mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-04-20 15:35:55 -04:00
Take location from state file for az jump host (#422)
* Also fix readme badges
This commit is contained in:
parent
88408a661b
commit
525e976d2d
2
.github/docs/development.md
vendored
2
.github/docs/development.md
vendored
@ -56,7 +56,7 @@ You can do this by utilizing our terraform setup.
|
||||
Instructions on how to set it up can be found in it's [README](/terraform/libvirt/README.md).
|
||||
|
||||
# Verification
|
||||
In order to verify your cluster we describe a [verification workflow](https://docs.edgeless.systems/constellation/workflows/verify) in our official docs.
|
||||
In order to verify your cluster we describe a [verification workflow](https://docs.edgeless.systems/constellation/workflows/verify-cluster) in our official docs.
|
||||
Apart from that you can also reproduce some of the measurements described in the [docs](https://docs.edgeless.systems/constellation/architecture/attestation#runtime-measurements) locally.
|
||||
To do so you have to create a cluster locally as described in the [previous section](/.github/docs/development.md#locally).
|
||||
However, you don't have to go through the full manual, you can stop after running `terraform apply`.
|
||||
|
@ -4,8 +4,7 @@
|
||||
|
||||
<p>
|
||||
<a href="https://github.com/edgelesssys/constellation/blob/main/LICENSE"><img src="https://img.shields.io/github/license/edgelesssys/constellation" alt="Constellation License"></a>
|
||||
<a href="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-azure.yml/badge.svg?branch=main"><img src="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-azure.yml/badge.svg?branch=main" alt="E2E Test Azure"></a>
|
||||
<a href="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-gcp.yml/badge.svg?branch=main"><img src="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-gcp.yml/badge.svg?branch=main" alt="E2E Test GCP"></a>
|
||||
<a href="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-daily.yml/badge.svg"><img src="https://github.com/edgelesssys/constellation/actions/workflows/e2e-test-daily.yml/badge.svg" alt="E2E Tests"></a>
|
||||
<a href="https://goreportcard.com/report/github.com/edgelesssys/constellation"><img src="https://goreportcard.com/badge/github.com/edgelesssys/constellation" alt="Go Report"></a>
|
||||
<a href="https://discord.gg/rH8QTH56JN"><img src="https://img.shields.io/discord/823900998606651454?color=7389D8&label=discord&logo=discord&logoColor=ffffff" alt="Discord"></a>
|
||||
<a href="https://twitter.com/EdgelessSystems"><img src="https://img.shields.io/twitter/follow/EdgelessSystems?label=Follow" alt="Twitter"></a>
|
||||
|
@ -124,6 +124,7 @@ See the [Identify unhealthy clusters](#identify-unhealthy-clusters) description
|
||||
Note that the recovery command needs to connect to the recovering nodes.
|
||||
Nodes only have private IP addresses in the VPC of the cluster, hence, the command needs to be issued from within the VPC network of the cluster.
|
||||
The easiest approach is to set up a jump host connected to the VPC network and perform the recovery from there.
|
||||
For Azure you can find a script that does this for you in the repo at `/hack/azure-jump-host/jump-host-create`.
|
||||
|
||||
Given these prerequisites a node can be recovered like this:
|
||||
|
||||
|
@ -5,6 +5,7 @@ set -o pipefail
|
||||
SCRIPTDIR="$( dirname -- $(realpath "${BASH_SOURCE}"); )";
|
||||
RG=$(jq -r .azureresourcegroup constellation-state.json)
|
||||
SUBNET=$(jq -r .azuresubnet constellation-state.json)
|
||||
LOCATION=$(jq -r .azurelocation constellation-state.json)
|
||||
VNET=${SUBNET%"/subnets/nodeNetwork"}
|
||||
PUBKEY=$(cat ~/.ssh/id_rsa.pub)
|
||||
DEPLOYMENT_NAME=jump-host
|
||||
@ -18,7 +19,8 @@ az deployment group create \
|
||||
--parameters "@${SCRIPTDIR}/parameters.json" \
|
||||
--parameters "{ \"virtualNetworkId\": { \"value\": \"${VNET}\" } }" \
|
||||
--parameters "{ \"subnetRef\": { \"value\": \"${SUBNET}\" } }" \
|
||||
--parameters "{ \"adminPublicKey\": { \"value\": \"${PUBKEY}\" } }"
|
||||
--parameters "{ \"adminPublicKey\": { \"value\": \"${PUBKEY}\" } }" \
|
||||
--parameters "{ \"location\": { \"value\": \"${LOCATION}\" } }"
|
||||
az deployment group wait --created --name "${DEPLOYMENT_NAME}" --resource-group "${RG}"
|
||||
PUBIP=$(az vm list-ip-addresses --resource-group "${RG}" --name "${VM_NAME}" --query "[].virtualMachine.network.publicIpAddresses[0].ipAddress" --output tsv)
|
||||
echo "Jump host created. Cleanup by deleteing the resource group."
|
||||
|
@ -3,10 +3,10 @@
|
||||
"contentVersion": "1.0.0.0",
|
||||
"parameters": {
|
||||
"location": {
|
||||
"value": "westus"
|
||||
"value": null
|
||||
},
|
||||
"networkInterfaceName": {
|
||||
"value": "jump-host814"
|
||||
"value": "jump-host"
|
||||
},
|
||||
"networkSecurityGroupName": {
|
||||
"value": "jump-host-nsg"
|
||||
|
Loading…
x
Reference in New Issue
Block a user