-
Notifications
You must be signed in to change notification settings - Fork 36
feat: allow custom session egress network policies #4097
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
You can access the deployment of this PR at https://ci-renku-4097.dev.renku.ch |
sgaist
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Beside the cleanup for the various image version and the suggestion from @leafty, the egress part LGTM.
8362a79 to
e407b86
Compare
leafty
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
The stuff we had hardcoded is not general enough to work on Openshift or in cases where the Renku deployment is not exposed to the internet.
e407b86 to
3308b5d
Compare
The changes have been addressed. It is holding up the mernging of the PR so I dismissed this.
|
Tearing down the temporary RenkuLab deployment for this PR. |
* chore: create release 2.5.0 * feat: upgrade amalthea to 0.20.0 (#4090) * feat: make swagger-ui image configurable (#4089) This allows to customize swagger in the same way as other components. Useful for example when deploying on OpenShift where the default image cannot run due to security constraints. * chore(deps): bump brace-expansion (#4048) Bumps the npm_and_yarn group with 1 update in the /cypress-tests directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Lorenzo Cavazzi <43481553+lorenzo-cavazzi@users.noreply.github.com> * chore: swap swagger services order to show data service first (#4093) * feat: update renku-ui to 4.4.0 (#4100) * chore: bump renku-ui to 4.4.0 * test: update group acceptance test * feat: update renku-gateway to 1.6.0 (#4094) The gateway can now run without GitLab when `enableV1Services` is set to `false`. The cypress acceptance tests are updated to support correctly running when `enableV1Services=false`. * chore(deps): bump brace-expansion (#4101) Bumps the npm_and_yarn group with 1 update in the /cypress-tests directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat: remove unused notebook service (#4095) * feat: allow custom session egress network policies (#4097) The policies we had hardcoded is not general enough to work on Openshift or in cases where the Renku deployment is not exposed to the internet. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Tasko Olevski <tasko.olevski@sdsc.ethz.ch> Co-authored-by: Samuel Gaist <samuel.gaist@idiap.ch> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Lorenzo Cavazzi <43481553+lorenzo-cavazzi@users.noreply.github.com> Co-authored-by: Flora Thiebaut <flora.thiebaut@sdsc.ethz.ch>
The stuff we had hardcoded is not general enough to work on Openshift or in cases where the Renku deployment is not exposed to the internet.
/deploy