Epic: Migrate to Installer

[geropl]

Summary

WebApp is the last team that relies on the helm chart for deployments, we should get rid of it.

General approach

Go through components one by one and decide for each config to either:

• work with a default
• find a way to place variance in the installer

Tasks

• [x] Setup a diff tool between chart and installer to identify config diff https://github.com/gitpod-io/ops/pull/1558
  • [x] open-vsx
    • https://github.com/gitpod-io/gitpod/pull/9215
  • [x] server
    • [x] #9227
    • [x] #9297
    • [x] #9305
    • [x] remove logLevel from config, and take it from LOG_LEVEL env var
    • [x] make defaultBaseImageRegistryWhitelist configurable (or is this an imageBuilder concern?)
    • [x] make definitelyGpDisabled configurable
    • [x] make disableDynamicAuthProviderLogin configurable
    • [x] make enableLocalApp configurable
    • [x] runDbDeleter: = !dbSync.enabled
    • [x] builtinAuthProvidersConfigured: https://github.com/gitpod-io/gitpod/pull/9612
    • [x] payment
    • [x] ~add chargebee config to outer wrapper chart (cmp. old chart)~ already done by terraform
    • [x] add option to specify a secret to config.experimental.server.chargebeeConfig, and configure server to find it
    • [x] set server.config.EnablePayment when that secret is configured
    • [x] analytics: configure GITPOD_ANALYTICS_WRITER and GITPOD_ANALYTICS_SEGMENT_KEY
    • [x] license secret: set GITPOD_LICENSE_TYPE in wrapper chart as expected
    • [x] mount github-app-cert (just like payment-endpoint)
    • [x] blockedRepositories
    • [x] workspaceGarbageCollection: defaults to true
  • [x] ws-manager-bridge
    • [x] ~add option skipSelf and use it here~ done based on "installation method"
    • [x] add option experimental.webapp.wsManagerBridge.skipSelf (default: false, set to true for SaaS)
  • [x] proxy
    • [x] proxy-ingress svc (wrapper chart)
    • [x] static IP
    • [x] serviceAnnotations (proxy, openVsxProxy & ideProxy)
  • [x] db-sync (wrapper chart)
  • [x] db
    • [x] disableMigration (default: false): disable jobs dbinit-session and migrations & db-init configMap
    • [x] validate gcloud-sql-token shape
  • [x] messagebus (well-tested in preview envs)
    • [x] validate config shape (incl. user/password)
  • [x] payment-endpoint (wrapper chart)
  • [x] setup wrapper-chart:
    • [x] https://github.com/gitpod-io/ops/pull/1977
    • [x] auth-providers
  • [x] cross-cutting:
    • [x] installationShortname: https://github.com/gitpod-io/gitpod/pull/9218
    • After meeting with self-hosted team:
    • [x] Move PodConfig section under a new Common field, to make it clearer that these values are cross-cutting and applicable to all teams.
    • [x] Rename Affinity method in common package to NodeAffinity (https://github.com/gitpod-io/gitpod/pull/9400)
    • [x] Make replicas default to 1 and use the configuration method in common everywhere.
    • [x] Configure tracing sampling parameters
• [x] rollout to staging
• [x] rollout to devstaging: remove the special bash post-processing here from preview envs https://github.com/gitpod-io/gitpod/issues/9855
• [x] rollout to prod
• [x] cleanup
  • [x] #9487
  • [x] Remove the dev/installer-diff program (only needed for figuring out the diff of the installer vs helm chart).
• [x] aftermath
  • [x] ~find a way to configure repositoryPasslist~ not required, deprecated anyway

Collaboration

For collaboration and questions on the remaining tasks: Notion sync doc.

Context

Historically we all deployed with the helm chart but decided to go with the installer instead.

Value

The value lies in alignment and getting rid of technical debt.

Acceptance Criteria

We can deploy using the installer in all deployment modes, and delete to helm chart.

Measurement

Does not apply

Growth Area

No response

Persona(s)

No response

Hypothesis

No response

In scope

No response

Out of scope

No response

Complexities

No response

Press release

No response

[geropl]

Finally closing this after all boxes are ticked. :checkered_flag: