-
Notifications
You must be signed in to change notification settings - Fork 1.3k
[ws-proxy] prevent podIP being used with many workspaces #20826
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
/unhold |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR addresses the issue of preventing pod IP addresses from being used across many workspaces by adding IP-based indexing and validation into the WorkspaceInfo provider. Key changes include:
- Adding a new index function for IP addresses.
- Enhancing the WorkspaceInfo lookup logic with IP address conflict checks and warnings.
- Introducing a helper function (workspacesInfoByIPAddress) to retrieve workspaces by IP.
return nil | ||
} | ||
|
||
if len(wsInfos) == 1 && wsInfos[0].WorkspaceID != workspaceID { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[nitpick] Returning nil when a workspace ID conflict is detected may obscure the underlying issue; consider adding more explicit error handling or detailed documentation to clarify this behavior.
Copilot uses AI. Check for mistakes.
Co-authored-by: Copilot <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@iQQBot just one blocking question Re: logging workspaceID
Description
[ws-proxy] prevent podIP being used with many workspaces
Related Issue(s)
Fixes CLC-1368
How to test
Documentation
Preview status
Gitpod was successfully deployed to your preview environment.
Build Options
Build
Run the build with werft instead of GHA
Run Leeway with
--dont-test
Publish
Installer
Add desired feature flags to the end of the line above, space separated
Preview Environment / Integration Tests
If enabled this will build
install/preview
If enabled this will create the environment on GCE infra
Saves cost. Untick this only if you're really sure you need a non-preemtible machine.
Valid options are
all
,workspace
,webapp
,ide
,jetbrains
,vscode
,ssh
. If enabled,with-preview
andwith-large-vm
will be enabled./hold