Paul Meyer
29dcb72bea
e2e: remove existingConfig field
...
The existingConfig field is always set to true during create, as we use
the IAM create step to generate the config in all cases. Accordingly,
secret injection into config isn't needed anymore in create.
This fixes a bug where other parameters like Kubernetes version and
cluster name wouldn't be injected into the config due to existingConfig
being true.
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-09 12:36:36 +02:00
Adrian Stobbe
d8db9d0add
strict input validation on attestation version numbers ( #2180 )
2023-08-09 11:41:04 +02:00
Adrian Stobbe
d1febd7276
fix e2e upgrade config migration ( #2179 )
2023-08-09 10:28:13 +02:00
edgelessci
81a13319b7
image: update measurements and image version ( #2183 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-08-09 10:14:39 +02:00
Malte Poll
e1c6c533ed
docs: document node groups and migration from old config fields ( #2175 )
2023-08-09 09:46:22 +02:00
Paul Meyer
eb2f3c3021
ci: verify all pods in verify e2e
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-08 18:46:13 +02:00
Paul Meyer
5dfa0520ce
attestation: print pcr value of mismatch
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-08 18:46:13 +02:00
Adrian Stobbe
70861ee8ad
cli: declare mastersecret as immutable and print attestationCfg diff in warning ( #2167 )
2023-08-08 13:03:23 +02:00
Paul Meyer
e97b2afc14
cli: print maa token in verify
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-08 11:50:26 +02:00
Daniel Weiße
8dbe79500f
cli: fix incorrect usage of masterSecret salt for clusterID generation ( #2169 )
...
* Fix incorrect use of masterSecret salt for clusterID generation
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-07 15:24:46 +02:00
Malte Poll
bd26e6bae7
cdbg: implement workspace / "-C" flag and "--bindir" ( #2170 )
2023-08-07 11:40:48 +02:00
Adrian Stobbe
9dcad0ed16
fix upgrade test by only setting nodeGroup for >v2.9 ( #2176 )
2023-08-07 11:02:00 +02:00
renovate[bot]
cc10613252
deps: update dependency cryptography to v41.0.3 [SECURITY] ( #2150 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-08-07 09:23:18 +02:00
Adrian Stobbe
3ea7fddb03
fix upgrade test by adding deprecated flags( #2173 )
2023-08-07 08:38:14 +02:00
3u13r
ee0adfe8c7
kubernetes: document total log size ( #2164 )
2023-08-04 18:17:36 +02:00
3u13r
4564017b13
config: fix aws instance type validation ( #2171 )
2023-08-04 18:16:49 +02:00
Malte Poll
15bb9588d7
cli: update config migration to migrate v3 -> v4 ( #2166 )
2023-08-04 15:57:36 +02:00
Daniel Weiße
d1ace13713
cli: add --workspace
flag to set base directory for Constellation workspace ( #2148 )
...
* Remove `--config` and `--master-secret` falgs
* Add `--workspace` flag
* In CLI, only work on files with paths created from `cli/internal/cmd`
* Properly print values for GCP on IAM create when not directly updating the config
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-04 13:53:51 +02:00
renovate[bot]
ec33530c38
deps: update gcr.io/kubebuilder/kube-rbac-proxy Docker tag to v0.14.1 ( #2063 )
...
* deps: update gcr.io/kubebuilder/kube-rbac-proxy Docker tag to v0.14.1
* deps: use gcr.io/kubebuilder/kube-rbac-proxy:v0.14.1
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-08-04 13:49:38 +02:00
Malte Poll
7bfcb0bd5d
cli: remove old config migration from v2 to v3
2023-08-04 12:36:45 +02:00
Malte Poll
82de0b83bd
docs: remove deprecated flags from docs
2023-08-04 12:36:45 +02:00
Malte Poll
92b0cd5a21
ci: update actions to use nodeGroups and remove deprecated flags
2023-08-04 12:36:45 +02:00
Malte Poll
56089a4c70
cli: update init_test to use nodeGroups
2023-08-04 12:36:45 +02:00
Malte Poll
7dfac1f758
cli: use nodeGroups when setting default disk size for QEMU
2023-08-04 12:36:45 +02:00
Malte Poll
0c20ccb477
terraform: create nodeGroups in tfvars from nodeGroups in config
2023-08-04 12:36:45 +02:00
Malte Poll
d0ec7a3e54
terraform: move OpenStack flavorID into nodeGroups
2023-08-04 12:36:45 +02:00
Malte Poll
3047cb2798
create: deprecate --control-plane-nodes and --worker-nodes flags
...
Also print and configure node groups
2023-08-04 12:36:45 +02:00
Malte Poll
c0177c565f
config: update tests
2023-08-04 12:36:45 +02:00
Malte Poll
b61deb6a03
config: update validation to work with nodeGroups
2023-08-04 12:36:45 +02:00
Malte Poll
2246c31b7b
config: define lists of valid disk types
2023-08-04 12:36:45 +02:00
Malte Poll
15bb3b31fd
config: add nodeGroups
2023-08-04 12:36:45 +02:00
Daniel Weiße
374f8c7dae
cli: fix missing init parameters in mini up ( #2159 )
...
* Fix missing init parameters in mini up
* Remove redundant passing of file.Handler in init functions
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-04 10:42:09 +02:00
edgelessci
75c49b6515
image: update measurements and image version ( #2163 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-08-04 09:58:31 +02:00
Moritz Sanft
af05e17f49
ci: keep embedded measurements if stable image is used ( #2109 )
...
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-08-04 09:43:32 +02:00
edgelessci
d71422667e
image: update measurements and image version ( #2157 )
...
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
2023-08-04 08:35:19 +02:00
3u13r
720c48ea45
cli: refactor terraform output parsing ( #2158 )
2023-08-03 16:17:23 +02:00
Paul Meyer
dccb1dfde9
ci: remove unused actions
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-03 16:09:06 +02:00
Paul Meyer
9d90ab6df7
ci: check for unused actions
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-03 16:09:06 +02:00
Thomas Tendyck
122c3c92f8
Update codeowners and remove old tools
2023-08-03 15:29:53 +02:00
Adrian Stobbe
70ce195a5f
cli: unify chart value setup ( #2153 )
2023-08-03 13:54:48 +02:00
3u13r
5119d843f1
terraform: fix uami parsing ( #2155 )
2023-08-03 13:22:26 +02:00
3u13r
a983b08262
deps: bump go version ( #2156 )
2023-08-03 12:07:27 +02:00
Daniel Weiße
86c5fb5fab
config: reorder values ( #2154 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-02 16:01:10 +02:00
Adrian Stobbe
13eea1ca31
cli: install cilium in cli instead of bootstrapper ( #2146 )
...
* add wait and restartDS
* cilium working (tested on azure + gcp)
* clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* add patchnode for gcp
* fix gcp
* patch node inside bootstrapper
* apply renaming of client
* fixup! apply renaming of client
* otto feedback
2023-08-02 15:49:40 +02:00
edgelessci
da1376cd90
image: update measurements and image version ( #2151 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-08-02 10:13:56 +02:00
Daniel Weiße
321474c356
ci: remove old incompatible test option ( #2149 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-02 08:18:55 +02:00
renovate[bot]
7e3123232e
deps: update Terraform azurerm to v3.67.0 ( #2147 )
...
Also update Azure terraform:
ignore snp policy changes on resource
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-08-02 08:15:22 +02:00
Otto Bittner
dac690656e
api: add functions to transparently handle signatures upon API interaction ( #2142 )
2023-08-01 16:48:13 +02:00
Otto Bittner
002c3a9a32
ci: upgrade fromVersion for upgrade tests ( #2145 )
...
Co-authored-by: Adrian Stobbe <stobbe.adrian@gmail.com>
2023-08-01 10:34:11 +02:00
Otto Bittner
867f7490a2
ci: clone constellation repo into separate dir ( #2143 )
2023-08-01 10:13:10 +02:00