CTM-397: Replace GKE/Helm Galaxy path with GCE VM-based deployment - #4904

Open

LizBaldo wants to merge 55 commits into

CTM-397-deploy-galaxy-on-GCE

Commits on Jul 30, 2026

Replace GKE/Helm Galaxy path with GCE VM-based deployment

Liz Baldo
authored and
Liz Baldo
committed
fae3363
fix format

Liz Baldo
authored and
Liz Baldo
committed
6dbafe6
Grant pet SA GCP Batch IAM roles at Galaxy VM creation time

authored and
Liz Baldo
committed
27d5780
add SA permissions and fix unit tests

Liz Baldo
authored and
Liz Baldo
committed
d5d0097
fix the last two unit tests

Liz Baldo
authored and
Liz Baldo
committed
9a69ccc
handle Batch SA creation and fix restore Galaxy

Liz Baldo
authored and
Liz Baldo
committed
049f466
fix compiler issues

Liz Baldo
authored and
Liz Baldo
committed
606e510
Fix Leo proxy for Galaxy VM: use HTTP on port 80 via VM internal IP

Liz Baldo
authored and
Liz Baldo
committed
339ca5d
Fix Galaxy VM readiness check: use direct HTTP to VM internal IP

Liz Baldo
authored and
Liz Baldo
committed
cb11878
Fix Galaxy VM proxy: use external IP instead of internal IP

Liz Baldo
authored and
Liz Baldo
committed
ce1b4e1
Fix Galaxy VM bootstrap: use galaxy-k8s-boot image

Liz Baldo
authored and
Liz Baldo
committed
6fc11f3
increase boot disk size to Galaxy VM disk image reqs

Liz Baldo
authored and
Liz Baldo
committed
6149be9
mark cluster as deleted and wait for iam to propagate

Liz Baldo
authored and
Liz Baldo
committed
30169a2
fix Gb to Gib conversion

Liz Baldo
authored and
Liz Baldo
committed
2a992dd
strip leo proxy prefix

Liz Baldo
authored and
Liz Baldo
committed
3298f65
pass the galaxy_url_prefix

Liz Baldo
authored and
Liz Baldo
committed
f5d6f65
use new proxy path env variable

Liz Baldo
authored and
Liz Baldo
committed
09b21d0
Address review findings: galaxy_user email, Source leak, anvil branch, gcpBatchSaProject parsing

authored and
Liz Baldo
committed
5e088d0
Switch Galaxy bootstrap from cloud-init user-data to GCE startup-script

authored and
Liz Baldo
committed
4aae1c1
Fix ansible inventory group name: [vm] -> [vms] to match hosts: vms in playbook.yml

authored and
Liz Baldo
committed
0dd49b4
Revert sourceImage to v2026-02-25: v2026-06-10 has Helm incompatibility with anvil playbook (helm list --all)

authored and
Liz Baldo
committed
cc14cc3
Fix Galaxy blank page: set galaxy_url_prefix and improve Running health check

authored and
Liz Baldo
committed
455bbc0
Fix YAML syntax in galaxy_prefix.yml: use single quotes so backslash is literal

authored and
Liz Baldo
committed
ad5e132
Fix galaxy_url_prefix Helm key: add missing .galaxy. nesting

authored and
Liz Baldo
committed
9bec16b
Fix Galaxy blank page: strip Authorization header and improve readiness probe

authored and
Liz Baldo
committed
b43c0ce
Fix Galaxy VM restore: save lastUsedBy on keep-disk delete and accept AppRestore.Other for Galaxy

authored and
Liz Baldo
committed
2a97bf9
format fix

Liz Baldo
authored and
Liz Baldo
committed
74d2402
Fix test: Galaxy VM create sets lastUsedBy, appRestore is now AppRestore.Other not None

authored and
Liz Baldo
committed
2b66294
Update Galaxy VM source image to v2026-06-30

authored and
Liz Baldo
committed
a187627
fix(access-controller): give each Galaxy VM app its own Leo cluster record

authored and
Liz Baldo
committed
88c8a3a
fix(access-controller): allow multiple Galaxy VM cluster records per project

authored and
Liz Baldo
committed
0a0c2fe
style(access-controller): apply scalafmt formatting

authored and
Liz Baldo
committed
6793c51
test(access-controller): remove unique-constraint test for Galaxy VM cluster support

authored and
Liz Baldo
committed
ed0aef1

Commits on Jul 31, 2026

feat(access-controller): pass Terra workspace context to Galaxy VM ansible playbook

authored and
Liz Baldo
committed
1965048
fix(access-controller): inject X-Forwarded-Proto: https for Galaxy VM proxy hops

authored and
Liz Baldo
committed
df8ea17

Commits on Aug 3, 2026

fix(access-controller): enable ingress-nginx use-forwarded-headers for Galaxy VM

authored and
Liz Baldo
committed
4de192f
fix(access-controller): rewrite http Location headers to https for Galaxy VM responses

authored and
Liz Baldo
committed
5ec07be
fix(access-controller): pass GCP project ID to Galaxy VM ansible for Batch jobs

authored and
Liz Baldo
committed
042aca3
fix(access-controller): forward workspace name to Galaxy VM for Terra file source label

authored and
Liz Baldo
committed
c8aaee9
fix(access-controller): wire ORCH_URL env var to galaxyVm.orchUrl config

authored and
Liz Baldo
committed
a847547

Commits on Aug 4, 2026

fix(access-controller): allow Galaxy app recreate when prior disk has no restore info

authored and
Liz Baldo
committed
399a43c
fix(access-controller): pass correct Terra billing namespace and GCP project to Galaxy VM

authored and
Liz Baldo
committed
b509b6d

Commits on Aug 5, 2026

fix(access-controller): pass galaxy_infrastructure_url so Galaxy generates https:// links

authored and
Liz Baldo
committed
c4c4c68
fix(access-controller): accept Origin header as Referer fallback for viz plugin requests

authored and
Liz Baldo
committed
4270d17
fix(access-controller): pass VPC network/subnet to Galaxy ansible for GCP Batch

authored and
Liz Baldo
committed
b242aac
fix(access-controller): add userinfo scopes to Galaxy GCE VM service account

authored and
Liz Baldo
committed
ec1ed64
fix(access-controller): pass GCP Batch boot image as VM metadata to ansible

authored and
Liz Baldo
committed
3acc4d4
fix(access-controller): scalafmt

authored and
Liz Baldo
committed
0aa3dea
revert(access-controller): remove gcp-batch-boot-image metadata

authored and
Liz Baldo
committed
661b35a
fix(access-controller): quote terra_workspace/namespace as JSON extra-vars

authored and
Liz Baldo
committed
4706f10

Commits on Aug 6, 2026

fix(access-controller): allow same-origin requests with no Referer or Origin

authored and
Liz Baldo
committed
334d3b0
feat(access-controller): enable Private Google Access on Leo-created subnets; warn on pre-created subnets

authored and
Liz Baldo
committed
dd7c1a2
Revert "feat(access-controller): enable Private Google Access on Leo-created subnets; warn on pre-created subnets"

Liz Baldo
authored and
Liz Baldo
committed
0b55121

Commits on Aug 7, 2026

fix(access-controller): add roles/batch.agentReporter to galaxy-batch-runner SA

authored and
Liz Baldo
committed
7c584b9
fix(access-controller): add roles/logging.logWriter to galaxy-batch-runner SA

authored and
Liz Baldo
committed
634a28a