Otto Bittner
405db3286e
AB#2386: TrustedLaunch support for azure attestation
...
* There are now two attestation packages on azure.
The issuer on the server side is created base on successfully
querying the idkeydigest from the TPM. Fallback on err: Trusted Launch.
* The bootstrapper's issuer choice is validated by the CLI's validator,
which is created based on the local config.
* Add "azureCVM" field to new "internal-config" cm.
This field is populated by the bootstrapper.
* Group attestation OIDs by CSP (#42 )
* Bootstrapper now uses IssuerWrapper type to pass
the issuer (and some context info) to the initserver.
* Introduce VMType package akin to cloudprovider. Used by
IssuerWrapper.
* Extend unittests.
* Remove CSP specific attestation integration tests
Co-authored-by: <dw@edgeless.systems>
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-05 12:03:48 +02:00
Nils Hanke
4bfb98d35a
Fix typo in sidebar
2022-09-05 11:10:57 +02:00
Thomas Tendyck
b9db172fcf
Update pull_request_template.md
2022-09-05 11:10:40 +02:00
Nirusu
76896ac190
CLI reference was updated by edgelesssys/constellation@3c7d76f5
2022-09-05 10:45:03 +02:00
Nils Hanke
3c7d76f5a6
Run link checker only when Markdown & HTML files have been changed
2022-09-05 10:36:14 +02:00
Nils Hanke
2dfa591c41
clidocgen: Support nested commands properly ( #58 )
2022-09-05 10:34:46 +02:00
Daniel Weiße
f8c01a0298
AB#2394 Change KMS to be deployed as DaemonSet ( #69 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-05 10:22:40 +02:00
Nils Hanke
71fb62fe31
Remove note to instance types specifically
2022-09-05 09:36:58 +02:00
Thomas Tendyck
bd63aa3c6b
add license headers
...
sed -i '1i/*\nCopyright (c) Edgeless Systems GmbH\n\nSPDX-License-Identifier: AGPL-3.0-only\n*/\n' `grep -rL --include='*.go' 'DO NOT EDIT'`
gofumpt -w .
2022-09-05 09:17:25 +02:00
Thomas Tendyck
95ff987bfc
add license
2022-09-05 09:17:25 +02:00
Malte Poll
e24808e936
e2e: Write service account key path for GCP ( #67 )
...
Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-09-05 09:17:18 +02:00
Thomas Tendyck
517302e4dc
limit workflows to paths or filetypes
2022-09-05 08:51:36 +02:00
Daniel Weiße
4db837d7f9
Rename mount package to csi ( #47 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-05 08:42:55 +02:00
Felix Schuster
d06d403d1d
Add page on CSPs ( #56 )
...
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
2022-09-04 22:11:10 +02:00
katexochen
43924c7318
e2e: Silence curl
2022-09-02 19:08:33 +02:00
katexochen
9076404b06
Fix manual e2e test
2022-09-02 19:08:33 +02:00
Malte Poll
bdb57387c7
Update pull_request_template.md ( #57 )
2022-09-02 17:17:44 +02:00
Fabian Kammel
106635a9ee
Restructure config docs ( #44 )
...
* more guided UX when generating and filling in config
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-09-02 17:11:06 +02:00
Fabian Kammel
2f871578b2
first implementation of SBOM generation ( #50 )
...
* first implementation of SBOM generation
* updated dependencies as per grype report
* hack: go mod tidy
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-09-02 16:49:59 +02:00
Nirusu
913711a0fe
CLI reference was updated by edgelesssys/constellation@50bde917
2022-09-02 07:18:38 -07:00
Felix Schuster
f733ba5d6e
Update README ( #46 )
...
* Update README
* Update images
* Add security policy
2022-09-02 16:10:27 +02:00
Nils Hanke
50bde9173f
Remove --instance-type from constellation create in docs
2022-09-02 07:04:11 -07:00
Nils Hanke
c0bfb9b61e
Add 'constellation config instance-types'
2022-09-02 07:04:11 -07:00
Nils Hanke
39eb58b403
E2E: Use default VM machine type when not overriden
2022-09-02 07:04:11 -07:00
Nils Hanke
710ded2a89
E2E: Insert instanceType to config instead of CLI
2022-09-02 07:04:11 -07:00
Nils Hanke
0aefe2c0ba
Move instanceType from CLI to config
2022-09-02 07:04:11 -07:00
katexochen
91d2c8ae73
Remove cilium from makefile
2022-09-02 15:20:25 +02:00
katexochen
5d63150bed
Silence wget output
2022-09-02 15:20:25 +02:00
katexochen
b256222b42
e2e: Use default shell parameters
2022-09-02 15:20:25 +02:00
katexochen
0c5c11e8b7
e2e: Group log lines
2022-09-02 15:20:25 +02:00
katexochen
ef8130a918
e2e: Enable parallel runs on Azure
2022-09-02 15:20:25 +02:00
katexochen
3c123d9fec
e2e: Fix cleanup on error/cancel
2022-09-02 15:20:25 +02:00
katexochen
90b4067523
e2e: Run tests on GitHub instead of local runner
2022-09-02 15:20:25 +02:00
Fabian Kammel
dad698b736
link checker should ignore edgelessys/wiki link ( #51 )
...
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-09-02 12:45:51 +02:00
Thomas Tendyck
e2325534f1
Update release.md
2022-09-02 12:27:29 +02:00
Moritz Eckert
b95f3dbc91
Add docs to repo ( #38 )
2022-09-02 11:52:42 +02:00
Otto Bittner
50d3f3ca7f
GetIdKeyDigest: Cut HCL header from raw report
2022-09-02 11:21:35 +02:00
Leonard Cohnen
cce2575d68
remove broken test: create azure service account
2022-09-01 17:06:01 +02:00
Leonard Cohnen
26f5aec853
add verify load balancer
2022-09-01 16:45:18 +02:00
Leonard Cohnen
00e72db5d8
write master secret after config verification
2022-09-01 16:43:54 +02:00
Fabian Kammel
6440904865
Ref/update cosign key ( #31 )
...
* use new cosign keypair
* use community images for production image heuristic
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
2022-09-01 12:58:31 +02:00
Moritz Eckert
db942ee4b5
Update references to docs ( #36 )
2022-09-01 09:27:25 +02:00
Otto Bittner
276165064e
Ensure no uid values end up in resource delete cmd
2022-08-31 16:38:32 +02:00
3u13r
f649219cbf
Feat/cilium strict mode2.0 ( #25 )
...
* bump cilium helm charts
* integrate cilium strict mode v2
2022-08-31 15:37:07 +02:00
Otto Bittner
4adc19b7f5
AB#2350: Configurably enforce idkeydigest on Azure
...
* Add join-config entry for "enforceIdKeyDigest" bool
* Add join-config entry for "idkeydigest"
* Initially filled with TPM value from bootstrapper
* Add config entries for idkeydigest and enforceIdKeyDigest
* Extend azure attestation validator to check idkeydigest,
if configured.
* Update unittests
* Add logger to NewValidator for all CSPs
* Add csp to Updateable type
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2022-08-31 15:26:04 +02:00
Malte Poll
c84e44913b
Fork node maintenance operator and deploy it on all supported k8s versions
...
Signed-off-by: Malte Poll <mp@edgeless.systems>
2022-08-31 14:53:06 +02:00
katexochen
84b4519ffd
Add cleanup pre e2e test on Azure
2022-08-31 14:10:08 +02:00
katexochen
7c7a4699bc
Azure e2e tests with manual creds
2022-08-31 14:10:08 +02:00
katexochen
7d402f4e79
Update changelog
2022-08-31 14:10:08 +02:00
katexochen
10e5249631
Manual client secrets on azure
2022-08-31 14:10:08 +02:00
