Commit Graph

97 Commits (2ea0f7cbcc2fa0baebf65e2c5da680e3feb88943)

Author SHA1 Message Date
Sergii Leshchenko fcc628fe0f
Add an ability to configure PVC strategy with helm chart (#15142)
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-11-21 10:49:27 +02:00
Angel Misevski d205b84c94 Remove/update deprecated machine start timeout env var in templates
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2019-11-13 12:44:24 -05:00
Tom George ab5113e8eb Set postgres deployment to use recreate deployment strategy
Signed-off-by: Tom George <tg82490@gmail.com>
2019-10-30 11:47:49 +01:00
Lukas Krejci 7d56354a5e
Use che.infrastructure.kubernetes.namespace.default during workspace namespace resolution (#14828)
Load the workspace during then namespace resolution so that we can check
for the attribute stored in the workspace attributes.

Switch the default namespace to `<username>-che`.

Update the property descriptions in che.properties and use the new
CHE_INFRA_KUBERNETES_NAMESPACE_DEFAULT in the helm chart.

Move the delete to the KubernetesNamespace/OpenShiftProject to
concentrate the handling in one place.

Split the isNamespaceStatic() (previously called isPredefined()) into
isCreatingNamespaces() and isManagingNamespaces() to separately capture
the two usecases in which that single method was previously incorrectly
called. Also make these methods workspace-specific to be able to
consistently work with the legacy logic across all methods.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2019-10-23 13:22:51 +02:00
Sergii Kabashniuk 6a09c52253
Changed default idle timeout and limit of running workspaces per user (#14747) 2019-10-04 09:34:18 +02:00
Mario Loriedo a684d211d6 Update Deployments yamls in helm charts to be compatible with k8s v1.16
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2019-10-03 12:18:00 +02:00
Samuel Hogg 10c9c2476c Correct Che image tag in Helm Chart values file (#14396)
Signed-off-by: Sam Hogg <sam.hogg@arm.com>
2019-09-11 12:18:43 +02:00
Mykhailo Kuznietsov 40ee503a05 Remove Stack service (#14078)
* Remove Che6 Stack concept

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2019-09-03 08:00:12 +02:00
Lukas Krejci af26d29b96
Generalize the ingress configuration to support single-host in single-user mode on kubernetes (#14134) 2019-08-26 16:27:52 +02:00
Vitalii Parfonov 608882a3ee
use the latest nightly image, adapt e2e tests for new behavior of debug settings in Theia (#14285)
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-23 07:30:12 +03:00
Vitalii Parfonov c732524e4d
Set che-plugin-registry image version to 7.0.0 (#14278)
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-19 15:34:25 +03:00
Vitalii Parfonov c3b0abbe5d
Set all image version to the 7.0.0 to align it with CheTheia version (#14264)
* Set all image version to the 7.0.0 to aligen it with CheTheia version until #14248 not fixed

Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-16 17:34:38 +03:00
Vitalii Parfonov f57a95e22c set plugin registry image to nightly
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-16 13:27:44 +02:00
Vitalii Parfonov e08d24c7ff set 7.0.0 version for plugin registry
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-15 17:07:16 +02:00
Sergii Leshchenko f24796bd2a
Use different secrets for TLS and self-signed-cert (#14176)
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-08-12 13:01:55 +03:00
Michal Vala 1af529cc4b increase registries memory limit to 256Mi in helm charts (#14135)
Signed-off-by: Michal Vala <mvala@redhat.com>
2019-08-06 14:57:21 +02:00
Sergii Leshchenko 32e5f63d54 Improve configuring of self-signed certificate
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 320178a842 Delete unused cheWorkspace helm chart value
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 8165028eeb Update helm chart to provide Che Server TLS secret data for propagation
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 229671be28 Document TLS section parameters of helm chart
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 5ff0beb894 Remove automated creation of certificate and cert manager
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 23384c40ea Do not change default server-strategy when TLS is enabled
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko 1bfec4a79a Do not change default value of multi-user if TLS is enabled
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Masaki Muranaka 376da092d4 Add `DB_VENDOR` to env. (eclipse#13919)
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-24 12:21:48 +09:00
Masaki Muranaka 7696d2ccfd Rename environment variables. (eclipse#13821)
POSTGRES_* to DB_*.

Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-24 12:21:48 +09:00
Michal Vala ec50704eff Helm chart deploy registries (#13890)
* helm charts to deploy registries with che

Signed-off-by: Michal Vala <mvala@redhat.com>
2019-07-23 10:07:35 +02:00
Max Shaposhnik 9484d984d7
Add custom image with all required packages for init containers 2019-07-22 10:10:04 +03:00
Florent Benoit 2efdcc6960 fix(helm): Keep labels in sync with che-operator so chectl is able to deploy multi user without errors
It is related to documentation for Remote Che as part of EndGame 7.0.0
Else I'm not able to deploy it using chectl

Change-Id: I9456187a5fb04574c1a9e40e004156a4c45810a9
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-07-15 16:10:33 +02:00
Masaki Muranaka ccda8e309f Run as uid:gid == 1000:1000 on K8s environment.
This patch is based on the discussion at (eclipse#13798).

Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-15 17:07:39 +09:00
Masaki Muranaka e95756f59e Add `securityContext.fsGroup`.
Since recent versions of Keycloak in `eclipse/che-keycloak` runs under user `jboss`
(uid/gid == 1000/1000). So Keycloak will be failed to boot up without `fsGroup`.
2019-07-15 17:07:39 +09:00
Igor Ohrimenko b045651a07
[TS-SELENIUM] Cover the "Use Java IDE features and the inner loop" step from "Happy path" scenario (#13615)
* Cover the 'Use Java IDE features and the inner loop' step from 'Happy path' scenario

Signed-off-by: Ihor Okhrimenko <iokhrime@redhat.com>
2019-07-05 11:35:37 +03:00
Masaki Muranaka fb41e43214 Fix the deployment failure with default `values.yaml`.
This will fix eclipse/che#13558.

Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-06-27 17:21:08 +09:00
Masaki Muranaka 7d91284af0 Enable to set URLs for custom registries.
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-06-14 11:10:05 +09:00
Florent Benoit 2e0e476206 Fix templates for helm 2.14.0 (validating option is enabled)
Fixes #13431

Change-Id: Iac3926967fa25e68552a2f29e3f896fdc42f1f9a
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-05-28 22:56:00 +02:00
Florent Benoit 772ad38414 backport changes from chectl for templates
Many of them are because helm v2.14 is now performing 'validation' phase on templates

Change-Id: I2e46d120237218be64061d4a6800124eedc9a919
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-05-28 10:23:51 +02:00
John Collier 7ac34636bc Add option to specify additional cluster role for workspaces. (#13178)
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-04-26 19:34:28 +02:00
John Collier febc6a4b56 Add option to enable Postgres debug logs in the Che Helm chart (#13093)
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-04-11 11:28:42 +03:00
Oleksandr Andriienko 0ce0408863
Fix licence year for some files. (#13082)
* Fix licence year.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Revert changes for .sql files

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Revert more sql files.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2019-04-11 10:14:48 +03:00
Masaki Muranaka dbe72d1478
Merge pull request #12970 from stnnguyen95/master
Running Che and workspaces as non-root in a Kubernetes cluster.
2019-03-29 13:23:57 +09:00
John Collier 86436a88e6 Allow sidecar containers to list Kubernetes services by default (#12983)
* Allow workspace pods to list Kubernetes services by default
* Update workspace-view-role.yaml to allow listing
of Kubernetes services
* Allow sidecar containers to list services on OpenShift
* Add services resource to workspace-view role for OpenShift

Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-03-28 15:25:55 +02:00
Son Nguyen 15fcd712c5 Running Che and Che workspaces as a non-root in a Kubernetes cluster.
Signed-off-by: Son Nguyen <son.nguyen@softwareag.com>
2019-03-26 01:01:50 -04:00
M J Shashank 570b0de3aa Fix typo in metrics ingress (#12601)
Signed-off-by: M J Shashank <iamshashankmj@gmail.com>
2019-03-21 09:26:24 +02:00
John Collier 7948770831 Add option to Che deployment.yaml to allow self-signed certificates (#12874)
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-03-19 08:23:39 +01:00
Mykola Morhun eec3b38fa6
Fix Che 6 workspaces on multiuser deployment (#12877)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2019-03-14 17:39:11 +02:00
Eugene Ivantsov a9b952297a
Create view role rather than rely on view clusterRole (#12789)
* Create view role rather than rely on view clusterRole

* Create view role for k8s. Fix typo

* Typo and Java doc sync

* Add namespaced role to k8s and openshift templates. Role instead ClusterRole for k8s

* Rename view role to workspace-view

* Fix formatting

* Fix javadoc. Revent erroneous changes to postgres template

* Remove hidden Dockerfile

* Revert pg changes
2019-03-11 18:20:37 +02:00
WeiYan 76417012f6 Fix link for deploying multi-user che to kubernetes (#12623)
Signed-off-by: Wei Yan <ywskycn@gmail.com>
2019-02-08 11:40:21 +02:00
Angel Misevski 40131c332e Enable precreate subpaths property by default in templates
The property CHE_INFRA_KUBERNETES_PVC_PRECREATE__SUBPATHS is required
for PVC cleanup on current versions of Kubernetes/OpenShift.

Without the property enabled, subpaths are created in PVCs by Kubernetes
when they are needed for pods. However, only the leaf directory created
in this way has write permissions for nonroot users. As a result, the
cleanup pod cannot delete directories created (e.g. the
workspaceX/projects) directory.

For more details, see https://github.com/eclipse/che/issues/12445

Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2019-01-25 19:31:46 -05:00
Sergii Leshchenko 51f945a550
Use 'envFrom' in Che Deployment instead of duplicating of entries from config map (#12289) 2019-01-03 11:27:48 +02:00
Mykhailo Kuznietsov 69288516c8
Upgrade Tomcat and change default CORS configuration (#12144) 2018-12-22 10:56:27 +02:00
Lukas Krejci adec44ae9a Only deploy metrics ingress if metrics are enabled.
Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2018-12-14 11:21:56 +02:00