Commit Graph

984 Commits (main)

Author SHA1 Message Date
Igor Vinokur a928b945e0 fixup! chore: Apply git user data configmap to mount to /etc/gitconfig 2022-05-23 12:53:50 +03:00
Igor Vinokur 1af2cdc32f chore: Apply git user data configmap to mount to /etc/gitconfig 2022-05-19 21:00:22 +03:00
Igor Vinokur 2eb0a6e018
chore: Change mount path in the git-credentials-secret (#292)
In order to have a common credentials path for all editors, remove theia specific path segment from the git-credentials-secret mount path.
2022-05-02 16:29:27 +03:00
che-bot 855f704ded
chore: Bump to 7.48.0-SNAPSHOT in main (#296)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-04-28 09:22:48 +03:00
Ilya Buziuk cfa91cc4b1 fix: handle the KubernetesClientException during the stop workspace role provisioning
Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>
2022-04-12 16:42:30 +02:00
che-bot 06797e5c28
chore: Bump to 7.47.0-SNAPSHOT in main (#285)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-04-11 17:58:55 +03:00
Ilya Buziuk efbe6f3d2c fix: NPE fixup in the SshKeysConfigurator + bumping devfile 2.2 schema to teh latest version
Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>
2022-04-04 14:09:12 +02:00
Sergii Kabashniuk d8bed4006a
feat: Upgrade kubernetes client to 5.12.1 (#257) 2022-03-21 16:25:33 +02:00
che-bot 33d42bad20
chore: Bump to 7.46.0-SNAPSHOT in main (#272)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-03-21 08:38:07 +02:00
che-bot eeda8d91d2
chore: Bump to 7.45.0-SNAPSHOT in main (#265)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-02-26 09:14:13 +02:00
David Kwon 8e8624c1fb fix: add new label to user-profile secret
Signed-off-by: David Kwon <dakwon@redhat.com>
2022-02-03 16:47:34 +01:00
che-bot e9e38fd77b
chore: Bump to 7.44.0-SNAPSHOT in main (#252)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-02-02 15:32:01 +02:00
Sergii Kabashniuk 0189b2866a
fix: add controller.devfile.io/watch-secret: 'true' label to workspace's git credentials (#245) 2022-01-18 16:45:24 +02:00
che-bot 8de18ae530
chore: Bump to 7.43.0-SNAPSHOT in main (#242)
* chore: Bump to 7.43.0-SNAPSHOT in main

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-01-13 17:49:00 +02:00
Mykhailo Kuznietsov 79e0bf9966
chore: Update pom.xml license years (#239)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2022-01-12 13:56:49 +02:00
Sergii Kabashniuk ce7c300eb9
build: Upgrade of maven plugins (#222)
* build: Upgrade of maven plugins

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-12-23 14:54:46 +02:00
che-bot f148697f95
chore: Bump to 7.42.0-SNAPSHOT in main (#220)
merged by API
2021-12-22 13:18:55 -05:00
Sergii Kabashniuk 896eb01a63
fix: Do not override existed user's email with dummy on OpenShift (#198)
* fix: Do not override existed user's email with dummy on OpenShift

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-12-16 08:30:36 +02:00
Max Shaposhnik ff26653628
Added namespace configurator for existing user SSH keys (#192)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-12-13 09:00:28 +02:00
Max Shaposhnik 6a7c640b9c
Fixup for oauth2 usernames
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-12-01 19:48:15 +02:00
che-bot d38d4391c1
chore: Bump to 7.41.0-SNAPSHOT in main (#187)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-12-01 17:15:14 +02:00
Michal Vala 388a5183be
feat: native auth on Kubernetes (#171)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-11-25 14:48:55 +01:00
disaster37 f289ec619f
fix: add CPU quota on che-plugin-artifacts-broker container (#183)
* Add CPU quota

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* fix: add CPU quota on che-plugin-artifacts-broker container
2021-11-24 13:38:59 +02:00
Igor Vinokur cf741dbc4d
feat: Add a predefined configmap to store theia preferences (#174)
Create a predefined K8s secret per nemaespace to store theia preferences.
Include the preference secret to the workspcae-secrets role, to be able to manage it outside.
2021-11-24 12:23:11 +02:00
che-bot e71e5cff0d
chore: Bump to 7.40.0-SNAPSHOT in main (#179)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-11-10 13:06:41 -05:00
Pavol Baran fdb4bd5558
Merge pull request #162 from xbaran4/factory-flow
feat: added label and annotation for git credentials secret for ability to be mounted into devworkspace
2021-10-27 12:17:31 +02:00
che-bot 9c05838b41
chore: Bump to 7.39.0-SNAPSHOT in main (#169)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-10-20 13:30:29 +03:00
xbaran4 8a31217840 refactor: moved label and annotation to static maps
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-10-19 11:10:07 +02:00
xbaran4 75ed9268b4 feat: moved label and annotation to secret creation
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-10-13 11:39:37 +02:00
xbaran4 3b5da63017 feat: added label and annotation for git credentials secret
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-10-11 21:47:13 +02:00
Michal Vala 3a99240d2f
fix: devfile endpoint with single-host exposure (#157)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-10-06 18:35:15 +02:00
Lukas Krejci 697253e50e
fix: Token validity check (#136)
Handle missing or expired token with a 401 HTTP status instead of 500
with OpenShift OAuth the same as it is already done with Keycloak.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2021-09-30 12:24:51 +02:00
che-bot 07142c8626
chore: Bump to 7.38.0-SNAPSHOT in main (#149)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-09-30 10:26:08 +03:00
Pavol Baran 738a663e72
Merge pull request #117 from xbaran4/user-secrets
Propagate Che user informations and preferences to DevWorkspaces
2021-09-29 13:30:03 +02:00
xbaran4 8969d93bac fix: added module binding in openshiftInfra
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-29 12:43:43 +02:00
xbaran4 0423215112 fix: trimed preference name bug
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-27 16:49:23 +02:00
xbaran4 a6059bfea5 fix: trimmed preference name
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-27 15:38:38 +02:00
xbaran4 e73266e957 refactor: replaced individual convigurators with set
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-27 11:54:44 +02:00
xbaran4 31366691ec test: added test for UserPreferencesConfigurator
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-27 00:49:46 +02:00
xbaran4 e96aa25fb5 doc: added javadoc for NamespaceConfigurator classes
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 14:46:29 +02:00
xbaran4 dece823292 refactor: adapted NamespaceProvisioner for UserProfileConfigurator and UserPreferencesConfigurator
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 12:21:49 +02:00
xbaran4 5f4cd273df refactor: moved preferences secret creation from NamespaceProvisioner to UserPreferencesConfigurator
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 11:54:10 +02:00
xbaran4 b73d4968e1 refactor: moved profile secret creation from NamespaceProvisioner to UserProfileConfigurator
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 11:13:44 +02:00
xbaran4 33f1a88748 refactor: moving provision method from NamespaceFactory to NamespaceProvisioner
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 10:00:48 +02:00
xbaran4 39363da6ef feat: created configurator package with configurators
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-24 09:16:57 +02:00
xbaran4 8aa275101a fix: removed secrets creation on event
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-22 12:15:09 +02:00
xbaran4 048e35863c doc: added javadoc for NamespaceProvisioner
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-21 11:05:05 +02:00
Sergii Kabashniuk e7d725ca37
build: Used jakarta.persistence (#125) 2021-09-21 08:36:19 +03:00
xbaran4 a41e86ae26 format: mvn fmt:format
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-20 13:25:01 +02:00
xbaran4 3d3cbee7e1 test: added tests for exception handling in NamespaceProvisioner
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-20 13:23:13 +02:00
xbaran4 bd46d1c218 refactor: decomposing NamespaceProvisioner createOrUpdate()
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-19 22:39:28 +02:00
xbaran4 d0aed8657d feat: adapted test for namespacesProvisioner
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-13 14:04:49 +02:00
xbaran4 5b12d7db12 Merge branch 'main' of https://github.com/eclipse-che/che-server 2021-09-13 12:31:17 +02:00
xbaran4 af89b16093 feat: Added NamespaceProvisioner that creates user information secrets
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-09-13 12:30:54 +02:00
Sergii Kabashniuk 359ebb32bc
build: Transition from Java EE to Jakarta EE (#80)
* Upgrade swagger-ui-3.51.2

* Upgrade tomcat 10.0.10

* changed only imports

* changed imports in service loader

* changed swagger jaxrs deployment

* Changed swagger annotations + basic imports

* Changed imports and minimal key length for jsonwebtoken

* Restassured API changes + imports

* Removed trailing slash from CHE_HOME

* Migrate to jakarta schema in web.xml

* Disable tracing

* New artifacts and maven build upgrade

* Removed jackson-jaxrs-json-provider from wsmaster war

* Fixed KeycloakServletModuleTest and forked TracingFilter

* Removed unused dependecies
2021-09-13 08:20:09 +03:00
che-bot 981c04c41e
chore: Bump to 7.37.0-SNAPSHOT in main (#96)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-09-09 08:32:24 +03:00
Sergii Kabashniuk 6d4ee34fe8
fix: Allow kube:admin user (#92)
* fix: Allow kube:admin user

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-09-03 16:03:09 +03:00
Max Shaposhnik 3604c9a709
fix: Correct prervious roles validation fixup for minikube (#94)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-09-03 08:55:14 +03:00
Max Shaposhnik c273bd43a5
fix: workspaces must not fail on metrics roles creation when APi is disabled or unauthorized (#93)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-09-02 09:58:44 +03:00
David Kwon 1c9391cdf5
fix: Delete rm pods if a PVC failure event is detected (#79)
Signed-off-by: David Kwon <dakwon@redhat.com>
2021-08-26 15:26:00 -04:00
che-bot fa87ca0772
chore: Bump to 7.36.0-SNAPSHOT in main (#87)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-08-19 11:25:35 +03:00
Igor Vinokur 5934e97fb2
fix: Add a predefined secret to store credentials (#68)
* Create a predefined K8s secret per nemaespace to store credentials.
* Add a specific secret role for the credentials secret. This role allows to edit only this predefined secret. Other secrets are not controlled by this role.
2021-08-17 12:22:17 +03:00
Max Shaposhnik b0a50e91b4
chore: Use networking.k8s.io/v1 version of Ingresses for workspaces (#73)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-08-06 10:16:48 +03:00
Sergii Kabashniuk 159194c1be
chore(build): Added extra argument to match the constructor in KubernetesNamespaceFactoryTest (#72) 2021-08-03 20:44:09 +03:00
Sergii Kabashniuk 74b47fa68b
feat: REST Service on the Che server-side that will initiate k8s namespace provisioning (#61)
* feat: REST Service on the Che server-side that will initiate k8s namespace provisioning


Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-08-03 12:32:22 +03:00
disaster37 7bb2641d15
feat: Allow to add annotations when che server create namspace like labels (#57)
* Allow to add annotations when che server create namspace like labels

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Rename che.infra.kubernetes.namespace.annotate to che.infra.kubernetes.namespace.annotation

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Remove quick fix on devfile (need dedicated PR)

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Replace placeHolders on namespace annotations

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Add tests to valide placeholders on annotation. Rename properties to che.infra.kubernetes.namespace.annotate

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Fix annotations placeholder on openshift project

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Try to fix test with add cleanup context on KeycloakProviderConfigFactoryTest

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* Add lenient method on test to avoid unnecessary stubbing error

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>

* clean test by remove unused stubs

Signed-off-by: disaster37 <linuxworkgroup@hotmail.com>
2021-08-03 12:31:36 +03:00
Oleksandr Andriienko 629cc75716
fix: If internal links are not specified, the external one should be used (#45)
* Don't set public url value to internal url settings.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2021-08-03 10:23:34 +03:00
Michal Vala 37210828ea
test: cleanup static EnvironmentContext in test to avoid failing the test when they run in reverse order (#69)
Signed-off-by: Michal Vala <mvala@redhat.com>
2021-07-30 12:31:40 +03:00
Sergii Kabashniuk 813218455a
build: Upgrade kubernetes client to latest stable version 5.6.0 (#60) 2021-07-30 11:58:11 +03:00
che-bot ccb8e4b63e
chore: Bump to 7.35.0-SNAPSHOT in main (#67)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-07-29 08:49:49 +03:00
xbaran4 ad441483e8 adding pullSecrets more defensively
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-27 16:04:03 +02:00
xbaran4 7870541892 replace java assert for testng assert
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-27 14:23:10 +02:00
xbaran4 8aee7d759e replaced value of serviceAccount with serviceAccountName
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-27 10:47:25 +02:00
xbaran4 cea7021d84 added @VisibleForTesting annotation
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-27 08:57:55 +02:00
xbaran4 19e67a1383 Merge branch 'main' of https://github.com/eclipse-che/che-server into pull_secrets 2021-07-26 18:05:41 +02:00
xbaran4 ff7dc113c4 fmt format
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-26 18:05:33 +02:00
xbaran4 d0b0277ac3 implemented tests for the method adding imagePullSecrets of serviceAccount
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-26 16:44:12 +02:00
xbaran4 8abc9a842d pod watcher times out on deploy
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-22 09:52:15 +02:00
Max Shaposhnik 0860edadd3
fix: Workspace Roles and RoleBindings provision on each restart (#52)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2021-07-21 22:59:00 +03:00
Igor Vinokur 7a81693167
fix: Revert the kubernetes Secrets role due to the security vulnerability (#58) 2021-07-20 13:29:34 +03:00
Serhii Leshchenko 94353639e4
adapt kubernetes routing to nginx ingress controller (#56) 2021-07-19 11:44:55 +03:00
Igor Vinokur 3244bba481
Merge pull request #55 from eclipse-che/che-19837
Since the tests in the infrastructure/kubernetes module are enabled adding back the fixed secrets role test which didn't work and was removed after enabling the tests.
2021-07-19 11:02:35 +03:00
Sergii Kabashniuk 46ce6a74e5
test: Upgrade of the testing dependencies (#40) 2021-07-19 10:56:11 +03:00
Igor Vinokur e2cd5fa9f6 fixup! fix: Add tests for the kubernetes secrets role 2021-07-16 13:31:03 +03:00
Igor Vinokur a4ddcd1593 fix: Add tests for the kubernetes secrets role
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-07-15 17:59:54 +03:00
Sergii Kabashniuk 7fbc22bb6c
Fix: Enable infrastructure-kubernetes tests (#53)
* fix: Enable infrastructure-kubernetes tests

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-07-15 07:46:57 +03:00
Max Shaposhnik 9c8ba06550
fix: improve error message for git secrets duplication 2021-07-14 17:05:53 +03:00
Igor Vinokur e88ba6c6cd
Merge pull request #44 from eclipse-che/che-19837
Add an ability to create and edit namespaced secrets by workspace user
2021-07-14 10:08:43 +03:00
Igor Vinokur f6d9214a12 Add tests
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-07-13 16:06:35 +03:00
che-bot 2cad39d915
chore: Bump to 7.34.0-SNAPSHOT in main (#46)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-07-13 11:59:29 +03:00
cccs-tom 77f8d05a26
fix: Add nodeSelectors and tolerations to utils container (#35)
Add unit tests
2021-07-13 11:23:43 +03:00
xbaran4 6bb2a3dad6 fix: adding serviceAccounts imagePullSecrets into pod
Signed-off-by: xbaran4 <pbaran@redhat.com>
2021-07-13 10:21:48 +02:00
Igor Vinokur 0980bcbd1a fix: Add an ability to create and edit namespaced secrets by workspace user
Signed-off-by: Igor Vinokur <ivinokur@redhat.com>
2021-07-06 16:14:12 +03:00
cccs-tom 0d7a511a67
fix: Prevent duplicate toleration specs (#29)
Add duplicate check in unit test
Fix: Prevent duplicate toleration specs
Fix formatting error
2021-06-24 08:39:56 +03:00
che-bot 2b4662c2f8
chore: Bump to 7.33.0-SNAPSHOT in main (#31)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-06-18 13:46:04 +03:00
Kazım SARIKAYA e03a57c450
fix: support for kubernetes cluster domain (#17)
* add: support for kuberentes cluster domain

default kuberentes cluster domain is cluster.local. however several
setups may have different cluster domains.

Signed-off-by: Kazım SARIKAYA <kazimsarikaya@sanaldiyar.com>

* add: test for non default dns domain

Testing non default dns domain like myorg.internal added to the
TraefikGatewayRouteConfigGeneratorTest.java

Signed-off-by: Kazım SARIKAYA <kazimsarikaya@sanaldiyar.com>

* add: set che.infra.kubernetes.cluster_domain null

che.infra.kubernetes.cluster_domain property's default value
is now NULL and the code changed for supporting it.

Signed-off-by: Kazım SARIKAYA <kazimsarikaya@sanaldiyar.com>

* Update che.properties

Co-authored-by: Michal Maléř <48474054+MichalMaler@users.noreply.github.com>
2021-06-09 09:50:22 +03:00
Pavol Baran eaf450e92f
fix: Adding ability to use kubernetes API proxy on Kubernetes (#6)
* enable unsupported/api on kubernetes

Signed-off-by: xbaran4 <pbaran@redhat.com>
Co-authored-by: Fabrice Flore-Thébault <ffloreth@redhat.com>
Co-authored-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-06-08 15:45:20 +03:00
Sergii Kabashniuk 10d437437f
feat: Create project with Che-server's SA on OpenShift with OAuth (#7)
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>

* Update assembly/assembly-wsmaster-war/src/main/webapp/WEB-INF/classes/che/che.properties

Co-authored-by: Fabrice Flore-Thébault <ffloreth@redhat.com>
2021-06-08 11:12:29 +03:00
Sergii Kabashniuk d1c3570fca
fix: Re-enable KubernetesNamespaceFactoryTest and upgrade kubernetes client to 5.4 (#22) 2021-06-07 20:16:28 +03:00
David Kwon 30a8e4832e
feat: Deleting the common PVC if there are no workspaces left for a given user (#16)
* che #18369 Deleting the common PVC if there are no workspaces left for a given user

Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>

* che #18369 Handling a case when the common PVC is used across multiple users ('workspaceNamespaceDefault' without placeholders is defined)

Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>

* che #18369 Improving the case when the subject is anonymous

Signed-off-by: Ilya Buziuk <ibuziuk@redhat.com>

* Use DeletionPropagation.BACKGROUND

* Remove @Nullable

Signed-off-by: David Kwon <dakwon@redhat.com>

* Throw RuntimeException

* Remove 'che.infra.kubernetes.namespace.default' and placeholder check

Signed-off-by: David Kwon <dakwon@redhat.com>

* Remove lenient() from tests

Signed-off-by: David Kwon <dakwon@redhat.com>

* Remove anonymous subject check

Signed-off-by: David Kwon <dakwon@redhat.com>

* Use InfrastructureException

Signed-off-by: David Kwon <dakwon@redhat.com>

* Remove test

Signed-off-by: David Kwon <dakwon@redhat.com>

* Remove unnecessary variable, get workspaces from AccountImpl

Signed-off-by: David Kwon <dakwon@redhat.com>

* Create CommonPVCStrategy#isPersonalAccount()

Signed-off-by: David Kwon <dakwon@redhat.com>

Co-authored-by: Ilya Buziuk <ibuziuk@redhat.com>
2021-06-07 15:48:31 +03:00
Sergii Kabashniuk d65a8c650f
Revert "Fix: Re-enable KubernetesNamespaceFactoryTest and upgrade kubernetes client to 5.4" (#21)
This reverts commit 29247d8923.
2021-06-05 07:47:40 +03:00
Michal Vala de23a6c8b8
feat: New authentication on OpenShift with devworkspaces (#1)
Signed-off-by: Michal Vala <mvala@redhat.com>
Co-authored-by: Max Shaposhnik <mshaposh@redhat.com>
2021-06-04 23:07:40 +02:00
Sergii Kabashniuk 29247d8923
Fix: Re-enable KubernetesNamespaceFactoryTest and upgrade kubernetes client to 5.4 2021-06-03 11:42:49 +03:00
Mykhailo Kuznietsov d981eed3ee [release] Bump to 7.32.0-SNAPSHOT in main
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-05-26 15:33:43 +00:00
Sergii Kabashniuk 6670c6986b Upgrade license 2021-05-20 17:05:45 +03:00
Sergii Kabashniuk 98b66ff1f6 Upgrade maven plugin configuration. Made pom.xml independent from che-parent 2021-05-20 16:53:16 +03:00
Max Shaposhnik f2ab7bd680
Fixup SCM URL matching sometimes fails 2021-05-13 12:20:39 +03:00
Sergii Kabashniuk 14107b5c20
Remove code that supports namespace strategies other than per-user (#19763)
* Remove code that supports namespace strategies other than per-user

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-05-12 12:45:55 +03:00
Sergii Kabashniuk d4e695ecac
Upgrade kubernetes-client to 5.3.1 (#19744)
* Upgrade dependencies

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-05-11 14:57:50 +03:00
che-bot 406bc7b164
[release] Bump to 7.31.0-SNAPSHOT in master (#19760)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-05-10 12:01:20 +03:00
Valeriy Svydenko 997ce18ff6
Add role for metrics (#19651)
Signed-off-by: svor <vsvydenk@redhat.com>
2021-05-05 14:44:13 +03:00
Sergii Kabashniuk dc5c2fbe08
Removed SCM user name from git credential secret name (#19715)
* Removed SCM user name from git credential secret name

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-05-01 16:43:02 +03:00
Sergii Kabashniuk e5cb4cdae7
Temporary disables test to fix issues on CI. (#19655)
Temporary disables test to fix issues on CI. (#19655)

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-04-22 16:51:03 +03:00
Sergii Kabashniuk a294b25a87
Validation of Bitbucket personal access token before usage (#19518)
* Validation of Bitbucket personal access token before usage

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
Co-authored-by: Michal Vala <michal.vala@gmail.com>
2021-04-21 15:50:44 +03:00
che-bot 89082a98ad
[release] Bump to 7.30.0-SNAPSHOT in master (#19592)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-04-16 17:44:31 +03:00
Sergii Kabashniuk f0826cf64c
Deprecate namespace strategies other than 'per user' (#19409)
* Deprecate namespace strategies other than 'per user'


Co-authored-by: Robert Krátký <rkratky@redhat.com>
Co-authored-by: Michal Vala <michal.vala@gmail.com>
Co-authored-by: Robert Krátký <rkratky@redhat.com>
2021-04-08 10:13:48 +03:00
che-bot 6e958bbd63
[release] Bump to 7.29.0-SNAPSHOT in master (#19397)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-03-25 14:29:29 +02:00
Mykhailo Kuznietsov f889e0399e
[release] bump to 7.28.0-SNAPSHOT version (#19290)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-03-16 09:48:14 -04:00
Sergii Kabashniuk a01e371268
Hostname configuration of workspace routes (#19148)
* Hostname configuration of workspace routes

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-03-02 16:38:13 +02:00
Max Shaposhnik 674ca25d1f
Fix pod watching manner to prevent events from other pods to cancel the waiting 2021-02-24 10:46:24 +02:00
Angel Misevski a1d425a989
Fix error message when workspace has invalid async storage config (#19017)
* Fix error message when workspace has invalid async storage config

Fix error message when workspace is started with

attributes:
  asyncPersist: 'true'

to correctly mention that persistVolumes: 'false' is required for
asyncPersist: 'true'

Verify message of errors in async storage provisioning tests

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2021-02-22 19:59:53 -05:00
Sergii Kabashniuk 5f3c188c59
Do not mount ssh keys as secrets if the name is not a valid Kubernetes config map key name and not a valid host name (#19031)
* Do not mount ssh keys as secrets if the name is not a valid Kubernetes config map key name and not a valid hostname

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-02-15 11:54:19 +02:00
Sergii Kabashniuk 0d0a68fc00
Obtain and persist Bitbucket personal access token as k8s secret (#18726)
* Obtain and persist Bitbucket personal access token as k8s secret

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2021-02-11 16:17:13 +02:00
Mykhailo Kuznietsov d51e1d0edf
[release] Bump to 7.27.0-SNAPSHOT in master (#19042)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-02-11 15:28:53 +02:00
Lukas Krejci fc5a22294b
Don't use a custom requestbody impl when resending the data to k8s (#18893)
* Fixes #18862. Don't use a custom requestbody impl when resending the data
to k8s. OkHTTP apparently needs to read the data multiple times making
our inputstream approach not work. Instead, just use a byte array with
the body of the request.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2021-02-01 16:18:23 +01:00
che-bot f09d3b7356
[release] Bump to 7.26.0-SNAPSHOT in master (#18882)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-01-26 15:05:14 +02:00
cccs-eric fa06d947e7
Adding k8s tolerations to workspace pods (#18691)
* Added TolerationsProvisioner to support toleration in workspace pods

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>
2021-01-18 15:09:49 +02:00
Max Shaposhnik 18f38f2a93
Fix NPE for ENV-s that not contain value, but only valueFrom. (#18816) 2021-01-18 12:40:04 +02:00
Max Shaposhnik 7efc8c68b7
Bitbucket authorizing using personal access token (#18709) 2021-01-14 12:36:06 +02:00
Tom George 37428e4e46
Merge pull request #18738 from tomgeorge/che-18681
Change the async storage provisioner service selector to select the correct pod
2021-01-13 11:00:26 -06:00
che-bot bd3d5eae49
Merge branch 'pr-master-to-7.25.0-SNAPSHOT' of github.com:eclipse/che into pr-master-to-7.25.0-SNAPSHOT (#18760)
* [release] Bump to 7.25.0-SNAPSHOT in master

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

* [release] Bump to 7.25.0-SNAPSHOT in master

Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2021-01-11 09:25:22 +02:00
Tom George e9ccd1b8cd
Change the async storage provisioner service selector to select the correct pod
Signed-off-by: Tom George <tgeorge@redhat.com>
2021-01-06 22:26:30 -06:00
Max Shaposhnik 6791ed488a
Fix NodeSelector propogation in PodMerger; (#18698)
Signed-off-by: Max Shaposhnik <mshaposh@redhat.com>
2020-12-25 19:50:03 +02:00
Sergii Kabashniuk 5656feade9
Make all configmaps unique in same namespace (#18620)
* Make all configmaps unique in the same namespace 

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-12-21 10:29:15 +02:00
Sergii Kabashniuk 3b9601c6c4
Rename root artifactId to che-server (#18639)
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-12-17 12:35:39 +02:00
che-bot 46dc9ac8ad
[release] Bump to 7.24.0-SNAPSHOT in master (#18595)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-12-14 08:55:15 -05:00
Michal Vala 6c987dadac
Gh17540 memory request dockerimage (#18592)
Signed-off-by: Michal Vala <mvala@redhat.com>
2020-12-11 13:11:47 +01:00
Michal Vala 55f29d64af
add cpu and memory request for jwtproxy (#18551)
Signed-off-by: Michal Vala <mvala@redhat.com>
2020-12-09 14:37:59 +01:00
Michal Vala 31dde19914
fix container cpu resource conversion (#18527)
Signed-off-by: Michal Vala <mvala@redhat.com>
2020-12-04 13:08:28 +01:00
Mykola Morhun 286459283a
Fix exception if no data in certs config map (#18519)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-12-03 12:17:53 +02:00
Lukas Krejci 0f1805e2bf
Enable infrastructure request logging. (#16616)
Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2020-12-02 16:38:52 +01:00
Mykola Morhun 75889e8c33
Propagate CA certs bundle on all infrastructures (#18377)
Implement CA bundle propagation on Kubernetes infrastructures family

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-11-27 15:01:59 +02:00
Oleksandr Andriienko 4100db3053
Add ability to use internal network for keycloak. (#18225)
* Add ability to use internal network for keycloak.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-11-26 17:27:18 +02:00
Oleksandr Andriienko b562d092c6
Use internal network url for plugin, devfile registry and fix CHE_API_INTERNAL env. (#17945)
* Use internal network url for plugin, devfile registry and fix CHE_API_INTERNAL env.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-11-26 13:54:42 +02:00
Lukas Krejci 25a7d7f24e
Provides direct access to the kubernetes API (#18367)
Fixes #18326 - Provides direct access to the kubernetes API on /api/unsupported/k8s.
Restricted to OpenShift with OpenShift OAuth.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2020-11-24 16:12:44 +01:00
che-bot 60aa069746
[release] Bump to 7.23.0-SNAPSHOT in master (#18418)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-11-23 14:20:16 +02:00
Michal Vala 220a7e54b1
make it possible to disable labeling the namespaces (#18340) 2020-11-13 13:06:09 +01:00
Michal Vala c3a51fc004
best effort to label namespace when starting new workspace (#18248) 2020-11-05 11:33:24 +01:00
Max Shaposhnik 6c03073528
Also copy the content of the truststore config map to the workspace namespace 2020-11-05 11:12:07 +02:00
che-bot 0af5ef8954
[release] Bump to 7.22.0-SNAPSHOT in master (#18246)
Signed-off-by: Mykhailo Kuznietsov <mkuznets@redhat.com>

Co-authored-by: Mykhailo Kuznietsov <mkuznets@redhat.com>
2020-10-30 12:26:31 +02:00