-
Notifications
You must be signed in to change notification settings - Fork 34
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* chore: create release 0.57.0 * feat!: gateway refactor (#3721) The previous gateway components are replaced with a single API Gateway responsible for login and reverse proxying requests. Details: * Remove the `gateway-auth` Python component * Update the `gateway-revproxy` Go component (now `gateway`) * Update the `ui-server` to remove login responsibilities --------- Co-authored-by: Tasko Olevski <[email protected]> * feat: upgrade csi-rclone to 0.3.0 (#3753) Release notes from csi-rclone: - feat: get secret from pvc annotation by @olevski in #20 - feat: add support for decrypting storage credentials by @m-alisafaee in #17 - fix: don't error out if unmounting fails, as it might block dependent resources by @Panaetius in #16 * feat: Update search services to 0.5.0 (#3754) * feat: update notebooks to 1.26.0 (#3757) * fix: add environment variable for new redis stream to search (#3756) * (docs) redirect to Community portal for Renku 2.0 docs (#3758) * fix: bump csi rclone to 0.3.1 (#3759) This fixes an error where the new version of the csi rclone was failing when a secret annotation was not used to define the secret. This was supposed to work but the storage class that is marked to use the PVC annotation will fail if the annotation is not present. So we had to use 2 storage classes one that requires a PVC annotation for the secret and another that is the same as the current one - which expects that the PVC name and secret is the same. * chore(ci): Update renku actions to v1.12.3 (#3766) Co-authored-by: Rok Roškar <[email protected]> * fix: implement browser logout from the gateway (#3764) Add browser-based logout for Keycloak and Gitlab. Previously, the logout flow would not end the Keycloak nor the GitLab browser session. This prevented users from switching accounts because their existing Keycloak and GitLab sessions would be re-used when logging in with the renku gateway. * feat: update renku-data-services to v0.20.0 and renku-ui to 3.35.0 (#3765) * data svc release v0.20.0 * bump UI -> 3.35.0 * update changelog * Update CHANGELOG.rst Co-authored-by: Laura <[email protected]> * apply CHANGELOG suggestions --------- Co-authored-by: Flora Thiebaut <[email protected]> Co-authored-by: Rok Roškar <[email protected]> Co-authored-by: Laura <[email protected]> Co-authored-by: Andrea Cordoba <[email protected]> * fix: bump gateway to 1.0.2 (#3767) Fixes the `Authorization` header for the Renku 2.0 search service. * chore: add general release wording * chore: polish release 0.57.0 changelog --------- Co-authored-by: Flora Thiebaut <[email protected]> Co-authored-by: Tasko Olevski <[email protected]> Co-authored-by: eikek <[email protected]> Co-authored-by: M. Alisafaee <[email protected]> Co-authored-by: Laura <[email protected]> Co-authored-by: Rok Roškar <[email protected]> Co-authored-by: Ralf Grubenmann <[email protected]> Co-authored-by: Andrea Cordoba <[email protected]> Co-authored-by: Rok Roškar <[email protected]>
- Loading branch information
10 people
authored
Sep 16, 2024
1 parent
15a50f9
commit 2929f53
Showing
29 changed files
with
417 additions
and
317 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -63,7 +63,7 @@ jobs: | |
| steps: | ||
| - uses: actions/[email protected] | ||
| - id: deploy-comment | ||
| uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.11.3 | ||
| uses: SwissDataScienceCenter/renku-actions/check-pr-description@v1.12.3 | ||
| with: | ||
| string: /deploy | ||
| pr_ref: ${{ github.event.number }} | ||
|
|
@@ -79,7 +79,7 @@ jobs: | |
| - uses: actions/[email protected] | ||
| - name: renku build and deploy | ||
| if: needs.check-deploy.outputs.pr-contains-string == 'true' | ||
| uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.11.3 | ||
| uses: SwissDataScienceCenter/renku-actions/deploy-renku@v1.12.3 | ||
| env: | ||
| DOCKER_PASSWORD: ${{ secrets.RENKU_DOCKER_PASSWORD }} | ||
| DOCKER_USERNAME: ${{ secrets.RENKU_DOCKER_USERNAME }} | ||
|
|
@@ -122,7 +122,7 @@ jobs: | |
| needs: [check-deploy, deploy-pr] | ||
| runs-on: ubuntu-22.04 | ||
| steps: | ||
| - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.11.3 | ||
| - uses: SwissDataScienceCenter/renku-actions/test-renku@v1.12.3 | ||
| with: | ||
| kubeconfig: ${{ secrets.RENKUBOT_DEV_KUBECONFIG }} | ||
| renku-release: ci-renku-${{ github.event.number }} | ||
|
|
@@ -150,7 +150,7 @@ jobs: | |
| ] | ||
|
|
||
| steps: | ||
| - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.11.3 | ||
| - uses: SwissDataScienceCenter/renku-actions/test-renku-cypress@v1.12.3 | ||
| if: github.event.action != 'closed' && needs.check-deploy.outputs.pr-contains-string == 'true' && needs.check-deploy.outputs.test-enabled == 'true' | ||
| with: | ||
| e2e-target: ${{ matrix.tests }} | ||
|
|
@@ -183,7 +183,7 @@ jobs: | |
| runs-on: ubuntu-22.04 | ||
| steps: | ||
| - name: renku teardown | ||
| uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.11.3 | ||
| uses: SwissDataScienceCenter/renku-actions/cleanup-renku-ci-deployments@v1.12.3 | ||
| env: | ||
| HELM_RELEASE_REGEX: "^ci-renku-${{ github.event.number }}$" | ||
| GITLAB_TOKEN: ${{ secrets.DEV_GITLAB_TOKEN }} | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,89 @@ | ||
| apiVersion: v1 | ||
| kind: ConfigMap | ||
| metadata: | ||
| name: {{ template "renku.fullname" . }}-gateway | ||
| labels: | ||
| app: {{ template "gateway.name" . }} | ||
| chart: {{ template "renku.chart" . }} | ||
| release: {{ .Release.Name }} | ||
| heritage: {{ .Release.Service }} | ||
| data: | ||
| config.yaml: | | ||
| server: | ||
| port: 8080 | ||
| host: 0.0.0.0 | ||
| rateLimits: | ||
| enabled: {{ .Values.gateway.rateLimits.general.enabled }} | ||
| rate: {{ .Values.gateway.rateLimits.general.average }} | ||
| burst: {{ .Values.gateway.rateLimits.general.burst }} | ||
| {{- with .Values.gateway.allowOrigin }} | ||
| allowOrigin: | ||
| {{- toYaml . | nindent 8 }} | ||
| {{- end }} | ||
| sessions: | ||
| authorizationVerifiers: | ||
| - issuer: {{ printf "%s/realms/%s" (include "renku.keycloakUrl" . | trimSuffix "/") (include "renku.keycloak.realm" .) }} | ||
| audience: renku | ||
| authorizedParty: renku | ||
| - issuer: {{ printf "%s/realms/%s" (include "renku.keycloakUrl" . | trimSuffix "/") (include "renku.keycloak.realm" .) }} | ||
| audience: renku | ||
| authorizedParty: renku-cli | ||
| revproxy: | ||
| renkuBaseUrl: {{ include "renku.baseUrl" . | quote }} | ||
| {{- if .Values.gitlab.enabled }} | ||
| externalGitlabUrl: "" | ||
| {{- else }} | ||
| externalGitlabUrl: {{ .Values.global.gitlab.url | default "" | quote }} | ||
| {{- end }} | ||
| k8sNamespace: {{ .Release.Namespace }} | ||
| renkuServices: | ||
| notebooks: {{ printf "http://%s-notebooks" .Release.Name | quote }} | ||
| kg: {{ printf "http://%s-knowledge-graph" .Release.Name | quote }} | ||
| webhook: {{ printf "http://%s-webhook-service" .Release.Name | quote }} | ||
| core: | ||
| serviceNames: | ||
| {{- include "gateway.core.serviceNamesYaml" . | nindent 12 }} | ||
| servicePaths: | ||
| {{- include "gateway.core.pathsYaml" . | nindent 12 }} | ||
| sticky: true | ||
| dataService: {{ printf "http://%s-data-service" .Release.Name | quote }} | ||
| keycloak: {{ include "renku.keycloakUrl" . | quote }} | ||
| uiserver: {{ printf "http://%s" (include "ui-server.fullname" .) | quote }} | ||
| search: {{ printf "http://%s-search-api" .Release.Name | quote }} | ||
| login: | ||
| renkuBaseUrl: {{ include "renku.baseUrl" . | quote }} | ||
| loginRoutesBasePath: "/api/auth" | ||
| defaultAppRedirectURL: {{ include "renku.baseUrl" . | quote }} | ||
| tokenEncryption: | ||
| enabled: true | ||
| providers: | ||
| renku: | ||
| issuer: {{ printf "%s/realms/%s" (include "renku.keycloakUrl" . | trimSuffix "/") (include "renku.keycloak.realm" .) }} | ||
| clientID: renku | ||
| scopes: ["profile", "email", "openid", "microprofile-jwt"] | ||
| callbackURI: {{ printf "%s/api/auth/callback" (include "renku.baseUrl" .) }} | ||
| usePKCE: false | ||
| gitlab: | ||
| issuer: {{ .Values.global.gitlab.url | quote }} | ||
| clientID: {{ .Values.gateway.gitlabClientId | default .Values.global.gateway.gitlabClientId | quote }} | ||
| scopes: ["openid", "api", "read_user", "read_repository"] | ||
| callbackURI: {{ printf "%s/api/auth/callback" (include "renku.baseUrl" .) }} | ||
| usePKCE: false | ||
| oldGitLabLogout: {{ .Values.gateway.oldGitLabLogout | default false }} | ||
| logoutGitLabUponRenkuLogout: {{ .Values.gateway.logoutGitLabUponRenkuLogout | default true }} | ||
| redis: | ||
| type: redis | ||
| addresses: | ||
| - {{ printf "%s:%d" .Values.global.redis.host (.Values.global.redis.port | int) | quote }} | ||
| isSentinel: {{ .Values.global.redis.sentinel.enabled }} | ||
| masterName: {{ .Values.global.redis.sentinel.masterSet | quote }} | ||
| dbIndex: {{ .Values.global.redis.dbIndex.gateway }} | ||
| monitoring: | ||
| sentry: | ||
| enabled: {{ .Values.gateway.sentry.enabled }} | ||
| environment: {{ .Values.gateway.sentry.environment }} | ||
| sampleRate: {{ .Values.gateway.sentry.sampleRate }} | ||
| prometheus: | ||
| enabled: {{ .Values.gateway.metrics.enabled }} | ||
| port: {{ .Values.gateway.metrics.port }} | ||
| --- |
Oops, something went wrong.