Skip to content

Commit f93e7b6

Browse files
author
Prince Rachit Sinha
committed
Re configure config yamls
1 parent 4bb2386 commit f93e7b6

File tree

2 files changed

+228
-2
lines changed

2 files changed

+228
-2
lines changed

‎.werft/build.ts

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -413,8 +413,7 @@ export async function deployToDev(deploymentConfig: DeploymentConfig, workspaceF
413413

414414
werft.log("helm", "installing k3s ws cluster")
415415
exec(`export KUBECONFIG=${pathToKubeConfig} && helm dependencies up`);
416-
exec(`export KUBECONFIG=${pathToKubeConfig} && /usr/local/bin/helm3 upgrade --install --timeout 10m -f ../.werft/values.dev.yaml ${flags} ${helmInstallName} .`);
417-
// exec(`export KUBECONFIG=${pathToKubeConfig} && kubectl apply -f ../.werft/jaeger.yaml`);
416+
exec(`export KUBECONFIG=${pathToKubeConfig} && /usr/local/bin/helm3 upgrade --install --timeout 10m -f ../.werft/values.dev.yaml ../werft/values.devK3sWs.yaml ${flags} ${helmInstallName} .`);
418417
}
419418

420419
function addDeploymentFlags() {

‎.werft/values.devK3sWs.yaml

Lines changed: 227 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,227 @@
1+
installation:
2+
stage: devstaging
3+
tenant: gitpod-core
4+
region: europe-west1
5+
cluster: "00"
6+
shortname: "dev"
7+
hostname: staging.gitpod-dev.com
8+
imagePrefix: eu.gcr.io/gitpod-core-dev/build/
9+
certificatesSecret:
10+
secretName: proxy-config-certificates
11+
version: not-set
12+
imagePullPolicy: Always
13+
affinity:
14+
nodeAffinity:
15+
requiredDuringSchedulingIgnoredDuringExecution:
16+
nodeSelectorTerms:
17+
- matchExpressions:
18+
- key: gitpod.io/workload_services
19+
operator: In
20+
values:
21+
- "true"
22+
authProviders: []
23+
tracing:
24+
endoint: http://jaeger-collector:14268/api/traces
25+
samplerType: const
26+
samplerParam: "1"
27+
28+
components:
29+
30+
agentSmith:
31+
name: "agent-smith"
32+
disabled: false
33+
# in preview envs, we never want DaemonSets not to be scheduled (because they don't trigger scaleup)
34+
resources:
35+
cpu: 1m
36+
memory: 32Mi
37+
38+
server:
39+
replicas: 1
40+
makeNewUsersAdmin: true # for development
41+
theiaPluginsBucketName: gitpod-core-dev-plugins
42+
enableLocalApp: true
43+
enableOAuthServer: true
44+
blockNewUsers: true
45+
blockNewUsersPasslist:
46+
- "gitpod.io"
47+
48+
registryFacade:
49+
daemonSet: true
50+
# in preview envs, we never want DaemonSets not to be scheduled (because they don't trigger scaleup)
51+
resources:
52+
cpu: 1m
53+
memory: 32Mi
54+
55+
contentService:
56+
remoteStorage:
57+
blobQuota: 1073741824 # 1 GiB
58+
59+
workspace:
60+
# configure GCP registry
61+
pullSecret:
62+
secretName: gcp-sa-registry-auth
63+
affinity:
64+
default: "gitpod.io/workload_workspace"
65+
templates:
66+
default:
67+
spec:
68+
dnsConfig:
69+
nameservers:
70+
- 1.1.1.1
71+
- 8.8.8.8
72+
dnsPolicy: None # do NOT query against K8s DNS (https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/)
73+
env:
74+
- name: THEIA_PREVENT_METADATA_ACCESS
75+
value: true
76+
regular:
77+
spec:
78+
containers:
79+
- name: "workspace"
80+
env:
81+
- name: THEIA_RATELIMIT_LOG
82+
value: "50"
83+
- name: SUPERVISOR_DEBUG_ENABLE
84+
value: "true"
85+
prebuild:
86+
spec:
87+
containers:
88+
- name: workspace
89+
# Intended to reduce the density for prebuilds
90+
resources:
91+
limits:
92+
cpu: "5"
93+
memory: 12Gi
94+
requests:
95+
cpu: 1m
96+
ephemeral-storage: 5Gi
97+
memory: 4608Mi # = 2 * 2304Mi
98+
99+
# Allow per-branch ingress from another, in-cluster proxy
100+
proxy:
101+
replicas: 1
102+
ports:
103+
http:
104+
expose: true
105+
containerPort: 80
106+
nodePort: null
107+
https:
108+
expose: true
109+
containerPort: 443
110+
nodePort: null
111+
metrics:
112+
containerPort: 9145
113+
serviceSessionAffinity: "None"
114+
serviceExternalTrafficPolicy: null
115+
serviceType: "ClusterIP"
116+
deployIngressService: false
117+
loadBalancerIP: null
118+
119+
# Enable events trace
120+
wsManager:
121+
eventTraceLogLocation: "/tmp/evts.json"
122+
123+
imageBuilder:
124+
hostDindData: "/mnt/disks/ssd0/builder"
125+
# configure GCP registry
126+
registry:
127+
name: eu.gcr.io/gitpod-core-dev/registry
128+
secretName: gcp-sa-registry-auth
129+
path: gcp-sa-registry-auth
130+
registryCerts: []
131+
132+
wsDaemon:
133+
hostWorkspaceArea: /mnt/disks/ssd0/workspaces
134+
volumes:
135+
- name: gcloud-tmp
136+
hostPath:
137+
path: /mnt/disks/ssd0/sync-tmp
138+
type: DirectoryOrCreate
139+
volumeMounts:
140+
- mountPath: /mnt/sync-tmp
141+
name: gcloud-tmp
142+
userNamespaces:
143+
fsShift: fuse-overlayfs
144+
shiftfsModuleLoader:
145+
enabled: false
146+
seccompProfileInstaller:
147+
enabled: true
148+
# in preview envs, we never want DaemonSets not to be scheduled (because they don't trigger scaleup)
149+
resources:
150+
cpu: 1m
151+
memory: 32Mi
152+
153+
wsScheduler:
154+
scaler:
155+
enabled: true
156+
controller:
157+
kind: "constant"
158+
constant:
159+
setpoint: 1
160+
161+
# Enable ws-proxy in dev
162+
wsProxy:
163+
name: "ws-proxy"
164+
disabled: false
165+
replicas: 1
166+
wsManagerProxy:
167+
enabled: true
168+
ports:
169+
wsManagerProxy:
170+
expose: true
171+
containerPort: 8081
172+
173+
# configure GCP registry
174+
docker-registry:
175+
enabled: false
176+
177+
minio:
178+
accessKey: EXAMPLEvalue
179+
secretKey: Someone.Should/ReallyChangeThisKey!!
180+
serviceAccount:
181+
name: ws-daemon
182+
create: false
183+
# make sure the pod ends up where it's supposed to stay
184+
affinity:
185+
nodeAffinity:
186+
requiredDuringSchedulingIgnoredDuringExecution:
187+
nodeSelectorTerms:
188+
- matchExpressions:
189+
- key: gitpod.io/workload_workspace
190+
operator: In
191+
values:
192+
- "true"
193+
194+
mysql:
195+
primary:
196+
# make sure the pod ends up where it's supposed to stay
197+
affinity:
198+
nodeAffinity:
199+
requiredDuringSchedulingIgnoredDuringExecution:
200+
nodeSelectorTerms:
201+
- matchExpressions:
202+
- key: gitpod.io/workload_workspace
203+
operator: In
204+
values:
205+
- "true"
206+
207+
rabbitmq:
208+
# ensure shovels are configured on boot
209+
shovels:
210+
- name: messagebus-0
211+
srcUri: "amqp://$USERNAME:$PASSWORD@messagebus-0"
212+
auth:
213+
username: override-me
214+
password: override-me
215+
# make sure the pod ends up where it's supposed to stay
216+
affinity:
217+
nodeAffinity:
218+
requiredDuringSchedulingIgnoredDuringExecution:
219+
nodeSelectorTerms:
220+
- matchExpressions:
221+
- key: gitpod.io/workload_workspace
222+
operator: In
223+
values:
224+
- "true"
225+
226+
cert-manager:
227+
enabled: true

0 commit comments

Comments
 (0)