Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-09-20 08:15:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,953 Commits 131 Branches 43 Tags 105 MiB
4c5ab7c5e9
Commit Graph

531 Commits

Author SHA1 Message Date
Fabian Kammel
4c5ab7c5e9
ci: refactor image measurement generation (#1152) 
* Merge measurements.image.json and measurements.json into latter.
* Use static (known) measurement values for the ones we cannot precompute.
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-02-09 13:33:17 +01:00
Otto Bittner
c275464634 cli: change upgrade-plan to upgrade-check 
Upgrade check is used to find updates for the current cluster.
Optionally the found upgrades can be persisted to the config
for consumption by the upgrade-execute cmd.
The old `upgrade execute` in this commit does not work with
the new `upgrade plan`.
The current versions are read from the cluster.
Supported versions are read from the cli and the versionsapi.
Adds a new config field MicroserviceVersion that will be used
by `upgrade execute` to update the service versions.
The field is optional until 2.7
A deprecation warning for the upgrade key is printed during
config validation.
Kubernetes versions now specify the patch version to make it
explicit for users if an upgrade changes the k8s version.
 2023-02-08 12:30:01 +01:00
Otto Bittner
f204c24174 cli: add version validation and force flag 
Version validation checks that the configured versions
are not more than one minor version below the CLI's version.
The validation can be disabled using --force.
This is necessary for now during development as the CLI
does not have a prerelease version, as our images do.
 2023-02-08 12:30:01 +01:00
renovate[bot]
a3f8bb30ac
deps: update golang Docker tag to v1.20.0 (#1145) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-02-03 18:08:03 +01:00
Paul Meyer
60254f21f4
ci: fix location of cli docgen output (#1138) 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-02-03 18:00:16 +01:00
Daniel Weiße
f74f589605
ci: add containerized libvirt build workflow (#1130) 
* Add libvirt container build workflow

* Update release workflow

* Update image libvirt base image

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-02-02 14:40:05 +01:00
Fabian Kammel
64c4b1f766
allow workflow to create pr (#1132) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-02-01 16:54:12 +01:00
Malte Poll
b7d3f3972b ci: add bazel tests 2023-01-31 17:55:09 +01:00
renovate[bot]
bec82c2328
deps: update GitHub action dependencies (#1112) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-31 17:38:44 +01:00
Paul Meyer
e5a2e519a3 ci: fix hasher permissions 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-31 17:36:45 +01:00
Paul Meyer
e0354826e0 ci: trigger builds on workflow change 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-31 17:17:03 +01:00
Otto Bittner
176f366c53 ci: fix manual keyservice build workflow 2023-01-31 16:53:46 +01:00
Paul Meyer
4f1a4ecb9e ci: don't use k-bench install script 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-31 15:06:29 +01:00
Paul Meyer
c00004a321 ci: fix oras download in package hasher 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-31 15:06:13 +01:00
Fabian Kammel
c14e551af5
fix permissions (#1119) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-01-31 14:30:36 +01:00
Otto Bittner
24409fe6ee ci: ensure that unittests are run when touching helm charts 
In case the helm charts are changed only yaml files are touched.
Thus the unit test workflow was not triggered.
 2023-01-31 11:36:49 +01:00
Otto Bittner
88e3da750e ci: adjust tags in build_ko 
Currently tags can be empty when building a ko image.
However, --bare may not work in case --tags is empty,
as per ko docs.

Also remove redundant build step in release pipeline.

Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-01-31 10:16:20 +01:00
Fabian Kammel
b21393ddb1
authorize purge branch (#1113) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-01-30 17:55:41 +01:00
leongross
2187aa6cb0
ci: reproducible builds integration (#1108) 
* remove `-ko` suffix from workflows
* integrate into `release.yaml`
* adjust helm charts to use hard coded `ko` binary path
 2023-01-30 16:58:49 +01:00
Fabian Kammel
48c8a66114
Minimal GitHub Action token permissions. (#1104) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-01-30 16:11:27 +01:00
Paul Meyer
d095f08cd4 apko: build base image with pinned packages 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-30 16:05:00 +01:00
Paul Meyer
32a540bff4 ci: tag apko base images 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-30 16:05:00 +01:00
Paul Meyer
8268b6e23f ci: don't build apko base images on release branch 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-30 16:05:00 +01:00
Paul Meyer
88b4bc5857 ci: pin apk packages used in container base image 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-30 16:05:00 +01:00
leongross
bd3ec19aef
update kbench requirements.txt (#1103) 2023-01-30 11:57:48 +01:00
Paul Meyer
617c6f0a8d deps: update sonobuoy version 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-30 10:17:18 +01:00
renovate[bot]
a85ba96ac4
deps: update Terraform azurerm to v3.41.0 (#1097) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-27 16:33:32 +01:00
renovate[bot]
17ff8c43d7
deps: update GitHub action dependencies (#1099) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-27 16:12:26 +01:00
Moritz Sanft
cb894e5df5
ci: fix Constellation recover e2e test (#1081) 
* AB#2859 wait for cp to recover

* AB#2859 remove unnecessary inputs & echo
 2023-01-27 15:53:53 +01:00
Paul Meyer
8364856d55 versions: remove Kubernetes v1.23 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-27 13:32:20 +01:00
Paul Meyer
ccd3a08eca ci: improve readability of GitHub lables 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-26 18:29:38 +01:00
renovate[bot]
6c068674af
deps: update GitHub action dependencies (#1085) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-26 15:22:33 +01:00
renovate[bot]
5eecd1345d
deps: update golang Docker tag to v1.19.5 (#1086) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-26 15:19:23 +01:00
Paul Meyer
4bb1bb7595 ci: fix value substitution in pr messages 
of release workflow

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-26 12:44:05 +01:00
renovate[bot]
c81863d181 deps: update dependency azure-mgmt-resource to v22 2023-01-26 09:09:34 +01:00
Paul Meyer
bb419bdee5 ci: use peter-evans' action to create prs 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-25 18:39:15 +01:00
Malte Poll
ee869eaf9c ci: prepare upgrade-agent for upload in e2e tests 2023-01-25 09:58:56 +01:00
Malte Poll
ce17a0c9ac ci: set debug flag explicitly in os build pipeline 2023-01-25 09:58:56 +01:00
3u13r
f950fded9a
ci: add testdata trigger to unittest (#1063) 2023-01-24 11:39:26 +01:00
Paul Meyer
9a70a81b7c ci: rename os images on GCP to contain stream 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-23 14:15:05 +01:00
Paul Meyer
f5de2b7fc6 ci: move scheduled build into own workflow 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-23 14:15:05 +01:00
Paul Meyer
94c0184e4d ci: add workflow for proto code generation check 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-23 12:20:37 +01:00
Paul Meyer
a8cbfd848f
keyservice: use dash in container name (#1016) 
Co-authored-by: Otto Bittner <cobittner@posteo.net>
 2023-01-20 18:51:06 +01:00
Fabian Kammel
582412d275
Fix GCP CCM build, add v26, and exclude old broken versions until fixed. (#1038) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2023-01-20 15:17:00 +01:00
Paul Meyer
a31d79e9cb ci: curl flags 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-20 14:23:32 +01:00
Paul Meyer
a6d35c6fd1 ci: move apko building into separate script 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-20 09:52:17 +01:00
Paul Meyer
71708a967c ci: run tests on workflow file change 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-19 16:47:47 +01:00
Paul Meyer
acc3f64dee ci: only build apko base images on change 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-19 15:18:26 +01:00
Paul Meyer
5dc080c3b3 ci: only run CodeQL on main 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-01-19 12:16:40 +01:00
Moritz Sanft
ae2db08f3a
ci: add e2e test for constellation recover (#845) 
* AB#2256 Add recover e2e test

* AB#2256 move test & fix minor objections

* AB#2256 fix path

* AB#2256 rename hacky filename
 2023-01-19 10:41:07 +01:00