diff --git a/.github/actions/e2e_verify/action.yml b/.github/actions/e2e_verify/action.yml index c52d02f43..f330751f5 100644 --- a/.github/actions/e2e_verify/action.yml +++ b/.github/actions/e2e_verify/action.yml @@ -66,12 +66,16 @@ runs: forwarderPID=$! sleep 5 - if [[ ${{ inputs.attestationVariant }} == "azure-sev-snp" ]] || [[ ${{ inputs.attestationVariant }} == "aws-sev-snp" ]]; then - echo "Extracting TCB versions for API update" - constellation verify --cluster-id "${clusterID}" --node-endpoint localhost:9090 -o json > "snp-report-${node}.json" - else - constellation verify --cluster-id "${clusterID}" --node-endpoint localhost:9090 - fi + case "${{ inputs.attestationVariant }}" + in + "azure-sev-snp"|"aws-sev-snp"|"gcp-sev-snp") + echo "Extracting TCB versions for API update" + constellation verify --cluster-id "${clusterID}" --node-endpoint localhost:9090 -o json > "snp-report-${node}.json" + ;; + *) + constellation verify --cluster-id "${clusterID}" --node-endpoint localhost:9090 + ;; + esac kill $forwarderPID done @@ -90,11 +94,6 @@ runs: COSIGN_PASSWORD: ${{ inputs.cosignPassword }} COSIGN_PRIVATE_KEY: ${{ inputs.cosignPrivateKey }} run: | - if [[ ${{ inputs.attestationVariant }} == "aws-sev-snp" ]] && constellation version | grep -q "v2.13."; then - echo "Skipping TCB upload for AWS on CLI v2.13" - exit 0 - fi - reports=(snp-report-*.json) if [ -z ${#reports[@]} ]; then exit 1 diff --git a/.github/workflows/e2e-test-daily.yml b/.github/workflows/e2e-test-daily.yml index 7618c8e73..0a80821ee 100644 --- a/.github/workflows/e2e-test-daily.yml +++ b/.github/workflows/e2e-test-daily.yml @@ -46,10 +46,15 @@ jobs: max-parallel: 5 matrix: kubernetesVersion: ["1.28"] # should be default - # TODO(msanft): Enable GCP SEV-SNP once stable GCP SEV-SNP images exist. - attestationVariant: ["gcp-sev-es", "azure-sev-snp", "azure-tdx", "aws-sev-snp"] + attestationVariant: ["gcp-sev-es", "gcp-sev-snp", "azure-sev-snp", "azure-tdx", "aws-sev-snp"] refStream: ["ref/main/stream/debug/?", "ref/release/stream/stable/?"] test: ["sonobuoy quick"] + exclude: + # TODO(v2.18 msanft): Remove exclude rule for GCP SEV-SNP stable once images exist. + - kubernetesVersion: "1.28" + attestationVariant: "gcp-sev-snp" + refStream: "ref/release/stream/stable/?" + test: "sonobuoy quick" runs-on: ubuntu-22.04 permissions: id-token: write @@ -129,7 +134,7 @@ jobs: GH_TOKEN: ${{ github.token }} uses: ./.github/actions/update_tfstate with: - name: terraform-state-${{ steps.e2e_test.outputs.namePrefix }} + name: terraform-state-${{ steps.e2e_test.outputs.namePrefix }} runID: ${{ github.run_id }} encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}