feat: enable IPv6 support for IPv6-only Kubernetes environments by olexii4 · Pull Request #1442 · eclipse-che/che-dashboard

olexii4 · 2026-01-15T15:42:32Z

What does this PR do?

This PR adds IPv6 support in Eclipse Che Dashboard to enable operation in IPv6-only network environments. As Kubernetes platforms (particularly OpenShift Container Platform 4.20) migrate to IPv6, the dashboard must handle IPv6 addresses correctly in URLs, API calls, and server bindings.

The implementation involved minimal, focused changes to URL validation patterns and server configuration, enabling full IPv6 support while maintaining complete backward compatibility with IPv4-only and dual-stack environments.

Background

The Eclipse Che Dashboard previously failed to operate in IPv6-only environments due to:

Server Binding Limitation: Backend server bound only to 0.0.0.0 (IPv4-only)
URL Validation Issues: Regular expressions rejected IPv6 bracket notation (e.g., http://[::1]:8080)
Git Repository Access: Factory flows could not handle IPv6 git server URLs
Container Registry Configuration: Users could not configure IPv6 container registries

Impact

Critical: Dashboard completely non-functional in IPv6-only Kubernetes clusters
Blocking: OpenShift Container Platform 4.20 migration to IPv6
User Experience: Inability to create workspaces from IPv6-hosted git repositories

IPv6 Bracket Notation

IPv6 addresses in URLs require square brackets to distinguish the address from port numbers:

✅ Correct: http://[2001:db8::1]:8080/repo.git
❌ Incorrect: http://2001:db8::1:8080/repo.git (ambiguous - is 8080 part of address or port?)

Screenshot/screencast of this PR

What issues does this PR fix or reference?

fixes eclipse-che/che#23674

Is it tested? How?

Tested manually on an IPv6-only OpenShift cluster (OCP 4.20.x) using the deployment + validation scripts in the testing repository:

https://github.com/olexii4/deploy-che-ipv6-chectl.git

How to reproduce the test:

Provision an IPv6-only OpenShift cluster (e.g. via OpenShift CI cluster-bot).

Predownload required images to local cache (this step can be done before cluster access):

./scripts/mirror-images-to-registry.sh \
  --mode full \
  --prefetch-only \
  --cache-dir ~/.cache/che-ipv6-mirror

Mirror cached images to the cluster's local registry:

./scripts/mirror-images-to-registry.sh \
  --kubeconfig <cluster-bot-kubeconfig> \
  --mode full \
  --cache-dir ~/.cache/che-ipv6-mirror \
  --dashboard pr-1442

Deploy Eclipse Che manually from OLM bundles:

./scripts/deploy-che-manual-from-bundles.sh \
  --kubeconfig <cluster-bot-kubeconfig>

Deploy IPv6 test infrastructure (in-cluster git/devfile servers) and verify the services respond over IPv6:

./scripts/test-ipv6-validation.sh \
  --kubeconfig <cluster-bot-kubeconfig> \
  --repo-url git@github.com:che-samples/web-nodejs-sample.git \
  --devfile-url https://registry.devfile.io/devfiles/nodejs-angular/2.2.1

Open the printed factory URLs in the Che dashboard (via HTTP proxy from kubeconfig) and confirm:
- IPv6 bracket-notation URLs are accepted by the UI validation
- Workspace creation succeeds when using the in-cluster IPv6 git/devfile URLs

Notes:

On IPv6-only clusters, image mirroring is required. The mirror script applies ImageTagMirrorSet/ImageDigestMirrorSet (+ ICSP for compatibility).
The deployment script automatically creates required resources: webhook TLS certificates, leader election RBAC, and DevWorkspace CRDs.
The mirroring workflow is documented in scripts/mirror-images-to-registry.md.
Each skopeo copy is guarded by a per-image timeout (SKOPEO_TIMEOUT_SECONDS, default 900s) to avoid hangs.
The cluster is accessible only via HTTP proxy (provided in kubeconfig's proxy-url field).

All required commands and expected outputs are documented in the repository README.md.

Release Notes

Docs PR

che-bot · 2026-01-15T15:42:41Z

Click here to review and test in web IDE:

github-actions · 2026-01-15T15:53:59Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

codecov · 2026-01-15T17:05:00Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.77%. Comparing base (c869541) to head (5c86eb8).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1442      +/-   ##
==========================================
- Coverage   92.77%   92.77%   -0.01%     
==========================================
  Files         521      521              
  Lines       49338    49351      +13     
  Branches     3703     3699       -4     
==========================================
+ Hits        45775    45786      +11     
- Misses       3524     3526       +2     
  Partials       39       39

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

github-actions · 2026-01-18T19:55:40Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

svor · 2026-01-19T08:38:01Z

/retest

github-actions · 2026-01-29T15:13:52Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

svor

I was able to deploy che on IPv6 cluster and open dashboard

But it is not possible to start a workspace. Looks like the problem is in che-server.

openshift-ci · 2026-02-02T14:30:26Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: olexii4, svor, tolusha

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Enable dashboard to work in IPv6-only environments by updating server bindings and URL validation patterns to support IPv6 bracket notation (e.g., http://[::1]:8080). - Backend server binds to '::' for dual-stack support - Factory and git URL regex support IPv6 literal addresses - Container registry validation supports IPv6 - Added IPv6 test coverage Fixes eclipse-che/che#23674 Assisted-by: Claude Sonnet 4.5 Signed-off-by: Oleksii Orel <oorel@redhat.com>

openshift-ci · 2026-02-18T17:31:20Z

New changes are detected. LGTM label has been removed.

github-actions · 2026-02-18T17:42:19Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

Updated HTTP URL regex to include dots in IPv6 character class to support IPv4-mapped IPv6 addresses (e.g., ::ffff:192.168.1.1). The previous regex rejected URLs like http://[::ffff:10.217.0.98]:8080/repo.git because it didn't recognize dots within IPv6 brackets. This caused the URL to be incorrectly identified as an SSH location, triggering SSH key validation errors for HTTP URLs. Changes: - Updated isHttpLocation regex: [0-9a-fA-F:] → [0-9a-fA-F:.] - Added test cases for IPv4-mapped IPv6 addresses Assisted-by: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Oleksii Orel <oorel@redhat.com>

Added documentation for HOST_USERS environment variable functionality to ensure it remains available for controlling host user capabilities in DevWorkspace containers. The HOST_USERS env var is used to configure whether containers run with host user capabilities, which is essential for certain SCC configurations: - Set to 'false' for container-run SCC (rootless containers) - Set to 'true' for container-build SCC (requires host user access) This functionality is maintained despite PR #1436 proposing its removal, as it remains necessary for proper SCC attribute management. Changes: - Added inline documentation for hostUsersEnvName field - Added JSDoc comments for setHostUsersEnvVar() method - Added JSDoc comments for removeHostUsersEnvVar() method Signed-off-by: Oleksii Orel <oorel@redhat.com>

github-actions · 2026-02-19T15:01:05Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

github-actions · 2026-02-19T15:02:36Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

github-actions · 2026-02-19T15:21:34Z

Docker image build succeeded: quay.io/eclipse/che-dashboard:pr-1442

kubectl patch command

kubectl patch -n eclipse-che "checluster/eclipse-che" --type=json -p="[{"op": "replace", "path": "/spec/components/dashboard/deployment", "value": {containers: [{image: "quay.io/eclipse/che-dashboard:pr-1442", name: che-dashboard}]}}]"

olexii4 requested review from akurinnoy and ibuziuk as code owners January 15, 2026 15:42

olexii4 requested a review from svor January 15, 2026 15:42

olexii4 requested a review from tolusha January 20, 2026 14:34

tolusha approved these changes Jan 26, 2026

View reviewed changes

openshift-ci bot assigned tolusha Jan 26, 2026

openshift-ci bot added the lgtm label Jan 26, 2026

olexii4 force-pushed the CHE-23674 branch from 546b326 to acce80d Compare January 29, 2026 15:02

openshift-ci bot removed the lgtm label Jan 29, 2026

svor approved these changes Feb 2, 2026

View reviewed changes

openshift-ci bot assigned svor Feb 2, 2026

openshift-ci bot added the lgtm label Feb 2, 2026

olexii4 force-pushed the CHE-23674 branch from acce80d to 01526b2 Compare February 18, 2026 17:31

openshift-ci bot removed the lgtm label Feb 18, 2026

olexii4 added 2 commits February 19, 2026 16:49

olexii4 force-pushed the CHE-23674 branch 2 times, most recently from 13429ed to d71c288 Compare February 19, 2026 14:51

Conversation

olexii4 commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What does this PR do?

Background

Impact

IPv6 Bracket Notation

Screenshot/screencast of this PR

What issues does this PR fix or reference?

Is it tested? How?

Release Notes

Docs PR

Uh oh!

che-bot commented Jan 15, 2026

Uh oh!

github-actions bot commented Jan 15, 2026

Uh oh!

codecov bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Jan 18, 2026

Uh oh!

svor commented Jan 19, 2026

Uh oh!

github-actions bot commented Jan 29, 2026

Uh oh!

svor left a comment

Choose a reason for hiding this comment

Uh oh!

openshift-ci bot commented Feb 2, 2026

Uh oh!

openshift-ci bot commented Feb 18, 2026

Uh oh!

github-actions bot commented Feb 18, 2026

Uh oh!

github-actions bot commented Feb 19, 2026

Uh oh!

github-actions bot commented Feb 19, 2026

Uh oh!

github-actions bot commented Feb 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Comments

olexii4 commented Jan 15, 2026 •

edited

Loading

codecov bot commented Jan 15, 2026 •

edited

Loading