Vitalii Parfonov
1b2a484f32
Support git operation for repos with self-signed SSL certs ( #15218 )
...
* Support git operation for repositories with self-signed SSL certs
2019-11-21 17:29:52 +02:00
Sergii Leshchenko
fcc628fe0f
Add an ability to configure PVC strategy with helm chart ( #15142 )
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-11-21 10:49:27 +02:00
Angel Misevski
d205b84c94
Remove/update deprecated machine start timeout env var in templates
...
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2019-11-13 12:44:24 -05:00
Tom George
ab5113e8eb
Set postgres deployment to use recreate deployment strategy
...
Signed-off-by: Tom George <tg82490@gmail.com>
2019-10-30 11:47:49 +01:00
Lukas Krejci
7d56354a5e
Use che.infrastructure.kubernetes.namespace.default during workspace namespace resolution ( #14828 )
...
Load the workspace during then namespace resolution so that we can check
for the attribute stored in the workspace attributes.
Switch the default namespace to `<username>-che`.
Update the property descriptions in che.properties and use the new
CHE_INFRA_KUBERNETES_NAMESPACE_DEFAULT in the helm chart.
Move the delete to the KubernetesNamespace/OpenShiftProject to
concentrate the handling in one place.
Split the isNamespaceStatic() (previously called isPredefined()) into
isCreatingNamespaces() and isManagingNamespaces() to separately capture
the two usecases in which that single method was previously incorrectly
called. Also make these methods workspace-specific to be able to
consistently work with the legacy logic across all methods.
Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2019-10-23 13:22:51 +02:00
Sergii Kabashniuk
6a09c52253
Changed default idle timeout and limit of running workspaces per user ( #14747 )
2019-10-04 09:34:18 +02:00
Mario Loriedo
a684d211d6
Update Deployments yamls in helm charts to be compatible with k8s v1.16
...
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2019-10-03 12:18:00 +02:00
Samuel Hogg
10c9c2476c
Correct Che image tag in Helm Chart values file ( #14396 )
...
Signed-off-by: Sam Hogg <sam.hogg@arm.com>
2019-09-11 12:18:43 +02:00
Mykhailo Kuznietsov
40ee503a05
Remove Stack service ( #14078 )
...
* Remove Che6 Stack concept
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2019-09-03 08:00:12 +02:00
Lukas Krejci
af26d29b96
Generalize the ingress configuration to support single-host in single-user mode on kubernetes ( #14134 )
2019-08-26 16:27:52 +02:00
Vitalii Parfonov
608882a3ee
use the latest nightly image, adapt e2e tests for new behavior of debug settings in Theia ( #14285 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-23 07:30:12 +03:00
Vitalii Parfonov
c732524e4d
Set che-plugin-registry image version to 7.0.0 ( #14278 )
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-19 15:34:25 +03:00
Vitalii Parfonov
c3b0abbe5d
Set all image version to the 7.0.0 to align it with CheTheia version ( #14264 )
...
* Set all image version to the 7.0.0 to aligen it with CheTheia version until #14248 not fixed
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-16 17:34:38 +03:00
Vitalii Parfonov
f57a95e22c
set plugin registry image to nightly
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-16 13:27:44 +02:00
Vitalii Parfonov
e08d24c7ff
set 7.0.0 version for plugin registry
...
Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2019-08-15 17:07:16 +02:00
Sergii Leshchenko
f24796bd2a
Use different secrets for TLS and self-signed-cert ( #14176 )
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-08-12 13:01:55 +03:00
Michal Vala
1af529cc4b
increase registries memory limit to 256Mi in helm charts ( #14135 )
...
Signed-off-by: Michal Vala <mvala@redhat.com>
2019-08-06 14:57:21 +02:00
Sergii Leshchenko
32e5f63d54
Improve configuring of self-signed certificate
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
320178a842
Delete unused cheWorkspace helm chart value
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
8165028eeb
Update helm chart to provide Che Server TLS secret data for propagation
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
229671be28
Document TLS section parameters of helm chart
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
5ff0beb894
Remove automated creation of certificate and cert manager
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
23384c40ea
Do not change default server-strategy when TLS is enabled
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Sergii Leshchenko
1bfec4a79a
Do not change default value of multi-user if TLS is enabled
...
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-07-30 10:30:30 +03:00
Masaki Muranaka
376da092d4
Add `DB_VENDOR` to env. (eclipse#13919)
...
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-24 12:21:48 +09:00
Masaki Muranaka
7696d2ccfd
Rename environment variables. (eclipse#13821)
...
POSTGRES_* to DB_*.
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-24 12:21:48 +09:00
Michal Vala
ec50704eff
Helm chart deploy registries ( #13890 )
...
* helm charts to deploy registries with che
Signed-off-by: Michal Vala <mvala@redhat.com>
2019-07-23 10:07:35 +02:00
Max Shaposhnik
9484d984d7
Add custom image with all required packages for init containers
2019-07-22 10:10:04 +03:00
Florent Benoit
2efdcc6960
fix(helm): Keep labels in sync with che-operator so chectl is able to deploy multi user without errors
...
It is related to documentation for Remote Che as part of EndGame 7.0.0
Else I'm not able to deploy it using chectl
Change-Id: I9456187a5fb04574c1a9e40e004156a4c45810a9
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-07-15 16:10:33 +02:00
Masaki Muranaka
ccda8e309f
Run as uid:gid == 1000:1000 on K8s environment.
...
This patch is based on the discussion at (eclipse#13798).
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-07-15 17:07:39 +09:00
Masaki Muranaka
e95756f59e
Add `securityContext.fsGroup`.
...
Since recent versions of Keycloak in `eclipse/che-keycloak` runs under user `jboss`
(uid/gid == 1000/1000). So Keycloak will be failed to boot up without `fsGroup`.
2019-07-15 17:07:39 +09:00
Igor Ohrimenko
b045651a07
[TS-SELENIUM] Cover the "Use Java IDE features and the inner loop" step from "Happy path" scenario ( #13615 )
...
* Cover the 'Use Java IDE features and the inner loop' step from 'Happy path' scenario
Signed-off-by: Ihor Okhrimenko <iokhrime@redhat.com>
2019-07-05 11:35:37 +03:00
Masaki Muranaka
fb41e43214
Fix the deployment failure with default `values.yaml`.
...
This will fix eclipse/che#13558 .
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-06-27 17:21:08 +09:00
Masaki Muranaka
7d91284af0
Enable to set URLs for custom registries.
...
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-06-14 11:10:05 +09:00
Florent Benoit
2e0e476206
Fix templates for helm 2.14.0 (validating option is enabled)
...
Fixes #13431
Change-Id: Iac3926967fa25e68552a2f29e3f896fdc42f1f9a
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-05-28 22:56:00 +02:00
Florent Benoit
772ad38414
backport changes from chectl for templates
...
Many of them are because helm v2.14 is now performing 'validation' phase on templates
Change-Id: I2e46d120237218be64061d4a6800124eedc9a919
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2019-05-28 10:23:51 +02:00
John Collier
7ac34636bc
Add option to specify additional cluster role for workspaces. ( #13178 )
...
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-04-26 19:34:28 +02:00
John Collier
febc6a4b56
Add option to enable Postgres debug logs in the Che Helm chart ( #13093 )
...
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-04-11 11:28:42 +03:00
Oleksandr Andriienko
0ce0408863
Fix licence year for some files. ( #13082 )
...
* Fix licence year.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
* Revert changes for .sql files
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
* Revert more sql files.
Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2019-04-11 10:14:48 +03:00
Masaki Muranaka
dbe72d1478
Merge pull request #12970 from stnnguyen95/master
...
Running Che and workspaces as non-root in a Kubernetes cluster.
2019-03-29 13:23:57 +09:00
John Collier
86436a88e6
Allow sidecar containers to list Kubernetes services by default ( #12983 )
...
* Allow workspace pods to list Kubernetes services by default
* Update workspace-view-role.yaml to allow listing
of Kubernetes services
* Allow sidecar containers to list services on OpenShift
* Add services resource to workspace-view role for OpenShift
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-03-28 15:25:55 +02:00
Son Nguyen
15fcd712c5
Running Che and Che workspaces as a non-root in a Kubernetes cluster.
...
Signed-off-by: Son Nguyen <son.nguyen@softwareag.com>
2019-03-26 01:01:50 -04:00
M J Shashank
570b0de3aa
Fix typo in metrics ingress ( #12601 )
...
Signed-off-by: M J Shashank <iamshashankmj@gmail.com>
2019-03-21 09:26:24 +02:00
John Collier
7948770831
Add option to Che deployment.yaml to allow self-signed certificates ( #12874 )
...
Signed-off-by: John Collier <John.J.Collier@ibm.com>
2019-03-19 08:23:39 +01:00
Mykola Morhun
eec3b38fa6
Fix Che 6 workspaces on multiuser deployment ( #12877 )
...
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2019-03-14 17:39:11 +02:00
Eugene Ivantsov
a9b952297a
Create view role rather than rely on view clusterRole ( #12789 )
...
* Create view role rather than rely on view clusterRole
* Create view role for k8s. Fix typo
* Typo and Java doc sync
* Add namespaced role to k8s and openshift templates. Role instead ClusterRole for k8s
* Rename view role to workspace-view
* Fix formatting
* Fix javadoc. Revent erroneous changes to postgres template
* Remove hidden Dockerfile
* Revert pg changes
2019-03-11 18:20:37 +02:00
WeiYan
76417012f6
Fix link for deploying multi-user che to kubernetes ( #12623 )
...
Signed-off-by: Wei Yan <ywskycn@gmail.com>
2019-02-08 11:40:21 +02:00
Angel Misevski
40131c332e
Enable precreate subpaths property by default in templates
...
The property CHE_INFRA_KUBERNETES_PVC_PRECREATE__SUBPATHS is required
for PVC cleanup on current versions of Kubernetes/OpenShift.
Without the property enabled, subpaths are created in PVCs by Kubernetes
when they are needed for pods. However, only the leaf directory created
in this way has write permissions for nonroot users. As a result, the
cleanup pod cannot delete directories created (e.g. the
workspaceX/projects) directory.
For more details, see https://github.com/eclipse/che/issues/12445
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2019-01-25 19:31:46 -05:00
Sergii Leshchenko
51f945a550
Use 'envFrom' in Che Deployment instead of duplicating of entries from config map ( #12289 )
2019-01-03 11:27:48 +02:00
Mykhailo Kuznietsov
69288516c8
Upgrade Tomcat and change default CORS configuration ( #12144 )
2018-12-22 10:56:27 +02:00