108dff4
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-03-04 12:07:28 -05:00
Nick Boldt 152758c9f6
fix crw defaults in master (#168)
* fix crw defaults in master

Change-Id: I4d25360545e8ff84db784d425e661b6b1b171861
Signed-off-by: nickboldt <nboldt@redhat.com>

fix copyright

Change-Id: Ibff9f5be558efc451975e326c4dc4713cb69fac5
Signed-off-by: nickboldt <nboldt@redhat.com>

* update to latest base

Change-Id: I17d578b8a73b905399434888831124f7986de829
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-02-07 01:47:12 -05:00
Nick Boldt e631331089
fix copyright; reorder file (Brew metadata at end); update to split operator and operator-metadata into two containers; update base images (#155)
move Dockerfile to rhel.Dockerfile for consistency w/ other che repos

Change-Id: I68a45797ab61903223f9537f4606638977d25335
Signed-off-by: nickboldt <nboldt@redhat.com>

remove Brew metadata (it will be appended via https://github.com/redhat-developer/codeready-workspaces-operator/blob/master/operator.Jenkinsfile)

Change-Id: If264a8cde12521da32e9fdc60e59c7f1fe97c61f
Signed-off-by: nickboldt <nboldt@redhat.com>
2020-01-29 11:28:04 -05:00
nickboldt 76ba7b516b use updated base images from RHCC
Change-Id: I95c5f8071fb1ad0d0344e50bc1313a517baa2c80
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-11-22 14:19:42 -05:00
David Festal d273007e7e Fix the Openshift OAuth provisioning for CRW, and move provisioning files (#122)
* Fix the oauth_provision file for CRW

- Replaces `jq` tool calls by equivalent `sed` calls
- Moves the `xxx_provision` files out of `deploy` (more for yamls) (should fix new issue https://issues.jboss.org/browse/CRW-482 at the same time)
- Replace a hard-coded value of the clientId (`che-public`) in the `token-exchange` feature on CRW
- Correctly enables the RHSSO preview features required for `token-exchange` (the way to activate them slightly differs from the upstream Che case)

Signed-off-by: David Festal <dfestal@redhat.com>
2019-11-15 11:40:40 +01:00
nickboldt 9d630545ec use newer base image in operator go-toolset-rhel7:1.11.13-11
Change-Id: I567247dc709a6dd7dd929df29758231ccfb0f8fb
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-10-07 13:46:41 -04:00
David Festal 3360525412
Enable token exchange (#84)
* Enable the `token-exchange` preview KC feature
* Add what should be done on the Che side
* Automatic token-exchange permissions config
* fix oauth provision script
* Fail-safe removal of the `openshift` id provider
* Fix possible inconsistencies in OS OAuth status
* Update README.md according to suggestion
Co-Authored-By: Robert Krátký <rkratky@redhat.com>

Signed-off-by: David Festal <dfestal@redhat.com>
2019-09-24 10:17:28 +02:00
nickboldt 432aef3d1a update from downstream (new go-toolset, new ubi8-mini, fix for libnghttp2
Change-Id: I8175c400023c985e5ba2702e7924ffbcfb769b4b
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-09-20 23:53:50 +03:00
nickboldt 0ee06b58ed no CVE fixes needed so comment out this step for now
Change-Id: Icf5a17b40170a873ae7af79efbb01a10d58bf13d
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-09-04 11:39:23 -04:00
nickboldt fc3f431ff2 use microdnf for CVE fixes, if needed; list installed packages for auditing
Change-Id: I4362ba8fbdc25aee2223eca90f575fe26220d3f1
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-09-04 11:37:22 -04:00
nickboldt c07e9ea811 fix version - should be 2.0
Change-Id: I06e5f87bf7558f29386fddc0a2aac265ba49eea4
Signed-off-by: nickboldt <nboldt@redhat.com>
2019-08-14 13:17:35 -04:00