Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity
3,141 Commits 133 Branches 44 Tags 106 MiB
1aea766a11
Commit Graph

3141 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Malte Poll
1aea766a11
bazel: use yq from sanbox in devbuild (#2264) 2023-08-21 11:08:10 +02:00
Daniel Weiße
9477999be2
cli: clean up terraform package (#2256) 
* Clean up Terraform pkg

* Add note to Terraform migration functions expecting to be run on initialized workspace

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-21 10:26:53 +02:00
Moritz Sanft
60bf770e62
ci: logcollection to OpenSearch in non-debug clusters (#2080) 
* refactor `debugd` file structure

* create `hack`-tool to deploy logcollection to non-debug clusters

* integrate changes into CI

* update fields

* update workflow input names

* use `working-directory`

* add opensearch creds to upgrade workflow

* make template func generic

* make templating func generic

* linebreaks

* remove magic defaults

* move `os.Exit` to main package

* make logging index configurable

* make templating generic

* remove excess brace

* update fields

* copy fields

* fix flag name

* fix linter warnings

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>

* remove unused workflow inputs

* remove makefiles

* fix command

* bazel: fix output paths of container

This fixes the output paths of builds within the container by mounting
directories to paths that exist on the host. We also explicitly set the
output path in a .bazelrc to the user specific path. The rc file is
mounted into the container and overrides the host rc.
Also adding automatic stop in case start is called and a containers
is already running.
Sym links like bazel-out and paths bazel outputs should generally work
with this change.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>

* tabs -> spaces

---------

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-21 08:01:33 +02:00
Malte Poll
7d040c26ba
ci: fine tune aspect workflows settings (#2260) 
- ensure stamping is disabled for better caching
- build everything (not only test targets)
- set cli_edition flag
 2023-08-18 18:16:02 +02:00
Malte Poll
75ed8c9f3e attestation: allow "go test" to work with CGO disabled 2023-08-18 16:36:13 +02:00
Malte Poll
1d5f244879 bazel: mark envtests as "requires-network" 
Envtests require networking, strict sandbox only allows networking if tag is set.
See https://bazel.build/reference/be/common-definitions#common.tags for further explanation.
 2023-08-18 16:36:13 +02:00
Malte Poll
1f12541a36 bazel: allow "bazel test" to work without cgo dependencies 2023-08-18 16:36:13 +02:00
Malte Poll
de863aece0 bazel: name WORKSPACE 2023-08-18 16:36:13 +02:00
Malte Poll
d3fee12947 bazel: fix use of YQ to be hermetic during "bazel run" 2023-08-18 16:36:13 +02:00
Malte Poll
6c6e2ca2f4 bazel: adopt best practices for bazelrc 
Options adapted from https://docs.aspect.build/guides/bazelrc

bazel: adopt best practices for bazelrc

Options adapted from https://docs.aspect.build/guides/bazelrc
 2023-08-18 16:36:13 +02:00
Malte Poll
339492f314
ci: add aspect workflows (#2258) 2023-08-18 11:31:24 +02:00
3u13r
8325f99b09
deps: support Kubernetes 1.28 (#2242) 2023-08-18 11:13:24 +02:00
3u13r
38dcb3dbab
ci: fix recover wait condition (#2257) 2023-08-18 10:43:51 +02:00
Malte Poll
5cf2a59c2c operators: use bazel to run operator envtests 2023-08-17 10:46:45 +02:00
Malte Poll
0be3d4b132 bazel: provide k8s / envtest toolchains 2023-08-17 10:46:45 +02:00
Malte Poll
3352a9e988 bazel: set integration go build tag 2023-08-17 10:46:45 +02:00
renovate[bot]
ae7888a13f
deps: update Terraform azuread to v2.41.0 (#2254) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-17 10:29:49 +02:00
edgelessci
04ece90172
image: update measurements and image version (#2247) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2023-08-17 08:17:28 +02:00
Adrian Stobbe
ca47d26634
cli: fix upgrade by passing placeholder values for images (#2250) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-17 07:16:09 +02:00
Thomas Tendyck
587ae6a575
deps: limit Terraform version to FOSS releases (#2241) 
* deps: limit Terraform version to FOSS releases

* fix: enforce upper version constraint

---------

Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-16 23:25:53 +02:00
Paul Meyer
c6819b8d31 ci: automatically build GCP CCM container 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 16:31:04 +02:00
Daniel Weiße
c2bb884a04
cli: fix incorrect file path for master secret during upgrades when using workspace flag (#2249) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-16 15:38:40 +02:00
edgelessci
dfe7c9884b
docs: add release v2.10.0 (#2220) 
* docs: add release v2.10.0

* fix link

---------

Co-authored-by: elchead <elchead@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2023-08-16 15:07:03 +02:00
Malte Poll
a71eaebf81
docs: update screencasts to demo node groups (#2243) 2023-08-16 13:50:31 +02:00
Malte Poll
7ce7adea3d
bazel: set most options to "common" in bazelrc (#2240) 
This is required, since we try to overwrite settings in the CI.
The "common" setting is less specific and can be overwritten by later
settings that have the granularity of "common" or finer (e.g. "build").
Fixes bug where disk cache wasn't disabled in GitHub runners.
 2023-08-16 12:37:29 +02:00
Paul Meyer
30df225ccc hack: remove azure-snp-report-verify 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Paul Meyer
001219d26a ci: remove azure-cvm runner 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Paul Meyer
f43888bb6f ci: remove azure-snp-reporter workflow 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Paul Meyer
2fb829294b configapi: rename files 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Paul Meyer
5bfaae2304 configapi: simplify pkg structure 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Paul Meyer
f604a8dfd2 e2e: upload TCB versions in verify test 
The TCP versions are extracted from the MAA token, that itself is taken
from the verify command output. The configapi is adapted to directly
work on the MAA claims JSON.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-16 11:41:02 +02:00
Adrian Stobbe
5574092bcf
ref: update code for 2.11 (#2239) 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
 2023-08-16 11:34:58 +02:00
Daniel Weiße
103817a4a5
attestation: print ordered measurement verification warnings and errors (#2237) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-16 10:45:54 +02:00
Malte Poll
78fa921746
image: use longterm release of the Linux kernel (#2228) 2023-08-16 10:42:48 +02:00
Daniel Weiße
ed0bfd9d41
cli: move helm and terraform out of kubernetes package (#2222) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-16 09:59:32 +02:00
edgelessci
f270e91724
image: update measurements and image version (#2238) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-08-16 09:41:01 +02:00
Paul Meyer
6352d8005d bazel: use -C flag in govulncheck ci 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-15 16:29:56 +02:00
renovate[bot]
8c564ed84f
deps: update ghcr.io/edgelesssys/gcp-guest-agent Docker tag to v20230811 (#2230) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-15 16:28:54 +02:00
renovate[bot]
26c41aacd2
deps: update module golang.org/x/vuln to v1 (#2231) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-15 15:12:39 +02:00
renovate[bot]
91ec474b80
deps: update bufbuild/buf to v1.26.1 (#2233) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-15 15:02:53 +02:00
renovate[bot]
841463d11e
deps: update GitHub action dependencies (#2234) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-15 14:38:48 +02:00
Adrian Stobbe
0332a3645f
cli: update join-config manually during upgrade (#2229) 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
 2023-08-15 13:58:04 +02:00
Malte Poll
5c1bca5928
ci: set bazlrc options for "common" instead of "build" if they should always apply (#2227) 
Most flags set in the bazelrc in CI are always applicable, so we set them with the common prefix.
 2023-08-15 10:34:42 +02:00
3u13r
310b80c0a8
docs: update sigstore links (#2225) 2023-08-14 15:52:45 +02:00
3u13r
c597ffb1cf
upgrade: don't pass vm image (#2211) 2023-08-14 15:16:07 +02:00
Adrian Stobbe
58e9906811
only allow chart upgrades with greater version (#2224) 2023-08-14 15:08:25 +02:00
Malte Poll
b12f2867dd
ci: set bazel build event stream timeout to 600s (#2223) 2023-08-14 14:26:59 +02:00
3u13r
8c321ec1ab
cli: add role to aws instance name (#2130) 2023-08-14 13:42:20 +02:00
Daniel Weiße
ef4d789dc8
ci: fix notify trigger in e2e upgrade workflow (#2221) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-14 11:45:04 +02:00
Adrian Stobbe
1af13878a0
fix configmap backup during upgrade (#2219) 2023-08-14 09:16:46 +02:00