miampf
37b42ea3d7
fix mirror from rebase
2025-01-21 12:19:55 +01:00
miampf
9e6424c401
tidy check generate
2025-01-21 11:43:42 +01:00
miampf
1f0baf5064
wrote docs for emergency ssh access workflow
2025-01-21 11:43:41 +01:00
miampf
28bf01636d
fix sha256sums for mirror
2025-01-21 11:43:41 +01:00
miampf
5ba15c55b1
use /run/ssh
subdir + harden openssh config a bit
2025-01-21 11:43:41 +01:00
miampf
2d66ecf8d6
ProxyJump for hosts outside of 10.* range
...
removed unnecessary values for proxy host
2025-01-21 11:43:40 +01:00
miampf
5c24c9d22f
adjust emergency_ssh
variable description
2025-01-21 11:43:40 +01:00
miampf
1a11b889be
fix rebase by updating packages again
2025-01-21 11:43:40 +01:00
miampf
701cb7eb30
add emergency_ssh var to other providers (untested)
2025-01-21 11:43:39 +01:00
miampf
d4533f61c7
nix fmt
2025-01-21 11:43:39 +01:00
miampf
76ce2ff6cb
ssh node image configuration
2025-01-21 11:43:39 +01:00
miampf
f09e342644
change known_hosts file to writable location
2025-01-21 11:43:38 +01:00
miampf
88c33c89c3
terraform ssh setup
2025-01-21 11:43:38 +01:00
miampf
c35d7f2157
sshd
and create-host-ssh-key
service on node
2025-01-21 11:43:38 +01:00
miampf
acc5a84f3f
tf ssh access with custom lb
...
changed later to use existing load balancer instead of a custom setup
2025-01-21 11:43:37 +01:00
miampf
bc2cfdf1a5
sshd
config and creation of create-host-ssh-key
service
2025-01-21 11:43:37 +01:00
miampf
bcbfb9825f
add openssh-server
and openssh
package
...
`openssh` package later removed since it is not needed for this feature
to function
2025-01-21 11:43:37 +01:00
renovate[bot]
92d7fc5385
deps: update module k8s.io/cri-client to v0.32.1 ( #3608 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 11:03:48 +01:00
renovate[bot]
e9a6513346
deps: update actions/setup-go action to v5.3.0 ( #3605 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 10:28:03 +01:00
renovate[bot]
ebbe61727c
deps: update dependency DeterminateSystems/nix-installer to v0.34.0 ( #3607 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 10:06:09 +01:00
renovate[bot]
44e898e187
deps: update Terraform dependencies ( #3604 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 10:05:01 +01:00
renovate[bot]
f048ebb8e8
deps: update rhysd/actionlint to v1.7.7 ( #3602 )
...
* deps: update rhysd/actionlint to v1.7.7
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-21 10:04:32 +01:00
renovate[bot]
f789b8efc7
deps: update bufbuild/buf to v1.50.0 ( #3606 )
...
* deps: update bufbuild/buf to v1.50.0
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-21 10:04:07 +01:00
renovate[bot]
c6db8bd46b
deps: update aquasecurity/tfsec to v1.28.13 ( #3600 )
...
* deps: update aquasecurity/tfsec to v1.28.13
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-21 09:05:04 +01:00
renovate[bot]
2216098a9b
deps: update registry.k8s.io/sig-storage/snapshot-validation-webhook Docker tag to v8.1.1 ( #3601 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 08:51:04 +01:00
renovate[bot]
679edd79d4
deps: update Go dependencies ( #3586 )
...
* deps: update Go dependencies
* keep cloud.google.com/go/storage at v1.49.0
This is required to avoid issues with a broken
google.golang.org/grpc/stats/opentelemetry import
See https://github.com/googleapis/google-cloud-go/issues/11455
* deps: tidy all modules
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-20 16:15:42 +01:00
renovate[bot]
22d093cc6f
deps: update bazel (core) ( #3581 )
...
* deps: update bazel (core)
* bazel: depset -> list
To comply with some breaking changes in rules_go v0.51, we explicitly
need to type-cast the depsets to lists here.
* bazel: migrate deprecated GoLibrary usage
In rules_go v0.51.0, `GoLibrary` was deprecated and replaced by
`GoInfo`. This adjusts our `protoc-gen-go` rule to use the new `GoInfo`.
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-20 15:17:05 +01:00
Daniel Weiße
53e937522f
dependencies: bump Go to v1.23.5 ( #3599 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-01-20 11:53:55 +01:00
Daniel Weiße
40754753a2
dependencies: drop google/go-sev-guest fork ( #3595 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-01-20 10:39:14 +01:00
renovate[bot]
56b061e84b
deps: update kubernetes packages ( #3589 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-20 10:01:17 +01:00
renovate[bot]
576add30d1
deps: update ubuntu Docker tag to v24 ( #3597 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-20 09:45:03 +01:00
renovate[bot]
c24e149b12
deps: update dependency containernetworking/plugins to v1.6.2 ( #3524 )
...
* deps: update dependency containernetworking/plugins to v1.6.2
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-20 09:10:44 +01:00
edgelessci
3a898e9cff
image: update locked rpms ( #3594 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-20 09:07:00 +01:00
renovate[bot]
b996a4cbae
deps: update docusaurus monorepo to v3.7.0 ( #3591 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-17 17:08:33 +01:00
renovate[bot]
9a969548e4
deps: update Python dependencies ( #3592 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-17 17:08:05 +01:00
renovate[bot]
cef2436065
deps: update golangci/golangci-lint to v1.63.4 ( #3588 )
...
* deps: update golangci/golangci-lint to v1.63.4
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-17 15:15:02 +01:00
renovate[bot]
188e51bba1
deps: update Python dependencies ( #3590 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-17 15:05:36 +01:00
renovate[bot]
4cffde5036
deps: update rhysd/actionlint to v1.7.6 ( #3584 )
...
* deps: update rhysd/actionlint to v1.7.6
* deps: tidy all modules
* Update macos-12 runners to macos-latest
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2025-01-17 11:53:24 +01:00
renovate[bot]
405d0c6154
deps: update bazel (modules) ( #3582 )
...
* deps: update bazel (modules)
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-17 10:43:07 +01:00
renovate[bot]
1459ab96fe
deps: update GitHub action dependencies ( #3585 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-17 09:58:24 +01:00
Moritz Sanft
6ba47d5634
ci: allow unrestricted user namespaces in image builds ( #3587 )
...
Since Ubuntu 23.10, creating namespaces, e.g. via `unshare`, requires
privileges. Since `unshare` is used by `mkosi` in our image build
pipeline, we need to re-enable them explicitly here before building the
image, aligning with the behavior before Ubuntu 23.10.
2025-01-17 09:36:48 +01:00
renovate[bot]
0272e7dd15
deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v30.1.4 ( #3579 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-16 15:29:39 +01:00
renovate[bot]
99c8a1eb11
deps: update bufbuild/buf to v1.49.0 ( #3583 )
...
* deps: update bufbuild/buf to v1.49.0
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-16 14:39:20 +01:00
renovate[bot]
e3f29ecf4d
deps: update Kubernetes versions ( #3578 )
...
* deps: update Kubernetes versions
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-16 14:22:02 +01:00
renovate[bot]
f10376fd44
deps: update Terraform dependencies ( #3580 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-16 14:21:35 +01:00
renovate[bot]
e8771e2dab
deps: update K8s constrained AWS versions ( #3561 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-16 13:58:21 +01:00
renovate[bot]
d9ab8c76e0
deps: update Terraform openstack to v3 ( #3539 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-16 12:47:29 +01:00
edgelessci
126dbd69d9
image: update measurements and image version ( #3577 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-15 08:07:44 +01:00
miampf
0d2bedbca3
fix(docs): reference up to date longhorn guide ( #3576 )
2025-01-14 16:07:19 +01:00
miampf
2fad395bb5
docs(image): Add section for adding new packages ( #3575 )
2025-01-14 15:46:19 +01:00