2465 Commits

Author SHA1 Message Date
Paul Meyer
94d5b251f2
ci: fix e2e miniconstellation abort condition (#1728)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-04 13:42:02 +02:00
Paul Meyer
6b34f6875e
ci: fix e2e release abort condition (#1726)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-03 18:25:09 +02:00
release[bot]
4a8617ea18 attestation: hardcode measurements for v2.7.1 v2.7.1 2023-05-03 14:21:26 +00:00
release[bot]
6028c528e5 deps: update images to v2.7.1 2023-05-03 13:25:14 +00:00
Paul Meyer
1a45c652c1
cli: remove ambiguity in path for CR backups (#1719)
During upgrade all custom resources are backed up to files on the
local file system. Since old versions are also backed up, we need to
reflect the version in the name.

Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-05-03 15:13:31 +02:00
Paul Meyer
8a77cee919
ci: skip e2e tests if caller was not successful (#1714)
Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com>
2023-05-03 12:05:00 +02:00
Paul Meyer
a5adf459ce
ci: use uuidgen to get uuid, for macos compability (#1720)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-05-03 12:04:30 +02:00
release[bot]
1bddfb6ed9 attestation: hardcode measurements for v2.7.1 2023-05-02 14:25:40 +00:00
release[bot]
142e03f16d deps: update images to v2.7.1 2023-05-02 12:18:43 +00:00
release[bot]
5dade51a67 chore: update version.txt to v2.7.1 2023-05-02 12:12:04 +00:00
Paul Meyer
b4a6ee963c
cli: create namespaced folders for upgrade backups (#1702)
Resource names are only unique per kind+ns. Without this patch it
might happen that there are two resources with the same name
in different namespaces. Upgrade might fail in that case.

Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-05-02 12:57:24 +02:00
Paul Meyer
3a9291499b
upgrade: fix 2.6 -> 2.7 migration for 2.7.1 patch (#1649)
* upgrade: fix 2.6 -> 2.7 migration for 2.7.1 patch

Also correctly set microservice version from config.
Previously the key was ignored and microservices were always
tried for an upgrade.

* ci: add simulatedTargetVersion to e2e-upgrade

This allows us to build a CLI that reports the given version during
an upgrade test. With this we can test patch upgrades.

Signed-off-by: Otto Bittner <cobittner@posteo.net>

* ci: e2e-upgrade, case-insensitive string compare

* hack: fix v-prefixing in pseudo-version tool

pre-release versions and release versions behaved differently.
This lead to a duplicate v prefix in the cli's version.

Signed-off-by: Otto Bittner <cobittner@posteo.net>

---------

Signed-off-by: Otto Bittner <cobittner@posteo.net>
Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-05-02 12:56:26 +02:00
Paul Meyer
9bee6fc69c
image: fix pcr 12 calculation (#1706)
Kernel cmdline embedded in UKIs had no null terminator before. With newer versions of mkosi, it is already null-terminated so we shouldn't null terminate it twice.

Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com>
2023-05-02 12:35:52 +02:00
Paul Meyer
c2439cbf74
image: upgrade mkosi to support repart (#1684)
Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com>
2023-05-02 12:35:38 +02:00
Paul Meyer
dd67a4295d
cli: force-delete Azure resource group (#1667)
* force-delete Azure resource group
* were not -> weren't
* fix typo

Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2023-04-27 09:48:00 +02:00
Paul Meyer
54df85447c
ci: fix version publishing on release (#1658)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 18:44:39 +02:00
Paul Meyer
6e8d52181c
cli: fix misleading error while applying kubernetes-only upgrade (#1630)
* The check would previously fail if e.g. `apply` did not upgrade the
image, but a new image was specified in the config. This could
happen if the specified image was too new, but a valid Kuberentes
upgrade was specified.
* ci: fix variable expansion in e2e-upgrade call
* e2e: do not verify measurement signature

Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-04-13 17:17:53 +02:00
3u13r
c92ceaab3c
ci: prevent accidental GOOS and GOARCH confusion in host go toolchain (#1632)
Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com>
2023-04-12 15:01:15 +02:00
Paul Meyer
9f8f320ddc
deps: update go to 1.20.3 (#1622)
Co-authored-by: Malte Poll <1780588+malt3@users.noreply.github.com>
2023-04-12 14:04:23 +02:00
Paul Meyer
d56b0ef75f
ci: always release cli on release-cli workflow (#1611)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-04 18:14:12 +02:00
Paul Meyer
edf8b200b7
ci: fix empty image input of verify e2e on release (#1604)
* ci: fix empty image input of verify e2e on release
* ci: increase parallelism of e2e release workflow

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-04 11:17:12 +02:00
Paul Meyer
4373229d6d
ci: run //:check and //:generate concurrently (#1606)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-04 11:16:55 +02:00
Paul Meyer
feae9e915c
license: remove check for Azure.ConfidentialVM (#1603)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 19:48:50 +02:00
Paul Meyer
958470ab67
ci: do not run tests on macOS (#1596)
only run two tests on macOS as a simple smoketest

Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-04-03 18:29:15 +02:00
release[bot]
9a36864c92 attestation: hardcode measurements for v2.7.0 v2.7.0 2023-04-03 14:46:32 +00:00
release[bot]
1290dab98a deps: update images to v2.7.0 2023-04-03 13:55:04 +00:00
release[bot]
d3f6585238 chore: update version.txt to v2.7.0 2023-04-03 13:48:37 +00:00
Moritz Sanft
e71c33c88d
cli: print attestation document with constellation verify (#1577)
* wip: verification output

* wip: Azure cert parsing

* wip: print actual PCRs

* wip: use string builder for output formatting

* compare PCR expected with actual

* tests

* change naming

* update cli reference

* update bazel buildfile

* bazel update

* change loop signature
2023-04-03 15:06:27 +02:00
Malte Poll
d15968bed7
bootstrapper: make Azure auth method configurable on cluster init (#1346)
* bootstrapper: make Azure auth method configurable on cluster init
* azure: convert uami resource ID to clientID


Co-authored-by: 3u13r <lc@edgeless.systems>
2023-04-03 15:01:25 +02:00
renovate[bot]
5cb1899c27
deps: update golang.org/x/vuln digest to a42f991 (#1588)
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 14:32:13 +02:00
Moritz Sanft
46f5b1734e
cli: show available cli upgrades on upgrade check command (#1394)
* cli: upgrade check show cli upgrades

* only check compatibility for valid upgrades

* use semver.Sort

* extend unit tests

* add unit test for new compatible cli versions

* adapt to feedback

* fix rebase

* rework output

* minor -> major

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* minor -> major

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* dynamic major version

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* remove currentK8sVer argument

* bazel gen & tidy

* bazel update

---------

Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-04-03 14:31:17 +02:00
renovate[bot]
33d0b8f59d
deps: update golang.org/x/exp digest to 10a5072 (#1587)
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 14:28:53 +02:00
miampf
8964e3e90c
bootstrapper: fix journald ram usage (#1553) 2023-04-03 13:58:34 +02:00
Paul Meyer
cbdaec65da
ci: purge images on main (#1583)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 13:44:46 +02:00
Otto Bittner
1dd5eae594
ci: do not skip e2e-weekly if trigger is successful (#1584) 2023-04-03 13:40:42 +02:00
Malte Poll
1a8ec42e47
ci: fix grouping of renovate groups (#1585) 2023-04-03 13:37:56 +02:00
Paul Meyer
176d32599f terraform: add missing permission to AWS iam
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 07:23:00 -04:00
Paul Meyer
63b07ede8a terraform: sort permissions
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-03 07:23:00 -04:00
Malte Poll
e3f488839c
ci: match bazel deps using packageName template parameter (#1581)
* ci: match bazel deps using packageName template parameter
2023-04-03 12:18:07 +02:00
Otto Bittner
7c8215e507 cli: add kubernetes pkg to interface with cluster
Previously the content of files status and upgrade within the
cloudcmd pkg did not fit cloudcmd's pkg description.
This patch introduces a separate pkg to fix that.
2023-04-03 12:03:41 +02:00
Otto Bittner
c8c2953d7b cli: add status cmd
The new command allows checking the status of an upgrade
and which versions are installed.
Also remove the unused restclient.
And make GetConstellationVersion a function.
2023-04-03 12:03:41 +02:00
Malte Poll
93e55d2f78
ci: auto-group bazel deps by base name if os and arch differ (#1578) 2023-04-03 11:45:02 +02:00
Otto Bittner
180ef931fd ci: do not create branch during release workflow
This seems to bother the create-pull-request action.
See: https://github.com/peter-evans/create-pull-request/issues/1203
2023-04-03 11:35:39 +02:00
Otto Bittner
cc2bde9a3e ci: only commit version.txt if a change happened 2023-04-03 11:35:39 +02:00
Malte Poll
5e07efbb07 ci: fix cli path for cli signatures 2023-04-03 11:35:39 +02:00
Otto Bittner
4df33b93fe ci: add e2e-test-release workflow
This workflow is used to run e2e tests in
preparation to a release.
It is triggered by the successful completion of
the release workflow.
Also trigger e2e-mini through the release
workflow completion.
This makes restarting the tests easier if
they fail during release preparation.

Co-authored-by: stdoutput <moritz.sanft@outlook.de>
2023-04-03 11:35:39 +02:00
Moritz Sanft
2d41a19fbf
internal: semver support for pseudoversions (#1564)
* support for prerelease tag / pseudoversion

* build version first

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

* use strings.Cut

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

---------

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
2023-04-03 10:48:28 +02:00
Daniel Weiße
62c165750f
config: remove deprecated upgradeConfig and require name and microserviceVersion fields (#1541)
* Remove deprecated fields

* Remove warning for not setting attestationVariant

* Dont write attestationVariant to config

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-03-31 19:19:10 +02:00
Paul Meyer
aed9b8d5f5
ci: sort apk hashes (#1560)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-31 18:12:45 +02:00
Paul Meyer
b8d6b110b1
cli: add missing -y short flag to iam create (#1572)
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-03-31 17:26:14 +02:00