4626 Commits

Author SHA1 Message Date
miampf
269e68f553
dont check host keys 2025-02-20 15:55:26 +01:00
miampf
071d040d45
[no ci] fix typo in variable 2025-02-20 14:14:08 +01:00
miampf
13fdf9b998
[no ci] debug prints 2025-02-20 11:51:32 +01:00
miampf
d88b1ae82e
do terraform stuff in terraform dir 2025-02-20 11:51:32 +01:00
miampf
b205b238ef
fix referenced variable names 2025-02-20 11:51:32 +01:00
miampf
bcaf376999
correct location for nixTools 2025-02-20 11:51:31 +01:00
miampf
452b16801d
install terraform for e2e test 2025-02-20 11:51:31 +01:00
miampf
d0b3bdb81c
loadbalancer address outputs for other GCP + AWS 2025-02-20 11:51:31 +01:00
miampf
6298de992e
use ssh command more appropriate for scripting 2025-02-20 11:51:31 +01:00
miampf
1926133b11
No custom working directory 2025-02-20 11:51:31 +01:00
miampf
fb0563ad03
fix indentation again :) 2025-02-20 11:51:30 +01:00
miampf
a64f8a8070
don't error on "emergency ssh" input in e2e test action 2025-02-20 11:51:30 +01:00
miampf
ae197d5593
fix indentation 2025-02-20 11:51:30 +01:00
miampf
950c85400b
ordered steps into step key 2025-02-20 11:51:30 +01:00
miampf
f9df38c7f5
added forgotten machine type 2025-02-20 11:51:29 +01:00
miampf
ab47947c52
added emergency ssh test option 2025-02-20 11:51:29 +01:00
miampf
c04c84e81c
Implemented e2e-ssh workflow 2025-02-20 11:51:29 +01:00
miampf
90c4bc3465
Transfer constellation workspace through actions 2025-02-20 11:51:29 +01:00
miampf
6031b22fd8
Wrote e2e_emergency_ssh action 2025-02-20 11:51:29 +01:00
miampf
bd3c2595ac
Wrote structure for e2e test 2025-02-20 11:51:28 +01:00
miampf
8d76abc1ac
Added loadbalancer_address output (important for e2e) 2025-02-20 11:51:28 +01:00
miampf
c8472b16da
bazel run //:generate 2025-02-20 11:51:28 +01:00
miampf
eaaa8a5998
Fix some vale errors 2025-02-20 11:51:28 +01:00
miampf
0718f14bc5
adjusted code accordingly 2025-02-20 11:51:28 +01:00
miampf
6f2f5b58f0
wrote ssh config specific info into docs 2025-02-20 11:51:27 +01:00
miampf
0f2d4bd122
fix certificate formatting 2025-02-20 11:51:27 +01:00
miampf
4d80e75a08
Use correct pathing and improve CLI tip 2025-02-20 11:51:27 +01:00
miampf
68d0e50186
update package hashes again 2025-02-20 11:51:27 +01:00
miampf
40744b69f4
Remove AuthorizedKeysFile setting 2025-02-20 11:51:27 +01:00
miampf
efd0f48094
Use CertificateFile instead of IdentityFile 2025-02-20 11:51:27 +01:00
miampf
97dedf751b
fix mirror from rebase 2025-02-20 11:51:26 +01:00
miampf
0092279e42
tidy check generate 2025-02-20 11:51:26 +01:00
miampf
639b713cfe
wrote docs for emergency ssh access workflow 2025-02-20 11:51:26 +01:00
miampf
2511f4a418
use /run/ssh subdir + harden openssh config a bit 2025-02-20 11:51:26 +01:00
miampf
28d17147b1
ProxyJump for hosts outside of 10.* range
removed unnecessary values for proxy host
2025-02-20 11:51:26 +01:00
miampf
6eb3ed4c53
adjust emergency_ssh variable description 2025-02-20 11:51:25 +01:00
miampf
323bac7a3e
add emergency_ssh var to other providers (untested) 2025-02-20 11:51:25 +01:00
miampf
53b750a699
nix fmt 2025-02-20 11:51:25 +01:00
miampf
78d58cab57
ssh node image configuration 2025-02-20 11:51:25 +01:00
miampf
e4fbbcbb92
change known_hosts file to writable location 2025-02-20 11:51:25 +01:00
miampf
2a5790f895
terraform ssh setup 2025-02-20 11:51:24 +01:00
miampf
188febd550
sshd and create-host-ssh-key service on node 2025-02-20 11:51:24 +01:00
miampf
60d703bee6
tf ssh access with custom lb
changed later to use existing load balancer instead of a custom setup
2025-02-20 11:51:24 +01:00
miampf
340730db66
sshd config and creation of create-host-ssh-key service 2025-02-20 11:51:24 +01:00
miampf
a5124daded
add openssh-server and openssh package
`openssh` package later removed since it is not needed for this feature
to function
2025-02-20 11:51:24 +01:00
3u13r
99a81cd246
versionsapi: canonicalize ref in version constructors (#3652)
* versionsapi: canonicalize ref in version constructors

Co-authored-by: 3u13r <lc@edgeless.systems>
Signed-off-by: Paul Meyer <katexochen0@gmail.com>

* hack/cli-k8s-compat: canonicalize ref

---------

Signed-off-by: Paul Meyer <katexochen0@gmail.com>
Co-authored-by: Paul Meyer <katexochen0@gmail.com>
2025-02-19 11:41:10 +01:00
edgelessci
f8a95de174
image: update measurements and image version (#3655)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-19 08:28:08 +01:00
Markus Rudy
758191ad42
operator: bump controller-gen version (#3653)
* operator: bump controller-gen version

This bump the controller gen version and also adjusts the generate commands (back to the original ones). This allows correct generation of CRDs and go code.

---------

Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2025-02-18 11:06:56 +01:00
Moritz Sanft
28ae7de4ea
ci: supply STACKIT credentials to cleanup job (#3651) 2025-02-17 15:27:51 +01:00
edgelessci
d208251df1
image: update locked rpms (#3650)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-17 08:28:12 +01:00