[ide-proxy] add blobserve handler

Author: iQQBot

components/blobserve/pkg/blobserve/blobserve.go

@@ -215,7 +215,7 @@ func (reg *Server) serve(w http.ResponseWriter, req *http.Request) {
 
 	// The blobFor operation's context must be independent of this request. Even if we do not
 	// serve this request in time, we might want to serve another from the same ref in the future.
-	blob, hash, err := reg.refstore.BlobFor(context.Background(), ref, req.Header.Get("X-BlobServe-ReadOnly") == "true")
+	blob, hash, err := reg.refstore.BlobFor(context.Background(), ref, false)
 	if err == errdefs.ErrNotFound {
 		http.Error(w, fmt.Sprintf("image %s not found: %q", html.EscapeString(ref), err), http.StatusNotFound)
 		return

components/ide-proxy/conf/Caddyfile

@@ -3,9 +3,41 @@
 	admin off
 }
 
+(compression) {
+	encode zstd gzip
+}
+
+(upstream_headers) {
+	header_up X-Real-IP {http.request.remote.host}
+}
+
+(upstream_connection) {
+	lb_try_duration 1s
+}
+
 :80 {
 	header -Server
 
+	@blobserve path /blobserve/*
+	handle @blobserve {
+		import compression
+
+		uri strip_prefix /blobserve
+		uri replace /__files__/ / 1
+
+		header {
+			Access-Control-Allow-Origin *
+			Access-Control-Allow-Methods "GET, OPTIONS"
+		}
+
+		reverse_proxy blobserve.{$KUBE_NAMESPACE}.{$KUBE_DOMAIN}:4000 {
+			import upstream_headers
+			import upstream_connection
+
+			flush_interval -1
+		}
+	}
+
 	root * /www
 	file_server {
 		precompressed gzip br

install/installer/pkg/components/blobserve/networkpolicy.go

@@ -6,6 +6,7 @@ package blobserve
 
 import (
 	"github.com/gitpod-io/gitpod/installer/pkg/common"
+	ideproxy "github.com/gitpod-io/gitpod/installer/pkg/components/ide-proxy"
 	"github.com/gitpod-io/gitpod/installer/pkg/components/proxy"
 	wsproxy "github.com/gitpod-io/gitpod/installer/pkg/components/ws-proxy"
 
@@ -38,9 +39,14 @@ func networkpolicy(ctx *common.RenderContext) ([]runtime.Object, error) {
 						"component": proxy.Component,
 					}},
 				}, {
+					// TODO: (pd) delete this after all workspace cluster deployed
 					PodSelector: &metav1.LabelSelector{MatchLabels: map[string]string{
 						"component": wsproxy.Component,
 					}},
+				}, {
+					PodSelector: &metav1.LabelSelector{MatchLabels: map[string]string{
+						"component": ideproxy.Component,
+					}},
 				}},
 			}},
 		},