Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-01-22 13:21:07 -05:00
Code Issues Packages Projects Releases Wiki Activity
4,537 Commits 137 Branches 49 Tags 96 MiB
44e898e187
Commit Graph

1202 Commits

Author SHA1 Message Date
Daniel Weiße
53e937522f
dependencies: bump Go to v1.23.5 (#3599) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2025-01-20 11:53:55 +01:00
renovate[bot]
9a969548e4
deps: update Python dependencies (#3592) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-17 17:08:05 +01:00
renovate[bot]
188e51bba1
deps: update Python dependencies (#3590) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-17 15:05:36 +01:00
renovate[bot]
4cffde5036
deps: update rhysd/actionlint to v1.7.6 (#3584) 
* deps: update rhysd/actionlint to v1.7.6

* deps: tidy all modules

* Update macos-12 runners to macos-latest

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
 2025-01-17 11:53:24 +01:00
renovate[bot]
1459ab96fe
deps: update GitHub action dependencies (#3585) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-17 09:58:24 +01:00
Moritz Sanft
6ba47d5634
ci: allow unrestricted user namespaces in image builds (#3587) 
Since Ubuntu 23.10, creating namespaces, e.g. via `unshare`, requires
privileges. Since `unshare` is used by `mkosi` in our image build
pipeline, we need to re-enable them explicitly here before building the
image, aligning with the behavior before Ubuntu 23.10.
 2025-01-17 09:36:48 +01:00
Moritz Sanft
fcf778e73c
ci: only write STACKIT configuration if STACKIT test runs (#3559) 2024-12-20 10:05:48 +01:00
Moritz Sanft
c467ff603b
ci: enable STACKIT e2e tests (#3556) 2024-12-19 19:18:09 +01:00
renovate[bot]
1b050a636f
deps: update mikepenz/action-junit-report action to v5 (#3550) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-13 08:50:28 +01:00
renovate[bot]
8496b4ce46
deps: update dependency DeterminateSystems/nix-installer to v0.32.2 (#3547) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-13 08:25:52 +01:00
renovate[bot]
2da0ed6da0
deps: update GitHub action dependencies (#3548) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-13 08:12:59 +01:00
renovate[bot]
64b395dba8
deps: update dependency DeterminateSystems/nix-installer to v0.32.1 (#3536) 
* deps: update dependency DeterminateSystems/nix-installer to v0.32.1

* ci: run reproducible builds workflow on changes

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
 2024-12-10 09:26:05 +01:00
renovate[bot]
59b9d54c44
deps: update github/codeql-action action to v3.27.6 (#3535) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-10 08:27:31 +01:00
edgelessci
ab2782a2a2
Post v2.20.0 release updates to main (#3525) 
* docs: release 2.20

* chore: update version.txt to v2.21.0-pre

* chore: update CI for v2.20.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2024-12-04 08:30:14 +01:00
renovate[bot]
b652baa9c2
deps: update Terraform dependencies (#3510) 
* deps: update Terraform dependencies

* Update terraform lock files

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

* Print module path for lockfile to be generated

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
 2024-12-02 12:04:15 +01:00
Daniel Weiße
6bad8b9839
ci: ensure autoscaling test actuallly waits for all Pods to be ready (#3514) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-12-02 11:29:46 +01:00
renovate[bot]
8f3d6c42f2
deps: update GitHub action dependencies (#3507) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-11-28 16:15:26 +01:00
Daniel Weiße
900fb3f88b
ci: automate manual post-release steps (#3498) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-11-27 08:52:54 +01:00
Daniel Weiße
871be80877
ci: update workflows to initialize upgrade tests with v2.19.3 (#3494) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-11-26 08:55:33 +01:00
Daniel Weiße
775ba22ab2
ci: run terraform apply in provider example test with timeout (#3482) 
* Run terraform apply with timeouts
* Ignore lock file when running terraform destroy

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-11-21 08:32:22 +01:00
3u13r
521ff0d14c
Pin crane and npm dependencies (#3477) 
* ci: pin crane dependency

* docs: pin npm dependencies

* deps: bump docusaurus

---------

Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2024-11-20 18:34:25 +01:00
Markus Rudy
173ef26f70
ci: pin nix version to 2.25.2 (#3484) 
* ci: pin nix version to 2.25.2

* bazel: update stale lock file
 2024-11-20 09:09:20 +01:00
Daniel Weiße
e0c95a34bb
ci: update workload identity provider url (#3483) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-11-18 16:36:32 +01:00
Adrian Stobbe
54058eed2a
terraform: fix security rule reconciliation on Azure (#3454) 
* fix security rule reconciliation on azure
* fix simulated patch version upgrade
 2024-11-04 08:59:16 +01:00
Markus Rudy
bff8bce88f
docs: how to reproduce released artifacts (#3451) 
* ci: test reproducability with different dependency installation methods

* nix: mitigate nix store optimisiation

* docs: reproducible builds

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* ci: upgrade ubuntu runners for reproducible builds

---------

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2024-10-29 14:04:59 +01:00
Daniel Weiße
132218ac1e
ci: report failure in scheduled Terraform provider tests on cancel (#3460) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-10-28 10:46:24 +01:00
Moritz Sanft
44b2a758dd
chore: v2.19.0 post-release (#3445) 2024-10-21 09:59:04 +02:00
Moritz Sanft
50df35438e
ci: fix artifact deletion (#3437) 
GitHub seemingly now adds a newline to the output of the gh CLI, so we need to cut it before using it.
 2024-10-17 09:37:59 +02:00
Daniel Weiße
dd73c4ce5f
ci: enable Teams mentions for burgerdev (#3422) 
* Enable Teams mentions for burgerdev
* Add instructions on how to update notify_teams assignees

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-10-16 10:54:53 +02:00
Moritz Sanft
843d9bcb7c
treewide: upgrade to Go 1.23.2 (#3417) 
* treewide: upgrade to Go 1.23.2

* deps: update golangci/golangci-lint to v1.61.0

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2024-10-15 13:52:45 +02:00
Daniel Weiße
6c94b5ae6b
ci: upgrade to ubuntu-24.04 fixups (#3413) 
* Upgrade workflows to ubuntu-24.04
* Install missing tools for ubuntu-24.04

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-10-14 11:10:30 +02:00
renovate[bot]
810f86582d
deps: update Kubernetes versions (#3358) 
* deps: update Kubernetes versions

* e2e: run vale with python venv

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
 2024-10-11 19:23:31 +02:00
renovate[bot]
ac26c80a90
deps: update GitHub action dependencies (#3399) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-09 12:16:10 +02:00
Markus Rudy
b1cf9bc3fe
e2e: upgrade: allow specifying the origin k8s version (#3397) 2024-10-09 11:33:21 +02:00
Moritz Sanft
39e6059607
ci: fix matrix runner spec (#3380) 2024-09-27 16:07:38 +02:00
Moritz Sanft
648e9370b6
treewide: v2.18.0 post-release (#3381) 2024-09-27 09:43:47 +02:00
Daniel Weiße
c0a59a18d5
ci: update e2e mini default region and always return resource group name (#3373) 
* Choose resource group name outside of Terraform to catch issues during apply
* Run test in West Europe

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-09-25 08:37:27 +02:00
Markus Rudy
1ca8d4f977
ci: remove obsolete python dep (#3369) 2024-09-19 14:16:51 +02:00
Daniel Weiße
89eb8ca6ae
ci: check if CLI version supports --subscriptionID flag before using it (#3364) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-09-18 10:04:29 +02:00
renovate[bot]
a295ecaffb
cli: add --subscriptionID flag for iam create azure command (#3328) 
* deps: update Terraform azurerm to v4
* Set Azure subscription ID when applying Terraform files
* Upgrade azurerm to v4.1.0
* Mark subscriptionID flag as not required
* deps: tidy all modules

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2024-09-17 12:30:22 +02:00
Moritz Sanft
fe2fd0a2da
treewide: update Go toolchain to 1.22.7 (#3343) 2024-09-09 12:45:48 +02:00
Daniel Weiße
ffde0ef7b7
ci: give scheduled image builds more time between executions (#3297) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-08-07 13:27:06 +02:00
renovate[bot]
b010015326
deps: update dependency Pillow to v10.3.0 [SECURITY] (#3293) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-07 08:30:52 +02:00
renovate[bot]
5538a7a23d
deps: update GitHub action dependencies (#3288) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-02 15:06:00 +02:00
renovate[bot]
92b9d5ab20
deps: update GitHub action dependencies (#3278) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-08-01 10:34:44 +02:00
Daniel Weiße
9d58f8a494
ci: correctly fetch image on nightly image ref (#3276) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-30 12:58:57 +02:00
Moritz Sanft
2e9dda52b7
ci: mirror GCP SEV-SNP marketplace images (#3274) 2024-07-26 12:43:16 +02:00
Adrian Stobbe
212aa64f10
ci: add conformance test to weekly (#3230) 2024-07-25 17:38:17 +02:00
Daniel Weiße
b781a75af7
ci: run performance e2e tests using nightly image (#3272) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-25 16:25:56 +02:00
Thomas Tendyck
399376d3e3
Make SEV-SNP the default attestation variant on GCP (#3267) 
* Make SNP the default on GCP

* fixup! Make SNP

* fixup! Make SNP
 2024-07-22 13:29:27 +02:00