Commit Graph

4487 Commits

Author SHA1 Message Date
Moritz Sanft
1495a7f6dd
docs: correct STACKIT IDs (#3545)
We got OpenStack and STACKIT IDs mixed up in our documentation previously. The OpenStack project ID is required in the `clouds.yaml` file, while the STACKIT project ID is required in the Constellation config. This fixes the warning for the OpenStack project ID in `clouds.yaml`, and adds an additional warning for the STACKIT project ID in the configuration section.
2024-12-12 09:45:24 +01:00
renovate[bot]
7d0aca054b
deps: update module golang.org/x/crypto to v0.31.0 [SECURITY] (#3546)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-12 09:17:21 +01:00
Moritz Sanft
be1deb7d4b
Revert "operator: use GCP REST API for instance templates (#3361)" (#3544)
This reverts commit effb086cd3.
2024-12-11 17:04:13 +01:00
Markus Rudy
37e21b2ff0
image: use uplosi from nixpkgs-unstable (#3543)
* image: correct sharing profile for Azure gallery

* nix: use uplosi from nixpkgs-unstable instead of GitHub
2024-12-11 11:51:58 +01:00
renovate[bot]
54878ddc56
deps: update bazel (modules) (major) (#3540)
* deps: update bazel (modules)

* deps: tidy all modules

* Copy private go_bin_for_host rule from `rules_go` to `/bazel/ci`

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2024-12-10 15:19:46 +01:00
Markus Rudy
7a7b6b3655
ci: exclude CoreDNS chart from renovate (#3541) 2024-12-10 13:00:00 +01:00
renovate[bot]
eb08fe1025
deps: update bufbuild/buf to v1.47.2 (#3532)
* deps: update bufbuild/buf to v1.47.2

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-10 11:54:05 +01:00
renovate[bot]
2596d7c1c2
deps: update dependency kubernetes-sigs/cri-tools to v1.32.0 (#3537)
* deps: update dependency kubernetes-sigs/cri-tools to v1.32.0

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-10 11:49:03 +01:00
renovate[bot]
64b395dba8
deps: update dependency DeterminateSystems/nix-installer to v0.32.1 (#3536)
* deps: update dependency DeterminateSystems/nix-installer to v0.32.1

* ci: run reproducible builds workflow on changes

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
2024-12-10 09:26:05 +01:00
renovate[bot]
59b9d54c44
deps: update github/codeql-action action to v3.27.6 (#3535)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-10 08:27:31 +01:00
Moritz Sanft
23354f23a5
flake: update to Bazel 7.4.1 (#3534) 2024-12-10 07:13:54 +01:00
renovate[bot]
cdb3e461bb
deps: update bazel (core) (#3531) 2024-12-10 07:13:44 +01:00
renovate[bot]
d346848aac
deps: update module k8s.io/endpointslice to v0.31.3 (#3529)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-09 16:07:01 +01:00
renovate[bot]
469cae4658
deps: update bazel (plugins) (#3515)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-09 16:06:28 +01:00
edgelessci
d7728fe3ba
image: update measurements and image version (#3528)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-09 09:00:04 +01:00
edgelessci
36f8c6d540
image: update locked rpms (#3530)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-09 08:46:25 +01:00
renovate[bot]
4bf607529b
deps: update module k8s.io/dynamic-resource-allocation to v0.31.3 (#3519)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-06 08:38:20 +01:00
edgelessci
224e6e397c
image: update measurements and image version (#3527)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-04 10:49:53 +01:00
edgelessci
ab2782a2a2
Post v2.20.0 release updates to main (#3525)
* docs: release 2.20

* chore: update version.txt to v2.21.0-pre

* chore: update CI for v2.20.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-04 08:30:14 +01:00
Moritz Sanft
b03e671a62
constellation-node-operator: don't bail out on listing errors (#3522)
If the GCP project has scaling groups for which our checks can't be performed (which is the case for regional scaling groups, as they "don't exist" for the operator, if deployed in another region) . In that case, we should not bail out directly but go on with the next group. An error should only be thrown if there are no matching groups at all.
2024-12-03 22:44:38 +01:00
Moritz Sanft
0aa44a8221
versions: manually pull in new Kubernetes versions (#3523)
Some upgrade (possibly due to a too-eagerly merged PR) missed upgrading certain parts of the K8s versions. This fixes that by manually aligning to the newest version.
2024-12-03 16:41:04 +01:00
renovate[bot]
a1da8aa70c
deps: update kubernetes packages (#3517)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-02 14:27:10 +01:00
renovate[bot]
fc0b3cc4a2
deps: update Kubernetes versions (#3516)
* deps: update Kubernetes versions

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-02 14:26:59 +01:00
renovate[bot]
af4b15c365
deps: update K8s constrained GCP versions (#3446)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-02 13:24:47 +01:00
renovate[bot]
53ae065329
deps: update golangci/golangci-lint to v1.62.2 (#3511)
* deps: update golangci/golangci-lint to v1.62.2

* deps: tidy all modules

* chore: align with new golangci-lint rules

golangci-lint added some linters in this version upgrade that require fixes on our side. These are done in this commit.

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-12-02 13:24:34 +01:00
renovate[bot]
b652baa9c2
deps: update Terraform dependencies (#3510)
* deps: update Terraform dependencies

* Update terraform lock files

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

* Print module path for lockfile to be generated

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2024-12-02 12:04:15 +01:00
Daniel Weiße
6bad8b9839
ci: ensure autoscaling test actuallly waits for all Pods to be ready (#3514)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-12-02 11:29:46 +01:00
Daniel Weiße
5b1e3627c9
ci: run memory intensive check targets sequentially (#3513)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-12-02 09:25:45 +01:00
renovate[bot]
ed573c46d6
deps: update Go dependencies (#3509)
* deps: update Go dependencies

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-02 09:17:23 +01:00
renovate[bot]
6ebfa28e6d
deps: update Kubernetes versions (#3472)
* deps: update Kubernetes versions

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-01 13:13:48 +01:00
edgelessci
283ea08437
image: update locked rpms (#3512)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-12-01 13:13:31 +01:00
Malte Poll
d8e9ed4f93
attestation: upgrade expected AWS SEV-SNP firmware (#3049)
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-11-29 14:32:15 +01:00
renovate[bot]
2c318905a6
deps: update bazel (modules) (#3505)
* deps: update bazel (modules)

* deps: tidy all modules

* Ignore rules_python root warning

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

* deps: tidy all modules

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2024-11-29 11:14:21 +01:00
edgelessci
17bfce7c11
image: update measurements and image version (#3508)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-11-29 08:49:05 +01:00
renovate[bot]
5977f0f5b1
deps: update rhysd/actionlint to v1.7.4 (#3506)
* deps: update rhysd/actionlint to v1.7.4

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-11-28 19:49:37 +01:00
renovate[bot]
b99bd53066
deps: update fedora:40 Docker digest to 7cdd2b4 (#3503)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-28 16:15:39 +01:00
renovate[bot]
8f3d6c42f2
deps: update GitHub action dependencies (#3507)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-28 16:15:26 +01:00
renovate[bot]
6dbb8ac56a
deps: update Terraform azuread to v3 (#3432)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-28 15:48:29 +01:00
edgelessci
b99413a7cc
image: update locked rpms (#3493)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-11-28 15:46:22 +01:00
Markus Rudy
6d7f687609
image: allow autologin on TTY1 for STACKIT cloud (#3499) 2024-11-27 14:21:43 +01:00
Daniel Weiße
900fb3f88b
ci: automate manual post-release steps (#3498)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-11-27 08:52:54 +01:00
edgelessci
247df63d68
image: update measurements and image version (#3500)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-11-27 08:31:00 +01:00
Adrian Stobbe
143f683852
make post release more promiment (#3497) 2024-11-26 16:50:41 +01:00
Moritz Sanft
52372ae808
bootstrapper: only err if no control plane IPs available (#3496)
Previously we errored out of the entire join if retrieval
of either LB IP or control plane public IP failed. This resulted
in the entire "use either IP" logic not working as intended. This now
makes it log a warning only if the IP retrievals fail, and only errors
out of the join if no IP can be found at all.
2024-11-26 10:38:18 +01:00
renovate[bot]
fbdf1db053
deps: update bazel (plugins) (#3486)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-26 09:27:43 +01:00
Daniel Weiße
871be80877
ci: update workflows to initialize upgrade tests with v2.19.3 (#3494)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-11-26 08:55:33 +01:00
Thomas Tendyck
b2e99af86c docs: refactor gtag 2024-11-22 17:19:51 +01:00
Daniel Weiße
f06830ec1a
deps: update google/go-sev-guest to v0.11.2-0.20241122022416-97a55186df28 (#3490)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-11-22 11:01:09 +01:00
edgelessci
4d65c7811b
image: update measurements and image version (#3491)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-11-22 09:18:26 +01:00
3u13r
4026752e89
docs: remove mentioning of Cilium's key rotation for IPSec since it does not apply to WireGuard (#3489) 2024-11-21 09:03:05 +01:00