summaryrefslogtreecommitdiff
path: root/lib/gitlab/kubernetes
Commit message (Collapse)AuthorAgeFilesLines
* Add changelog entryJacques Erasmus2019-05-271-0/+23
| | | | Added a changelog entry for the feature
* Teach Helm::Api about #uninstallThong Kuah2019-04-291-0/+7
|
* Implement commands to uninstall cluster applicationshelm_uninstall_commandThong Kuah2019-04-161-0/+55
| | | | | This is the backend part which just allows uninstalling Prometheus for now.
* Add more info logging to cluster appsDylan Griffith2019-04-101-0/+29
| | | | | Log events so that it's easy to see when different requests are starting.
* Revert "Merge branch 'bump_kubernetes_1_11_9' into 'master'"Mayra Cabrera2019-04-051-2/+2
| | | | This reverts merge request !26991
* Bump Helm to 2.13.1 and kubectl to 1.11.9bump_kubernetes_1_11_9Thong Kuah2019-04-051-2/+2
|
* Merge branch '56937-edit-knative-domain' into 'master'Grzegorz Bizon2019-03-071-1/+2
|\ | | | | | | | | | | | | Edit Knative domain after it has been deployed Closes #56937 See merge request gitlab-org/gitlab-ce!25386
| * Creates Clusterss::ApplciationsController update endpointJoão Cunha2019-03-051-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Creates new route - Creates new controller action - Creates call stack: Clusterss::ApplciationsController calls --> Clusters::Applications::UpdateService calls --> Clusters::Applications::ScheduleUpdateService calls --> ClusterUpdateAppWorker calls --> Clusters::Applications::PatchService --> ClusterWaitForAppInstallationWorker DRY req params Adds gcp_cluster:cluster_update_app queue Schedule_update_service is uneeded Extract common logic to a parent class (UpdateService will need it) Introduce new UpdateService Fix rescue class namespace Fix RuboCop offenses Adds BaseService for create and update services Remove request_handler code duplication Fixes update command Move update_command to ApplicationCore so all apps can use it Adds tests for Knative update_command Adds specs for PatchService Raise error if update receives an unistalled app Adds update_service spec Fix RuboCop offense Use subject in favor of go Adds update endpoint specs for project namespace Adds update endpoint specs for group namespace
* | Merge branch 'security-kubernetes-local-ssrf' into 'master'Yorick Peterse2019-03-041-0/+8
|\ \ | |/ |/| | | | | Block local URLs for Kubernetes integration See merge request gitlab/gitlabhq!2901
| * Do not allow local urls in Kubernetes formThong Kuah2019-02-211-0/+8
| | | | | | | | | | | | | | | | | | | | | | Use existing `public_url` validation to block various local urls. Note that this validation will allow local urls if the "Allow requests to the local network from hooks and services" admin setting is enabled. Block KubeClient from using local addresses It will also respect `allow_local_requests_from_hooks_and_services` so if that is enabled KubeClinet will allow local addresses
* | Bump helm and kubectl versionsThong Kuah2019-02-201-2/+2
|/ | | | | | | | Bump the helm and kubectl used in our Kubernetes integration, used e.g. to install apps. Note I have only bumped to the latest patch of the v1.11 series for kubectl as GKE clusters are still on 1.10/1.11
* Upgrade cluster applications, starting with runnerThong Kuah2019-02-073-84/+26
|
* Use http_max_redirects opt to replace monkeypatchThong Kuah2019-01-251-1/+4
| | | | | | | | | | | | http_max_redirects was introduced in 4.2.2, so upgrade kubeclient. The monkey-patch was global so we will have to check that all instances of Kubeclient::Client are handled. Spec all methods of KubeClient This should provide better confidence that we are indeed disallowing redirection in all cases
* Update Helm to 2.12.2 to address Helm client vulnerability56417-update-helm-to-2-12-2-ado-testTakuya Noguchi2019-01-181-1/+1
| | | | Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
* Modify service so that it can be re-runThong Kuah2018-12-041-0/+57
| | | | | | | | | | | | If the service fails mid-point, then we should be able to re-run this service. So, detect presence of any previously created Kubernetes resource and update or create accordingly. Fix specs accordingly. In the case of finalize_creation_service_spec.rb, I decided to stub out the async worker rather than maintaining individual stubs for various kubeclient calls for that worker. Also add test cases for group clusters
* Merge branch 'json-logging-for-k8s' into 'master'Stan Hu2018-11-271-0/+11
|\ | | | | | | | | Json logging for k8s Integration See merge request gitlab-org/gitlab-ce!23328
| * Use JSON logging for helm install servicesDylan Griffith2018-11-271-0/+11
| |
* | Don't remove failed install podsDylan Griffith2018-11-271-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | We want to keep failed install pods around so that it is easier to debug why a failure occured. With this change we also need to ensure that we remove a previous pod with the same name before installing so that re-install does not fail. Another change here is that we no longer need to catch errors from delete_pod! in CheckInstallationProgressService as we now catch the ResourceNotFoundError in Helm::Api. The catch statement in CheckInstallationProgressService was also probably too broad before and should have been narrowed down simply to ResourceNotFoundError.
* | Merge branch 'master' into certmanager-tempAmit Rathi2018-11-2010-0/+20
|\ \ | |/
| * Enable even more frozen string for lib/gitlabgfyoung2018-11-1610-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enables frozen string for the following: * lib/gitlab/hook_data/**/*.rb * lib/gitlab/i18n/**/*.rb * lib/gitlab/import/**/*.rb * lib/gitlab/import_export/**/*.rb * lib/gitlab/kubernetes/**/*.rb * lib/gitlab/legacy_github_import/**/*.rb * lib/gitlab/manifest_import/**/*.rb * lib/gitlab/metrics/**/*.rb * lib/gitlab/middleware/**/*.rb Partially addresses gitlab-org/gitlab-ce#47424.
* | Updated schema.rb and remove extra char from install_commandAmit Rathi2018-11-201-1/+1
| |
* | Merge branch 'master' into certmanager-tempAmit Rathi2018-11-196-19/+44
|\ \ | |/
| * Merge branch '49726-upgrade-helm-to-2-11' into 'master'Kamil Trzciński2018-11-164-17/+31
| |\ | | | | | | | | | | | | | | | | | | Resolve "Upgrade Helm Tiller Version Used By GitLab Managed Apps" Closes #49726 See merge request gitlab-org/gitlab-ce!22693
| | * Remove unnecessary --tiller-namespace49726-upgrade-helm-to-2-11Dylan Griffith2018-11-161-1/+1
| | |
| | * Use helm version loop instead of sleep in ClientCommandDylan Griffith2018-11-161-1/+1
| | |
| | * Extract Helm::ClientCommand for shared commandsDylan Griffith2018-11-163-32/+30
| | |
| | * Upgrade helm to 2.11.0 and upgrade on every installDylan Griffith2018-11-163-3/+19
| | |
| * | Merge branch '53626-update-config-map-on-install-retry' into 'master'Kamil Trzciński2018-11-151-1/+11
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | Update config map if already present on install Closes #53626 See merge request gitlab-org/gitlab-ce!22969
| | * | Update config map if already present on install53626-update-config-map-on-install-retryThong Kuah2018-11-151-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | When an application install fails, and the user retries install, the configmap for the application will already exists. If so, we simply update instead of create.
| * | | Add knative client to kubeclient libraryChris Baumbauer2018-11-151-1/+2
| |/ /
* | | Remove application flagsAmit Rathi2018-11-191-4/+2
| | |
* | | Set appropriate RBAC flag for cluster applicationsAmit Rathi2018-11-151-7/+7
| | |
* | | Merge branch 'master' into certmanager-tempAmit Rathi2018-11-142-16/+6
|\ \ \ | |/ /
| * | Show HTTP response code for Kubernetes errorsThong Kuah2018-11-132-16/+6
| |/
* | Use email on the accountAmit Rathi2018-11-131-6/+5
| |
* | Remove logging from pod.rbAmit Rathi2018-11-131-8/+2
| |
* | Remove logging changesAmit Rathi2018-11-131-21/+7
| |
* | CleanupAmit Rathi2018-11-131-2/+0
| |
* | Updated loggingAmit Rathi2018-11-132-2/+10
| |
* | Merge branch 'master' into certmanager-tempAmit Rathi2018-11-127-22/+35
|\ \ | |/
| * Improve Debugging Capabilities For Helm Application InstallsDylan Griffith2018-11-094-7/+7
| |
| * Fix double-negationChris Baumbauer2018-11-061-2/+2
| |
| * Refactor preinstall/postinstall methods in the helm installerChris Baumbauer2018-11-061-6/+2
| |
| * Fix issue with missing knative cluster role binding, and cleanup testsChris Baumbauer2018-11-051-8/+16
| |
| * Resolve issues raised by KamilChris Baumbauer2018-11-031-16/+3
| |
| * Merge branch 'master' into triggermesh-phase1-knativeChris Baumbauer2018-11-034-20/+8
| |\
| | * Use our own docker image for helm install podsuse-our-own-docker-image-for-helm-install-podsDylan Griffith2018-11-023-7/+2
| | | | | | | | | | | | | | | | | | This will reduce dependencies and failure points during installation. It will also reduce security risks from untrusted dependencies being able to effect all our users
| | * Incorporates Kubernetes Namespace into Cluster's flowThong Kuah2018-11-021-5/+6
| | |
| * | Merge branch 'master' into triggermesh-phase1-knativeChris Baumbauer2018-11-021-40/+23
| |\ \ | | |/
| * | Revert Helm version bumpChris Baumbauer2018-10-293-5/+21
| | |