Commit Graph

140 Commits (fa06d947e7e4e58bddfb9de7825d3039ca5aa725)

Author SHA1 Message Date
cccs-eric fa06d947e7
Adding k8s tolerations to workspace pods (#18691)
* Added TolerationsProvisioner to support toleration in workspace pods

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>
2021-01-18 15:09:49 +02:00
Anatolii Bazko 537c8a92aa
Allow to use internal cluster service hostnames (#18707)
* Allow to use internal cluster service hostnames

Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2021-01-04 09:48:11 +02:00
cccs-eric c4e03c102d
Make che update Images from registries at startup (#18562)
* Added support for Keycloak admin secret
Added support to change endpoint-watcher image

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added user feedback and validation for Keycloak password

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Added feature to registries to update images at startup.

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Trying to improve value names and we use them

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added missing newline

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Missing newline
Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added checksums to configmap to enable pod restart on configmap change.

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>

* Applied code review changes.

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>

* Update from code review

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-12-21 14:32:53 +02:00
Serhii Leshchenko 0c70efaf67
Align app, component labels in helm chart and openshift templates (#18655) 2020-12-18 15:54:15 +02:00
Mykola Morhun 08868bf99f
Fix external helm charts links (#18651)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-12-18 14:04:57 +02:00
cccs-eric 1a7bfa8b53
Added checksums to configmaps to enable pod restart on configmap change. (#18611)
* Added support for Keycloak admin secret
Added support to change endpoint-watcher image

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added user feedback and validation for Keycloak password

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Added checksums to configmap to enable pod restart on configmap change.

Signed-off-by: cccs-eric <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-12-14 17:11:39 +02:00
Anatolii Bazko d001bde74f
Revert "Added checksums to configmaps to enable pod restart on configmap change. (#18600)" (#18603)
This reverts commit 8b0e5e070d.
2020-12-11 17:37:09 +02:00
cccs-eric 8b0e5e070d
Added checksums to configmaps to enable pod restart on configmap change. (#18600)
* Added support for Keycloak admin secret
Added support to change endpoint-watcher image

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added user feedback and validation for Keycloak password

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Added checksums to configmap to enable pod restart on configmap change.

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-12-11 16:19:53 +02:00
Anatolii Bazko 6e6b773e06
Add missing internal api urls (#18574)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-12-10 10:29:24 +02:00
cccs-eric f28085dae1
Adding support for CHE_LIMITS_USER_WORKSPACES_RUN_COUNT and CHE_WORKSPACE_POD_NODE__SELECTOR in helm chart (#18528)
* Added support for Keycloak admin secret
Added support to change endpoint-watcher image

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added user feedback and validation for Keycloak password

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Added nodeSelector feature to helm chart (was simply missing from chart)
Fixed the CHE_LIMITS_USER_WORKSPACES_RUN_COUNT name

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Fixed location of workspace.number field in values.yaml

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Update deploy/kubernetes/helm/che/templates/configmap.yaml

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-12-07 16:24:32 +02:00
cccs-eric 17824f86a0
Adding support for Keycloak admin secret and endpoint-watcher image configuration (#18506)
* Added support for Keycloak admin secret
Added support to change endpoint-watcher image

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Added user feedback and validation for Keycloak password

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

* Apply suggestions from code review

Signed-off-by: Eric Ladouceur <eric.ladouceur@cyber.gc.ca>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>

Co-authored-by: Anatolii Bazko <abazko@redhat.com>
2020-12-03 14:52:19 +02:00
Mykola Morhun 75889e8c33
Propagate CA certs bundle on all infrastructures (#18377)
Implement CA bundle propagation on Kubernetes infrastructures family

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-11-27 15:01:59 +02:00
Sergii Leshchenko e58715e0d9 Serve dashboard next from separate deployment with helm chart 2020-11-24 17:46:16 +02:00
Mykola Morhun 0815cdb1e0
[Helm] Use default ingress TLS certificate if tls.secretName is not set (#18259)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-11-10 12:35:42 +02:00
Masaki Muranaka dc43120bc5 Enable to customize `ingress.class`.
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2020-11-04 17:41:14 +09:00
Masaki Muranaka e5885c7610 Fix comments.
They are not for PostgreSQL.

Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2020-11-04 17:41:14 +09:00
Mykola Morhun f4ccf6cefc
Restore requireAdminPasswordChange Helm property (#18275)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-11-03 17:36:45 +02:00
Serhii Leshchenko beaca7c9f9
Run dashboard in a dedicated deployment with helm chart (#18093)
* Run dashboard in a dedicated deployment
* configure dashboard probes to requests /dashboard/ to detect packaging issues
* Apply the same probes configuration as registries apache servers has
* Add end slash to dashboard path to continue support redirects
* Bump che dashboard version in helm charts on release
* Clean up references to removed deploy_che.sh
2020-10-19 16:06:33 +03:00
Kessler ecdb54e807
feat: kubernetes keycloak deployment strategy (#17304)
* feat: kubernetes keycloak deployment strategy

Allow to set the deployment strategy, the default RollingUpdate fail
if multiattach is not supported by volumes

Signed-off-by: Jean-François Monnier <kessler.dev@gmail.com>

* Update deploy/kubernetes/helm/che/custom-charts/che-keycloak/values.yaml

Signed-off-by: Jean-François Monnier <kessler.dev@gmail.com>
Co-authored-by: Serhii Leshchenko <sleshche@redhat.com>

Co-authored-by: Serhii Leshchenko <sleshche@redhat.com>
2020-09-23 10:28:16 +03:00
Michal Vala 0e0c89a502
helm charts - move che log level to variable (#17891) 2020-09-17 09:21:01 +02:00
Michal Vala 0bddb7abaa
fixes #17064 - gateway single-host with helm (#17788) 2020-09-10 15:21:41 +02:00
Mykola Morhun dd42190097
[Helm] Add POD_NAMESPACE environment variable into Che server pod (#17773)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-09-02 14:23:43 +03:00
disaster37 07431f1436 Add quote on memory limit
Signed-off-by: disaster37 <sebastien.langoureaux@webcenter.fr>
2020-08-11 07:55:59 +00:00
Anatolii Bazko 548bf498f7
Customize cheHost (#17538)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-08-04 10:35:33 +03:00
Anatolii Bazko e88bf91fd7
Fix plugin-registry url in multi-host mode (#17477)
Signed-off-by: Anatolii Bazko <abazko@redhat.com>
2020-07-24 16:15:35 +03:00
Anatolii Bazko 77f11644a4
Fix deploying Eclipse Che with single-host strategy (#17392)
Signed-off-by: Anatoliy Bazko <abazko@redhat.com>
2020-07-14 14:12:34 +03:00
Sergii Kabashniuk 7dabd9e400
Migration of the che server codebase to Java 11 (#16649)
Migration of the che server codebase to Java 11 (#16649)

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-06-16 20:47:25 +02:00
Mykola Morhun 307a780c64
Read self-signed certiicate from dedicated secret (to be consistent with operator installer) (#17044)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-06-15 17:30:02 +03:00
Mykola Morhun 6333d8951a
[Helm] Make Keycloak admin username and password configurable (#16849)
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-05-05 15:44:13 +03:00
Igor Vinokur 95fc64fdc9
Add an ability to add public key certificate to Java trust store (#16006) 2020-03-04 10:50:33 +02:00
Igor Vinokur cbaf94e69c
Apply OpenShift OAuth provider (#15963) 2020-03-04 10:49:25 +02:00
Mykola Morhun 579cb67548
Remove selfSignedCertSecretName property (#15878)
* Remove selfSignedCertSecretName property

Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
2020-02-26 11:26:31 +02:00
Lukas Krejci 84cbaecfb1
Add a configuration property to the helm chart to not define liveness and (#15429)
readiness probes on che server. This is helpful when debugging and pausing
the server for a longer time.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2020-01-30 12:59:43 +01:00
Oleksandr Andriienko d13f9d3ecb
Add ability to set up Che workspace and postgress pvc class names using helm. (#15677)
*  Add ability to set up Che workspace and postgress pvc names using helm.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* improve helm value chePostgresPVCStorageClassName location

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>

* Fix indent in the yaml.

Signed-off-by: Oleksandr Andriienko <oandriie@redhat.com>
2020-01-16 12:30:21 +02:00
Masaki Muranaka 9d6cb68aa8
Merge pull request #15227 from kellyhyomin/che-15168
Update prometheus and grafana version in requirement.yaml file to be compatible with k8s v1.16
2020-01-14 09:33:24 +09:00
Vitalii Parfonov c07e261ee3
Move to the quay.io (#15569)
* Move to the quay.io: change image id to use quay.io

Signed-off-by: Vitalii Parfonov <vparfono@redhat.com>
2020-01-11 16:11:34 +02:00
Sergii Kabashniuk 2e38478b4c
Disable CORS by default in helm (#15637)
* Disable CORS by default in helm. Align helm and che-operator configuration
Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>

Signed-off-by: Sergii Kabashniuk <skabashniuk@redhat.com>
2020-01-09 09:54:52 +01:00
Mario Loriedo 8845446c2a Fix missing {{end}} in helm chart template
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2019-12-18 22:10:12 +01:00
Kelly(hyomin.kim) 48751373e7 Add spec.selector field in che-jaeger deployment.yaml (#15498)
Signed-off-by: 김효민 <hmkim@popcornsar.com>
2019-12-18 10:51:43 +02:00
Masaki Muranaka b06e062e4d Enable to set the value `che.workspace.plugin_broker.wait_timeout_min`
Signed-off-by: Masaki Muranaka <monaka@monami-ya.com>
2019-12-17 06:28:28 +09:00
hmkim 5454f5670b Update prometheus and grafana version in requirement.yaml file to be compatible with k8s v1.16
Signed-off-by: hmkim <hmkim@popcornsar.com>
2019-12-11 13:44:52 +09:00
Lukas Krejci b2b6f5f488
User selection of the workspace namespace/project (#15040)
Enrich `RuntimeIdentity` with `infrastructureNamespace` property so that it can be used by the namespace/project factories to create/obtain appropriate namespaces for the workspaces and make use of it throughout the workspace provisioning.

Add an explicit query parameter to assign a workspace to a specific namespace, if possible, at workspace creation time.
2019-11-28 14:36:25 +01:00
Vitalii Parfonov 1b2a484f32
Support git operation for repos with self-signed SSL certs (#15218)
* Support git operation for repositories with self-signed SSL certs
2019-11-21 17:29:52 +02:00
Sergii Leshchenko fcc628fe0f
Add an ability to configure PVC strategy with helm chart (#15142)
Signed-off-by: Sergii Leshchenko <sleshche@redhat.com>
2019-11-21 10:49:27 +02:00
Angel Misevski d205b84c94 Remove/update deprecated machine start timeout env var in templates
Signed-off-by: Angel Misevski <amisevsk@redhat.com>
2019-11-13 12:44:24 -05:00
Tom George ab5113e8eb Set postgres deployment to use recreate deployment strategy
Signed-off-by: Tom George <tg82490@gmail.com>
2019-10-30 11:47:49 +01:00
Lukas Krejci 7d56354a5e
Use che.infrastructure.kubernetes.namespace.default during workspace namespace resolution (#14828)
Load the workspace during then namespace resolution so that we can check
for the attribute stored in the workspace attributes.

Switch the default namespace to `<username>-che`.

Update the property descriptions in che.properties and use the new
CHE_INFRA_KUBERNETES_NAMESPACE_DEFAULT in the helm chart.

Move the delete to the KubernetesNamespace/OpenShiftProject to
concentrate the handling in one place.

Split the isNamespaceStatic() (previously called isPredefined()) into
isCreatingNamespaces() and isManagingNamespaces() to separately capture
the two usecases in which that single method was previously incorrectly
called. Also make these methods workspace-specific to be able to
consistently work with the legacy logic across all methods.

Signed-off-by: Lukas Krejci <lkrejci@redhat.com>
2019-10-23 13:22:51 +02:00
Sergii Kabashniuk 6a09c52253
Changed default idle timeout and limit of running workspaces per user (#14747) 2019-10-04 09:34:18 +02:00
Mario Loriedo a684d211d6 Update Deployments yamls in helm charts to be compatible with k8s v1.16
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2019-10-03 12:18:00 +02:00
Samuel Hogg 10c9c2476c Correct Che image tag in Helm Chart values file (#14396)
Signed-off-by: Sam Hogg <sam.hogg@arm.com>
2019-09-11 12:18:43 +02:00