mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-06-01 20:52:10 -04:00
terraform-provider: enable Azure TDX (#2854)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
This commit is contained in:
parent
d58d888f54
commit
78b9b0fc96
9 changed files with 180 additions and 13 deletions
|
@ -31,6 +31,7 @@ data "constellation_attestation" "test" {
|
|||
* `aws-sev-snp`
|
||||
* `aws-nitro-tpm`
|
||||
* `azure-sev-snp`
|
||||
* `azure-tdx`
|
||||
* `gcp-sev-es`
|
||||
- `csp` (String) CSP (Cloud Service Provider) to use. (e.g. `azure`)
|
||||
See the [full list of CSPs](https://docs.edgeless.systems/constellation/overview/clouds) that Constellation supports.
|
||||
|
@ -43,7 +44,7 @@ See the [full list of CSPs](https://docs.edgeless.systems/constellation/overview
|
|||
|
||||
### Read-Only
|
||||
|
||||
- `attestation` (Attributes) Attestation comprises the measurements and SEV-SNP specific parameters. (see [below for nested schema](#nestedatt--attestation))
|
||||
- `attestation` (Attributes) Attestation comprises the measurements and CVM specific parameters. (see [below for nested schema](#nestedatt--attestation))
|
||||
|
||||
<a id="nestedatt--image"></a>
|
||||
### Nested Schema for `image`
|
||||
|
@ -69,11 +70,13 @@ Read-Only:
|
|||
- `measurements` (Attributes Map) (see [below for nested schema](#nestedatt--attestation--measurements))
|
||||
- `microcode_version` (Number)
|
||||
- `snp_version` (Number)
|
||||
- `tdx` (Attributes) (see [below for nested schema](#nestedatt--attestation--tdx))
|
||||
- `tee_version` (Number)
|
||||
- `variant` (String) Attestation variant the image should work with. Can be one of:
|
||||
* `aws-sev-snp`
|
||||
* `aws-nitro-tpm`
|
||||
* `azure-sev-snp`
|
||||
* `azure-tdx`
|
||||
* `gcp-sev-es`
|
||||
|
||||
<a id="nestedatt--attestation--azure_firmware_signer_config"></a>
|
||||
|
@ -93,3 +96,17 @@ Read-Only:
|
|||
|
||||
- `expected` (String)
|
||||
- `warn_only` (Boolean)
|
||||
|
||||
|
||||
<a id="nestedatt--attestation--tdx"></a>
|
||||
### Nested Schema for `attestation.tdx`
|
||||
|
||||
Read-Only:
|
||||
|
||||
- `intel_root_key` (String)
|
||||
- `mr_seam` (String)
|
||||
- `pce_svn` (Number)
|
||||
- `qe_svn` (Number)
|
||||
- `qe_vendor_id` (String)
|
||||
- `tee_tcb_svn` (String)
|
||||
- `xfam` (String)
|
||||
|
|
|
@ -30,6 +30,7 @@ data "constellation_image" "example" {
|
|||
* `aws-sev-snp`
|
||||
* `aws-nitro-tpm`
|
||||
* `azure-sev-snp`
|
||||
* `azure-tdx`
|
||||
* `gcp-sev-es`
|
||||
- `csp` (String) CSP (Cloud Service Provider) to use. (e.g. `azure`)
|
||||
See the [full list of CSPs](https://docs.edgeless.systems/constellation/overview/clouds) that Constellation supports.
|
||||
|
|
|
@ -63,7 +63,7 @@ resource "constellation_cluster" "azure_example" {
|
|||
|
||||
### Required
|
||||
|
||||
- `attestation` (Attributes) Attestation comprises the measurements and SEV-SNP specific parameters. The output of the [constellation_attestation](../data-sources/attestation.md) data source provides sensible defaults. (see [below for nested schema](#nestedatt--attestation))
|
||||
- `attestation` (Attributes) Attestation comprises the measurements and CVM specific parameters. The output of the [constellation_attestation](../data-sources/attestation.md) data source provides sensible defaults. (see [below for nested schema](#nestedatt--attestation))
|
||||
- `constellation_microservice_version` (String) The version of Constellation's microservices used within the cluster.
|
||||
- `csp` (String) CSP (Cloud Service Provider) to use. (e.g. `azure`)
|
||||
See the [full list of CSPs](https://docs.edgeless.systems/constellation/overview/clouds) that Constellation supports.
|
||||
|
@ -108,11 +108,13 @@ Required:
|
|||
* `aws-sev-snp`
|
||||
* `aws-nitro-tpm`
|
||||
* `azure-sev-snp`
|
||||
* `azure-tdx`
|
||||
* `gcp-sev-es`
|
||||
|
||||
Optional:
|
||||
|
||||
- `azure_firmware_signer_config` (Attributes) (see [below for nested schema](#nestedatt--attestation--azure_firmware_signer_config))
|
||||
- `tdx` (Attributes) (see [below for nested schema](#nestedatt--attestation--tdx))
|
||||
|
||||
<a id="nestedatt--attestation--measurements"></a>
|
||||
### Nested Schema for `attestation.measurements`
|
||||
|
@ -133,6 +135,20 @@ Optional:
|
|||
- `maa_url` (String)
|
||||
|
||||
|
||||
<a id="nestedatt--attestation--tdx"></a>
|
||||
### Nested Schema for `attestation.tdx`
|
||||
|
||||
Optional:
|
||||
|
||||
- `intel_root_key` (String)
|
||||
- `mr_seam` (String)
|
||||
- `pce_svn` (Number)
|
||||
- `qe_svn` (Number)
|
||||
- `qe_vendor_id` (String)
|
||||
- `tee_tcb_svn` (String)
|
||||
- `xfam` (String)
|
||||
|
||||
|
||||
|
||||
<a id="nestedatt--image"></a>
|
||||
### Nested Schema for `image`
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue