Commit Graph

82 Commits (f093000d8703fc3eb6dc6ba0887eec95ac5571cc)

Author SHA1 Message Date
Anatolii Bazko 293956fea3
fix: Deletes object with a legacy name to avoid mounting several ones… (#1383)
* fix: Deletes object with a legacy name to avoid mounting several ones under the same path

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-11 18:05:18 +03:00
Lukas Krejci dfcfc3efa7
The git certificate needs to be labeled as mounted to workspace. (#1375) 2022-05-06 10:21:06 +02:00
Lukas Krejci e5c0b73077
Namespace provisioning short name prefix (#1370)
Given that we only support 1 che instance in the cluster, we can shorten
the name prefixing significantly.
2022-05-02 14:02:18 +02:00
Anatolii Bazko 73bbeaafea
fix: Respect labels for workspace routes set in spec.server.CustomChe… (#1368)
* fix: Respect labels for workspace routes set in spec.server.CustomCheProperties[CHE_INFRA_OPENSHIFT_ROUTE_LABELS]
* Restart pods when configuration changed

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-05-02 13:10:06 +03:00
Lukas Krejci 33a59db047
fix: Use the labels used by the che-server to recognize workspace namespaces (#1359)
Use the app.kubernetes.io/part-of=che.eclipse.org and
app.kubernetes.io/component=workspaces-namespace labels to mark a namespace
as workspace namespace.

This should bring the operator and che-server in line with how they are
marking the managed namespaces.
2022-04-27 16:06:21 +02:00
Anatolii Bazko 51002ea5f2
chore: don't update chehost in CheCluster spec (#1340)
* chore: don't update chehost in CheCluster spec

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add missing files

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-16 11:37:40 +02:00
Anatolii Bazko a850b08a5d
chore: Don't set defaults into CheCluster CR (#1337)
* chore: Don't set defaults into CheCluster CR

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* Add tests

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-03-15 14:12:08 +02:00
Anatolii Bazko 4ff511928d
fix: Remove code depending on devworkspace.enable field (#1321)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-02-16 12:16:56 +02:00
Angel Misevski 9a6b62f51d Fix test cases to accomodate using workspaceID in router name
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-03 09:49:55 +01:00
Angel Misevski 44d610dd9c Avoid name collisions in traefik routers in gateway
Fix issue where all healthz routers are being created with the name
'<portnum>-healthz', preventing the traefik gateway from loading them
all at the same time.

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-03 09:49:55 +01:00
Lukas Krejci 12da7adeeb
feat: Support node selector and pod tolerations in devworkspaces (#1301)
Fixes #20884
* Upgrade to devworkspace operator with support for pod tolerations
* Implement additional logic in usernamespace controller to sync config
  from checluster CR to ns annotations understood by the dwo
* Add new fields to CheCluster CRD v1 and v2alpha1
* added support for the new fields in conversion methods between v1 and v2alpha1
2022-02-01 17:51:35 +01:00
Anatolii Bazko 4f08657509
chore: Drop backup/restore functionality (#1300)
* chore: Drop backup/restore functionality

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-02-01 15:51:26 +02:00
Angel Misevski c81c737d81
chore: Update DevWorkspace Operator dependency to v0.12.2 (#1302)
* Update DevWorkspace Operator dependency to v0.12.2

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update vendor directory to include DWO v0.12.2

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Adapt Che routing solver to DevWorkspace Operator changes

Adapt code in Che RoutingSolver to accomodate changes in DWO that
disconnect DevWorkspaceRouting resources from the upstream Devfile API

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Set Go version to 1.16

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update all Go images used to use Go 1.16

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Set up Go to use 1.16 in PR check GitHub actions

Signed-off-by: Angel Misevski <amisevsk@redhat.com>

* Update RBAC

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2022-02-01 10:46:21 +02:00
Anatolii Bazko 92d24388ec
chore: Remove obsolete code after switching to Dev Workspace enabled (#1291)
* chore: Remove keycloak deployment

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Get rid of codebase related to spec.devWorkspace.enable field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to auth.initialOpenShiftOAuthUser field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to some auth.* fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to some auth.openShiftoAuth field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to auth.nativeUserMode field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server.tlsSupport and server.*ClusterSVCNames fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server expouse strategy fields

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove deprecated code

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Remove code related to server.tlsSupport and server.cheFlavor field

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update helm charts

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: Update bundle

Signed-off-by: Anatolii Bazko <abazko@redhat.com>

* chore: remove RELATED_IMAGE_keycloak

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2022-01-24 09:52:15 +02:00
Mykola Morhun 3262a5acc1
refactor: Do not reconcile on any error inside finalizers (#1252)
Queue a new reconcile loop on any finalization error, but do not stop current
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-15 16:42:17 +02:00
Lukas Krejci 0e72bb2ca8
Sync the certificate from che-git-self-signed-cert to user namespaces (#1222)
feat: Sync the git tls certificate configuration in a format digestable by DWO.

Other slightly related changes:
* Make sure the version content annotations survive across multiple conversions
between v1 and v2alpha1.
* Add DWO watch labels so that our stuff is picked up.
* irifrance/gini has moved to go-air/gini
2021-12-15 15:41:55 +01:00
Mykola Morhun e960ba2e56
Make backup / restore of Che installation work with devworkspace mode (#1247)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-10 10:32:33 +02:00
Anatolii Bazko 608bff0187
chore: checluster controller refactoring (#1244)
* chore: Refactoring checluster controller

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-09 14:13:59 +02:00
Oleksandr Andriienko ec8e825ecb
fix: Fix read termination timeout for all namespaces mode. (#1235)
* fix: Fix read termination timeout for all namespaces mode.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-12-08 21:15:04 +02:00
Anatolii Bazko 58bba54964
chore: permissions refactoring (#1202)
* chore: permissions refactoting

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
Co-authored-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 16:56:37 +02:00
Mykola Morhun afa32e66ec
Drop databases before restore. Do not migrate objects related to backup. (#1227)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-12-07 12:20:40 +02:00
Anatolii Bazko b4511e3cf9
fix: delegate permissions to `get, list, watch` `pods/log` resources (#1212)
* fix: delegate permissions to get, list, watch pods/log resources

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-12-06 15:25:57 +02:00
Michal Vala 88cb1ed7ac
feat: native auth kube (#1185)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-12-03 12:20:46 +01:00
Anatolii Bazko 474b0c8421
fix: don't require `app.kubernetes.io/instance:che` label on k8s object to trigger a reconcile (#1204)
* fix: don't require 'app.kubernetes.io/instance:che' label

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-30 15:39:46 +02:00
Anatolii Bazko 1e9fa6a078
chore: Refactor certificates reconsiler (#1171)
* chore: Refactor certificates reconsiler

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-26 13:50:59 +02:00
Anatolii Bazko 2da1195bd9
fix: build downstream (#1194)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-23 09:17:47 +02:00
Mykola Morhun ce4e107719
Apply part-of label to devworkspace resources managed by Che Operator (#1189)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-22 16:45:46 +02:00
Mykola Morhun 021031f6df
feat: Use custom cache function in Che Operator (#1166)
Use custom cache function to limit memory consumption of operator

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-11-19 18:35:22 +02:00
Igor Vinokur a434cc5953
fix: Add patch, list, update verbs to the configmap role (#1180)
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-11-18 15:49:54 +02:00
Oleksandr Andriienko b4930b5054
fix: Fix license headers (#1170)
* Fix license headers.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-16 11:17:18 +02:00
Anatolii Bazko 8bdbbc1dfa
chore: Refactoring OpenShiftOAuth (#1167)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-11-10 17:41:07 +02:00
Anatolii Bazko e1b4541ed2
chore: Refactoring OpenShift Initial user reconciler (#1152)
* chore: refactoring OpenShift OAuth User

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
Co-authored-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-11-04 17:42:49 +02:00
Mykola Morhun cb17fce445
Use cached and non-cached clients in backup/restore controllers (#1156)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-21 16:49:57 +03:00
Anatolii Bazko a889b56a9d
fix: Set CHE_INFRA_KUBERNETES_ENABLE__UNSUPPORTED__K8S: true when devworkspace is enabled on k8s (#1155)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-21 15:33:24 +03:00
Anatolii Bazko f838cf48d2
checontroller refactoring (#1138)
* chore: Introduce reconcilemanager, update status when reconciliation failed.

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-19 10:56:49 +03:00
Anatolii Bazko 06aa35c92c
fix: configure runtime controller with namespace event filter (#1146)
* fix: configure runtime controller with namespace event filter
* Increase memory limit to 1Gi

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-18 13:53:52 +03:00
Mykola Morhun 80583a19c0
Add init containers to start Che correctly after node restart (#1139)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-13 16:15:11 +03:00
Anatolii Bazko 434db641f7
fix: Print 'More than one checluster Custom Resource found' warning only there are more than 1 CR (#1140)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-13 12:47:43 +03:00
Michal Vala d104845f89
feat: accessible workspace healthz endpoint (#1119)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-10-11 19:22:36 +02:00
Serhii Leshchenko fcbc80e79e
fix: do not start DWR controller if devworkspaces are not enabled (#1133)
* fix: do not start DWR controller if devworkspaces are not enabled
2021-10-09 09:28:34 +03:00
Anatolii Bazko d44546bc86
fix: import ca-bunle even if there are several checluster CR (non all-namespace mode) (#1135)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-10-09 09:27:27 +03:00
Mykola Morhun 3cab035d89
Read trusted CA configmaps only from installation namespace (#1125)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-06 12:49:44 +03:00
Serhii Leshchenko ce230cde18
feat: don't take control over DWO which is not managed by Che (#1085)
* feat: don't take control over DWO which is not managed by Che
2021-10-01 21:51:35 +03:00
Mykola Morhun 3952a53188
Propagate plugin registry URL to plugin registry configmap (#1118)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-01 19:35:53 +03:00
Oleksandr Andriienko b8cc02bf9a
feat: Update controller runtime (#1064)
* Update controller runtime for che-operator and related deps.
Controller runtime update to version v0.9.5
go-client update to version v0.21.3
Udaptated tests to the new controller runtime and go-client.
Use newer image puller.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-10-01 14:54:37 +03:00
Mykola Morhun f8c3c2e138
Limit list to current namespace for backup and restore (#1106)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-10-01 10:22:40 +03:00
David Kwon 53970009dd
fix: delete KIP finalizer and KIP operator on CheCluster CR delete (#1082)
Signed-off-by: David Kwon <dakwon@redhat.com>
2021-09-29 11:28:54 -04:00
Mykola Morhun b74443cc8b
Create backup on every Che update (#1097)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-29 17:18:30 +03:00
Mykola Morhun 6e72d0565f
Fix restore process if keycloak is already deleted (#1095)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2021-09-29 11:08:22 +03:00
Lukas Krejci d52d5adb16
Set the type and immutability of the secret when copying the self-signed-cert to the user's namespace. (#1094)
* fix: Set the type and immutability of the secret when copying the self-signed-cert to the user's namespace.

* update the resources

* fix: the events on objects in checluster namespace now properly trigger
reconciliation of all known namespaces.

* Update resources and remove the errorneous \n from the generated yaml.
2021-09-28 11:05:37 +03:00