Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-29 01:16:12 -05:00
Code Issues Packages Projects Releases Wiki Activity
3,821 Commits 138 Branches 49 Tags 92 MiB
32d3b4e87c
Commit Graph

3821 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Markus Rudy
32d3b4e87c
ci: introduce keep-sorted (#2836) 
Long lists of items in source code or config can be hard to work with as
a human, most problematic being out-of-order entries in an otherwise
ordered list. This is where keep-sorted comes to the rescue: we can
leave two little comments on every listing we care about, and
keep-sorted ensures that the listing stays in order.

This commit also applied keep-sorted to the CODEOWNERS file, hopefully
demonstrating its usefulness to some extent. I'd expect more uses for
keep-sorted to be discovered organically over time.

keep-sorted is super fast, so it should not be a problem to add it to
the //:tidy target, even if we scan all files in the code base. On my
MacBook:

$ time (find . -not -path "./.git/*" -type f | sort | xargs "${keep_sorted}" --mode fix)

real	0m0.249s
user	0m0.124s
sys	0m0.129s
 2024-01-30 14:39:49 +01:00
Adrian Stobbe
efc7290454
ci: fix upload CLI path line splitting (#2877) 2024-01-30 09:26:40 +01:00
Daniel Weiße
40c4109dc2
ci: fix empty run-id in OpenSearch URL (#2876) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-30 08:57:27 +01:00
Adrian Stobbe
489e07677e
ref: pre v2.15 cleanup (#2871) 2024-01-29 21:32:37 +01:00
Adrian Stobbe
3799525103
ci: set board fields for tf example test (#2867) 2024-01-29 16:45:26 +01:00
Adrian Stobbe
7ce5caae24
terraform-provider: only print license warning once in provider (#2865) 
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2024-01-29 15:21:30 +01:00
Markus Rudy
f78f5540bc
ci: pin the kube-bench plugin definitions for sonobuoy (#2861) 2024-01-29 14:50:27 +01:00
Moritz Eckert
2413356375
image: replicate to us-east-1 for aws marketplace (#2870) 2024-01-29 14:44:33 +01:00
Daniel Weiße
f5a2b58a76
ci: run provider upgrade test only once (#2869) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-29 12:59:38 +01:00
Daniel Weiße
d372130bfd
ci: safely set attestation variant in OpenSearch URL (#2864) 
* Add attestation variant to notify hooks
* Quote all inputs in OpenSearch URL
* Add clusterCreation field to OpenSearch URL
* Omit empty fields in OpenSearch URL

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-29 11:52:41 +01:00
edgelessci
6d4a8d594e
image: update measurements and image version (#2866) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2024-01-29 11:27:13 +01:00
edgelessci
b9f33fc05b
image: update locked rpms (#2863) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2024-01-29 09:19:39 +01:00
edgelessci
0d69e4e645
image: update measurements and image version (#2856) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2024-01-26 18:05:29 +01:00
Malte Poll
e2e3935896 image: use different replication regions for SNP and TDX 2024-01-26 17:58:08 +01:00
Malte Poll
d205c15dff flake: update to incorporate uplosi updates 2024-01-26 17:58:08 +01:00
Daniel Weiße
64e5efb49d Fix evaluation statement 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-26 17:06:28 +01:00
Daniel Weiße
d17e7459db Choose TDX supported region for TDX tests 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-26 17:06:28 +01:00
Daniel Weiße
ecae1c8f9a Fix default instanceType generation 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-26 17:06:28 +01:00
Daniel Weiße
65d28f913f Allow starting e2e tests based on attestation variant instead of csp 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-26 17:06:28 +01:00
Markus Rudy
597a923a7f
cilium: performance fixes and reproducible images (#2855) 
* helm: bump cilium version

* helm: patch Cilium chart version
 2024-01-26 17:03:40 +01:00
Daniel Weiße
78b9b0fc96
terraform-provider: enable Azure TDX (#2854) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-26 15:46:21 +01:00
renovate[bot]
d58d888f54 deps: update dependency Pillow to v10.2.0 [SECURITY] 2024-01-26 15:41:44 +01:00
Moritz Eckert
d6639f7788
add azure region germany west central 2024-01-26 10:04:59 +01:00
edgelessci
49a806a874
image: update measurements and image version (#2859) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2024-01-26 08:15:43 +01:00
Moritz Eckert
26f6fd074f
ci: fix e2e_benchmark comparison 2024-01-25 11:12:32 +01:00
Adrian Stobbe
77276cb4ca
add provider example test to weekly (#2840) 2024-01-25 11:09:27 +01:00
Markus Rudy
9fb6c3216e
helm: remove kube-rbac-proxy (#2849) 2024-01-25 10:06:40 +01:00
Adrian Stobbe
4431ac3233
ci: fix missing quotes in Opensearch link (#2852) 2024-01-24 17:29:19 +01:00
Malte Poll
d3cffa9fee
image: update Linux to 6.1.74 (#2851) 2024-01-24 17:10:56 +01:00
Daniel Weiße
e350ca0f57
attestation: add Azure TDX attestation (#2827) 
* Implement Azure TDX attestation primitives
* Add default measurements and claims for Azure TDX
* Enable Constellation on Azure TDX

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-01-24 15:10:15 +01:00
Moritz Sanft
e07ea4b40f
operator: fix get-handling of Azure marketplace images (#2846) 
* operator: support getting MP images

* operator: support getting MP node image

* operator: refactorings
 2024-01-24 10:22:40 +01:00
Moritz Eckert
da26daeb49
docs: update clouds and marketplaces 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2024-01-24 09:57:35 +01:00
Thomas Tendyck
ad5ff6e1bb ci: update vale 2024-01-24 09:07:19 +01:00
edgelessci
6ae59bb986
image: update measurements and image version (#2848) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2024-01-24 08:22:48 +01:00
Malte Poll
c8ffba0366 measurements: update expected PCR[1] on GCP 2024-01-23 21:55:12 +01:00
Malte Poll
a2e2f0387c measurements: correctly override validation options 2024-01-23 21:55:12 +01:00
3u13r
2a7a9dc2aa
helm: re-enable native routing for gcp (#2842) 2024-01-23 14:46:24 +01:00
Moritz Sanft
5faa374ede
terraform-provider: validate pod ip cidr only on gcp (#2838) 2024-01-23 09:08:23 +01:00
Adrian Stobbe
4db0662b06
ci: remove broken label from OpenSearch query link (#2839) 2024-01-23 08:32:02 +01:00
edgelessci
fc1c9b7c1a
image: update locked rpms (#2835) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2024-01-22 14:07:26 +01:00
Malte Poll
3a5753045e goleak: ignore rules_go SIGTERM handler 
rules_go added a SIGTERM handler that has a goroutine that survives the scope of the goleak check.
Currently, the best known workaround is to ignore this goroutine.

https://github.com/uber-go/goleak/issues/119
https://github.com/bazelbuild/rules_go/pull/3749
https://github.com/bazelbuild/rules_go/pull/3827#issuecomment-1894002120
 2024-01-22 13:11:58 +01:00
Malte Poll
66faa5493f deps: Go 1.21.6 2024-01-22 13:11:58 +01:00
Malte Poll
f465356ace nix: update flake.lock 2024-01-22 13:11:58 +01:00
Malte Poll
64a4a2230d deps: update gazelle and rules_go 2024-01-22 13:11:58 +01:00
Malte Poll
e40d1e56d8 deps: update hermetic_cc_toolchain 2024-01-22 13:11:58 +01:00
Malte Poll
00eacdf9e8 image: mark image upload as manual bazel target 2024-01-22 13:11:58 +01:00
Moritz Sanft
0030a26eaf
ci: parallelize upgrade e2e test (#2724) 
* ci: parallelize upgrade e2e test

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

* ci: revert name change

* ci: upgrade checkout action

* ci: add target version before building target cli

* ci: rename input

* ci: upload service account key

* ci: download sa key on GCP

---------

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2024-01-19 16:34:47 +01:00
edgelessci
3b02edcc48
image: update measurements and image version (#2833) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2024-01-19 09:12:24 +01:00
edgelessci
2acbd10ef7
image: update measurements and image version (#2831) 
Co-authored-by: malt3 <malt3@users.noreply.github.com>
 2024-01-17 18:55:10 +01:00
Malte Poll
b8933560be
image upload: use unique blob name for AWS images uploaded to S3 (#2830) 
When uploading images to AWS, they need to be uploaded to S3 first.
Since blob names are not unique between attestation variants, there
was a possibility for one S3 upload to be used for the wrong AMI.
 2024-01-17 17:09:07 +01:00