Merge branch 'main' into server_vscode_oauth2

.github/CODEOWNERS

@@ -0,0 +1,93 @@
+#
+# For the CODEONWERS file we don't want to have a specific CODEOWNER.
+# A single review from anyone who is allowed to review PRs is sufficent.
+#
+/.github/CODEOWNERS
+
+/components/blobserve @gitpod-io/engineering-workspace
+/components/common-go @gitpod-io/engineering-workspace
+/components/content-service-api @csweichel @geropl
+/components/content-service @gitpod-io/engineering-workspace
+/components/dashboard @gitpod-io/engineering-webapp
+/components/docker-up @gitpod-io/engineering-workspace
+/components/ee/agent-smith @gitpod-io/engineering-workspace
+/components/ee/db-sync @gitpod-io/engineering-webapp
+/components/ee/kedge @gitpod-io/engineering-webapp
+/components/ee/payment-endpoint @gitpod-io/engineering-webapp
+/components/gitpod-cli @gitpod-io/engineering-ide
+/components/gitpod-db @gitpod-io/engineering-webapp
+/components/gitpod-messagebus @gitpod-io/engineering-webapp
+/components/gitpod-protocol @gitpod-io/engineering-webapp
+/components/gitpod-protocol/java @gitpod-io/engineering-ide
+/components/ide @gitpod-io/engineering-ide
+/components/ide-proxy @gitpod-io/engineering-ide
+/components/image-builder-api @csweichel @geropl
+/components/image-builder-bob @gitpod-io/engineering-workspace
+/components/image-builder-mk3 @gitpod-io/engineering-workspace
+/components/installation-telemetry @gitpod-io/engineering-self-hosted
+/install @gitpod-io/engineering-self-hosted
+/install/installer @gitpod-io/engineering-self-hosted
+/install/installer/pkg/components/agent-smith @gitpod-io/engineering-workspace
+/install/installer/pkg/components/blobserve @gitpod-io/engineering-workspace
+/install/installer/pkg/components/components-webapp @gitpod-io/engineering-webapp
+/install/installer/pkg/components/components-workspace @gitpod-io/engineering-workspace
+/install/installer/pkg/components/content-service @gitpod-io/engineering-workspace
+/install/installer/pkg/components/dashboard @gitpod-io/engineering-webapp
+/install/installer/pkg/components/ide-proxy @gitpod-io/engineering-ide
+/install/installer/pkg/components/image-builder-mk3 @gitpod-io/engineering-workspace
+/install/installer/pkg/components/openvsx-proxy @gitpod-io/engineering-ide
+/install/installer/pkg/components/proxy @gitpod-io/engineering-webapp
+/install/installer/pkg/components/registry-facade @gitpod-io/engineering-workspace
+/install/installer/pkg/components/server @gitpod-io/engineering-webapp
+/install/installer/pkg/components/server/ide @gitpod-io/engineering-ide
+/install/installer/pkg/components/workspace @gitpod-io/engineering-workspace
+/install/installer/pkg/components/workspace/ide @gitpod-io/engineering-ide
+/install/installer/pkg/components/ws-daemon @gitpod-io/engineering-workspace
+/install/installer/pkg/components/ws-manager @gitpod-io/engineering-workspace
+/install/installer/pkg/components/ws-manager-bridge @gitpod-io/engineering-webapp
+/install/installer/pkg/components/ws-proxy @gitpod-io/engineering-workspace
+/install/installer/pkg/config/versions @gitpod-io/engineering-ide
+/components/licensor @gitpod-io/engineering-webapp
+/components/local-app-api @csweichel @akosyakov
+/components/local-app @gitpod-io/engineering-ide
+/components/openvsx-proxy @gitpod-io/engineering-ide
+/components/proxy @gitpod-io/engineering-webapp
+/components/public-api @csweichel @akosyakov @geropl
+/components/registry-facade-api @csweichel @aledbf
+/components/registry-facade @gitpod-io/engineering-workspace
+/components/server @gitpod-io/engineering-webapp
+/components/service-waiter @gitpod-io/engineering-webapp
+/components/supervisor-api @csweichel @akosyakov
+/components/supervisor @gitpod-io/engineering-ide
+/components/workspacekit @gitpod-io/engineering-workspace
+/components/ws-daemon-api @aledbf @Furisto
+/components/ws-daemon @gitpod-io/engineering-workspace
+/components/ws-manager-api @aledbf @sagor999
+/components/ws-manager-bridge-api @csweichel @geropl
+/components/ws-manager-bridge @gitpod-io/engineering-webapp
+/components/ws-manager @gitpod-io/engineering-workspace
+/components/ws-proxy @gitpod-io/engineering-workspace
+/dev/gpctl @gitpod-io/engineering-workspace
+/dev/loadgen @gitpod-io/engineering-workspace
+/dev/preview @gitpod-io/platform
+/operations/observability/mixins @gitpod-io/platform
+/operations/observability/mixins/IDE @gitpod-io/engineering-ide
+/operations/observability/mixins/meta @gitpod-io/engineering-webapp
+/operations/observability/mixins/workspace @gitpod-io/engineering-workspace
+/operations/observability/mixins/cross-teams @gitpod-io/engineering-workspace @gitpod-io/engineering-webapp @gitpod-io/engineering-ide @gitpod-io/platform
+
+/.werft/observability @gitpod-io/platform
+
+/.werft/ide-* @gitpod-io/engineering-ide
+/.werft/platform-* @gitpod-io/platform
+/.werft/webapp-* @gitpod-io/engineering-webapp
+/.werft/workspace-* @gitpod-io/engineering-workspace
+/.werft/self-hosted-* @gitpod-io/engineering-self-hosted
+
+#
+# Automation
+# The following files are updated automatically so we don't want to have a specific code-owner
+# A single review is enough. Usually the review will be done by RoboQuat but we don't want to add
+# that user as an owner in case we need to manually approve changes
+#
+/CHANGELOG.md

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -4,7 +4,7 @@ labels: "bug"
 body:
 - type: markdown
   attributes:
-    value: Before raising an issue, please search for existing issues to avoid creating duplicates. For questions and support please use the [community forum](https://community.gitpod.io/).
+    value: Before raising an issue, please search for existing issues to avoid creating duplicates. For questions and support please use [Discord](https://www.gitpod.io/chat).
 - type: textarea
   id: bug-description
   attributes:

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,5 @@
 blank_issues_enabled: false
 contact_links:
   - name: Community
-    url: https://community.gitpod.io
+    url: https://www.gitpod.io/chat
     about: Please ask and answer usage questions here.

.github/ISSUE_TEMPLATE/epic.yml

@@ -0,0 +1,104 @@
+name: Epic
+description: Create an epic
+title: "Epic: "
+labels: ["type: epic"]
+body:
+- type: markdown
+  attributes:
+    value: Before raising an epic, please search for existing epics[[1](https://github.com/gitpod-io/gitpod/issues?q=is%3Aopen+is%3Aissue+label%3A%22type%3A+epic%22)][[2](https://github.com/gitpod-io/gitpod/issues?q=is%3Aopen+is%3Aissue+%22Epic%3A+%22)] to avoid creating duplicates. Read more about [Epics](https://www.notion.so/gitpod/Development-Process-2-0-6681854173ab4d2f92880f9f3d85cab5#321619f5a4bd4391be83c66feb2cdb49) (internal) in **Development Process**.
+- type: textarea
+  id: summary
+  attributes:
+    label: Summary
+    description: TLDR description of the epic. Give a succinct and plain overview of what the epic is about.
+    placeholder: Give a succinct and plain overview of what the epic is about.
+  validations:
+    required: true
+- type: textarea
+  id: context
+  attributes:
+    label: Context
+    description: What thinking led to this? Provide any necessary historical context required to understand this epic.
+    placeholder: Provide any necessary historical context required to understand this epic.
+  validations:
+    required: true
+- type: textarea
+  id: value
+  attributes:
+    label: Value
+    description: Why should we do it? How do we know this is a real problem and worth solving?
+    placeholder: Explicitly describe the value to Gitpod and/or our users. I.e. why answer should we undertake this epic?
+  validations:
+    required: true
+- type: textarea
+  id: acceptance-criteria
+  attributes:
+    label: Acceptance Criteria
+    description: What needs to be done before the work is considered complete? The checks which must be complete for this epic to be considered done.
+    placeholder: Defines clearly when the work is complete. Acts as a litmus test for "done" and avoids "done" being ambiguous. Useful for implicit assumptions, e.g. ensuring docs updates are not forgotten.
+  validations:
+    required: true
+- type: textarea
+  id: measurement
+  attributes:
+    label: Measurement
+    description: How will we know whether we've been successful / solved the problem? How will you measure the success of the epic? Ideally this metric is one of our key product metrics.
+    placeholder: Important as it's how we track the outcomes (not just output) of the work and prove a change was worth it. Or it should be removed or iterated.
+  validations:
+    required: true
+- type: textarea
+  id: growth-area
+  attributes:
+    label: Growth Area
+    description: Which aspect of Gitpod do we expect improvements in? Acquisition/Onboarding/Exploration/Expansion as defined in [Funnel Proposal](https://www.notion.so/gitpod/Funnel-Proposal-d7d0dba8aced4184b660092a74f8dd3a) (internal)
+    placeholder: Growth is key. This allows us to frame epics from a growth context. Which areas are we expecting this epic to help us with our growth initiatives?
+  validations:
+    required: false
+- type: textarea
+  id: personas
+  attributes:
+    label: Persona(s)
+    description: Who will be impacted by this change? Which of our personas will be impacted by this change?
+    placeholder: Why? To bring persona's into our work. Persona's can help us prioritise our markets. Currently, we are not focusing on the education/training persona currently. We should avoid epics which target this persona.
+  validations:
+    required: false
+- type: textarea
+  id: hypothesis
+  attributes:
+    label: Hypothesis
+    description: If we do X, we expect Y
+    placeholder: Can be useful if the work is explicitly experimental.
+  validations:
+    required: false
+- type: textarea
+  id: in-scope
+  attributes:
+    label: In scope
+    description: Explicitly define the items in scope.
+    placeholder: Optional, sometimes is useful for explicitness.
+  validations:
+    required: false
+- type: textarea
+  id: out-of-scope
+  attributes:
+    label: Out of scope
+    description: Explicitly define the items out of scope.
+    placeholder: Optional, sometimes is useful for explicitness.
+  validations:
+    required: false
+- type: textarea
+  id: complexities
+  attributes:
+    label: Complexities
+    description: Discuss any known complexities
+    placeholder: Optional, sometimes is useful for explicitness.
+  validations:
+    required: false
+- type: textarea
+  id: press-release
+  attributes:
+    label: Press release
+    description: Create excitement about the idea
+    placeholder: Useful if you want to spend the extra time to get stakeholders, the team, or customers excited.
+  validations:
+    required: false

.github/ISSUE_TEMPLATE/feature_request.md

@@ -1,7 +1,20 @@
 ---
 name: Feature request
 about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
 
 ---
 
+## Is your feature request related to a problem? Please describe
+<!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] -->
 
+## Describe the behaviour you'd like
+<!-- A clear and concise description of what you want to happen. -->
+
+## Describe alternatives you've considered
+<!-- A clear and concise description of any alternative solutions or features you've considered. -->
+
+## Additional context
+<!-- Add any other context or screenshots about the feature request here. -->

.github/workflows/changelog.yml

@@ -0,0 +1,34 @@
+name: Changelog
+
+on:
+  schedule:
+    - cron: "0 0 * * *"
+
+jobs:
+
+  build:
+
+    runs-on: ubuntu-latest
+
+    container: eu.gcr.io/gitpod-core-dev/dev/changelog:0.0.36
+
+    steps:
+      - uses: actions/checkout@v2
+      - run: |
+          export PR_BRANCH=$(date '+rq/changelog_%Y%m%d%H%M')
+          git checkout -b $PR_BRANCH
+          /app/changelog update -t $TOKEN -o gitpod-io -r gitpod -b $GITHUB_REF
+          if [[ $(git status --porcelain) ]]; then
+            git config --global user.name $GITHUB_USER
+            git config --global user.email $GITHUB_EMAIL
+            git add CHANGELOG.md
+            git commit -m "[changelog] updated changelog"
+            git push origin $PR_BRANCH
+            /app/changelog pr -t $TOKEN -a $APPROVAL_TOKEN -o gitpod-io -r gitpod -b $GITHUB_REF -H $PR_BRANCH
+          fi
+        env:
+          GITHUB_USER: roboquat
+          GITHUB_EMAIL: roboquat@gitpod.io
+          TOKEN: ${{ secrets.ROBOQUAT_AUTOMATIC_CHANGELOG }}
+          APPROVAL_TOKEN: ${{ secrets.GITOPS_BOT_PR_APPROVAL_TOKEN }}
+        shell: bash

.github/workflows/check-gitpodyaml.yml

@@ -1,9 +1,5 @@
 name: Check gitpod.yaml changes
 on:
-  push:
-    paths:
-      - ".gitpod.yml"
-      - ".github/workflows/check-gitpodyaml.yml"
   pull_request:
     paths:
       - ".gitpod.yml"
@@ -15,10 +11,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Notify
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: |
-          pull_number=$(jq --raw-output .pull_request.number "$GITHUB_EVENT_PATH")
-          curl -s -H "Authorization: token ${GITHUB_TOKEN}" \
-          -X POST -d '{"body": ":warning: Hey reviewer! BE CAREFUL :warning: \n Review the code before opening in your Gitpod. .gitpod.yaml was changed and it might be harmful."}' \
-          "https://api.github.com/repos/gitpod-io/gitpod/issues/${pull_number}/comments"
+        uses: KeisukeYamashita/create-comment@v1
+        with:
+          number: ${{ github.event.pull_request.number }}
+          comment: |
+            :warning: Hey reviewer! BE CAREFUL :warning:
+            Review the code before opening in your Gitpod. `.gitpod.yml` was changed and it might be harmful.

.github/workflows/code-nightly.yaml

@@ -0,0 +1,42 @@
+name: Code Nightly
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 0 * * *"
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-go@v2
+        with:
+          go-version: '1.17.3'
+      - name: Download leeway
+        run: cd /usr/bin && curl -fsSL https://github.com/gitpod-io/leeway/releases/download/v0.2.16/leeway_0.2.16_Linux_x86_64.tar.gz | sudo tar xz
+      - name: Download golangci-lint
+        run: cd /usr/local && curl -fsSL https://install.goreleaser.com/github.com/golangci/golangci-lint.sh | sh -s v1.42.0
+      - name: Download GoKart
+        run: cd /usr/local/bin && curl -L https://github.com/praetorian-inc/gokart/releases/download/v0.3.0/gokart_0.3.0_linux_x86_64.tar.gz | tar xzv gokart
+      - name: Auth Google Cloud SDK
+        uses: google-github-actions/auth@v0
+        with:
+          credentials_json: ${{ secrets.GCP_SA_KEY }}
+      - name: Set up Google Cloud SDK
+        uses: google-github-actions/setup-gcloud@v0
+        with:
+          project_id: ${{ secrets.GCP_PROJECT_ID }}
+      - run: |
+          gcloud auth configure-docker --quiet
+          export LEEWAY_WORKSPACE_ROOT=$(pwd)
+          headCommit=$(curl -H 'Accept: application/vnd.github.VERSION.sha' https://api.github.com/repos/gitpod-io/openvscode-server/commits/gp-code/release/1.66)
+          cd components/ide/code
+          leeway build -Dversion=nightly -DimageRepoBase=eu.gcr.io/gitpod-core-dev/build -DcodeCommit=$headCommit .:docker
+      - name: Slack Notification
+        if: always()
+        uses: rtCamp/action-slack-notify@v2
+        env:
+          SLACK_WEBHOOK: ${{ secrets.IDE_SLACK_WEBHOOK }}
+          SLACK_COLOR: ${{ job.status }}

.github/workflows/jetbrains-auto-update-template.yml

@@ -0,0 +1,56 @@
+on:
+  workflow_call:
+    inputs:
+      productId:
+        type: string
+        required: true
+      productCode:
+        type: string
+        required: true
+    secrets:
+      projectId:
+        required: true
+      serviceAccountKey:
+        required: true
+      slackWebhook:
+        required: true
+
+jobs:
+  update-jetbrains:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Download leeway
+        run: cd /usr/local/bin && curl -fsSL https://github.com/gitpod-io/leeway/releases/download/v0.2.16/leeway_0.2.16_Linux_x86_64.tar.gz | tar xz
+      - name: Download golangci-lint
+        run: cd /usr/local && curl -fsSL https://install.goreleaser.com/github.com/golangci/golangci-lint.sh | sh -s v1.42.0
+      - name: Download GoKart
+        run: cd /usr/local/bin && curl -L https://github.com/praetorian-inc/gokart/releases/download/v0.3.0/gokart_0.3.0_linux_x86_64.tar.gz | tar xzv gokart
+      - name: Auth Google Cloud SDK
+        uses: google-github-actions/auth@v0
+        with:
+          credentials_json: ${{ secrets.serviceAccountKey }}
+      - uses: actions/setup-java@v2
+        with:
+          distribution: zulu
+          java-version: "11"
+      - name: Leeway build
+        uses: google-github-actions/setup-gcloud@v0
+        with:
+          project_id: ${{ secrets.projectId }}
+        env:
+          LEEWAY_REMOTE_CACHE_BUCKET: gitpod-core-leeway-cache-branch
+      - run: |
+          gcloud auth configure-docker --quiet
+          export LEEWAY_WORKSPACE_ROOT=$(pwd)
+          data=$(curl -sSL "https://data.services.jetbrains.com/products?code=${{ inputs.productCode }}&fields=distributions%2Clink%2Cname%2Creleases&_=$(date +%s)000")
+          link=$(echo "$data" | jq -r '.[0].releases[0].downloads.linux.link')
+          cd components/ide/jetbrains/image
+          leeway build -Dversion=latest -DimageRepoBase=eu.gcr.io/gitpod-core-dev/build -D${{ inputs.productId }}DownloadUrl=$link .:${{ inputs.productId }}
+      - name: Slack Notification
+        if: always()
+        uses: rtCamp/action-slack-notify@v2
+        env:
+          SLACK_WEBHOOK: ${{ secrets.slackWebhook }}
+          SLACK_COLOR: ${{ job.status }}
+          SLACK_TITLE: ${{ inputs.productId }}