Moritz Sanft
53d8a2d67e
bazel: fix MacOS builds ( #1680 )
...
* allow arm64 arch
* switch to shasum command
2023-04-26 08:54:20 +02:00
Malte Poll
84dd25600f
image: upgrade mkosi to support repart ( #1684 )
2023-04-25 18:22:40 +02:00
Malte Poll
ded8abeacc
ci: limit prefix length of AWS IAM resources ( #1674 )
2023-04-25 13:29:07 +02:00
Otto Bittner
c962e1745f
ci: add missing permissions for e2e-upgrade job ( #1679 )
...
Missed a spot..
2023-04-24 13:49:02 +02:00
Otto Bittner
e6d5c2f116
ci: remove obsolete env variables
...
these variables influence the azure cli auth behavior.
we now use OIDC as login mechanism.
2023-04-24 12:38:08 +02:00
Otto Bittner
840eb401c6
ci: add missing permissions to workflows
...
+ packages: write
+ checks: write
2023-04-24 12:38:08 +02:00
Malte Poll
dc5e6f30a9
ci: login to container registry before pushing containers ( #1676 )
2023-04-21 11:05:08 +02:00
Daniel Weiße
1ebc553365
kubernetes: update CSI driver versions to v1.2.0 ( #1657 )
...
* Update CSI charts
* Update CSI tests
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-04-21 11:03:35 +02:00
Moritz Sanft
478b6ddb72
add terraform debug docs ( #1627 )
2023-04-21 08:43:27 +02:00
Moritz Sanft
3031d395a9
cli: force-delete Azure resource group ( #1667 )
...
* force-delete Azure resource group
* were not -> weren't
* fix typo
2023-04-19 08:30:11 +02:00
Malte Poll
5145f806ea
bazel: remove apko and Dockerfile where Bazel is used to build container images
2023-04-18 15:35:15 +02:00
Malte Poll
19ff132ee8
ci: upload container images when running e2e tests
2023-04-18 15:35:15 +02:00
Malte Poll
086c17fa23
deps: update bazeldnf and rules_oci
2023-04-18 15:35:15 +02:00
Malte Poll
daf18052f9
bazel: rules to handle container images
2023-04-18 15:35:15 +02:00
Malte Poll
9dfad32e33
cli: use Bazel container images
2023-04-18 15:35:15 +02:00
Malte Poll
bd889bd6a7
bazel: convert all container images to Bazel
2023-04-18 15:35:15 +02:00
Malte Poll
1f81763a27
cli: convert libvirt container image to Bazel
2023-04-18 15:35:15 +02:00
Malte Poll
498e8241ff
bazel: only use crane for push / pull
2023-04-18 15:35:15 +02:00
Malte Poll
6616b91b7f
upgrade rpms
2023-04-18 15:35:15 +02:00
Malte Poll
9d25372e10
hack: add oci-pin tool
...
This tool can generate Go source files and lockfiles for container images.
2023-04-18 15:35:15 +02:00
Paul Meyer
4b9bce9bb7
ci: fix notification trigger ( #1673 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-18 14:50:36 +02:00
3u13r
bf0d169cf6
operator: isolate integration tests ( #1651 )
2023-04-18 14:20:41 +02:00
Paul Meyer
e335421dd2
ci: trigger notify only in scheduled workflows ( #1671 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 17:30:56 +02:00
3u13r
3cb6ab04f1
ci: don't set IAM env for Azure ( #1670 )
2023-04-17 16:47:12 +02:00
Paul Meyer
c1d3b38a5f
ci: replace release[bot] with edgelessci
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:08:42 +02:00
Paul Meyer
7a1af4937c
ci: remove outdated iam code
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:08:42 +02:00
Paul Meyer
b80d1576f3
ci: use include list to define e2e matrix
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:08:42 +02:00
Paul Meyer
4020e7840a
ci: always use tee -a instead of redirecting
...
into GITHUB_OUTPUT
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:08:42 +02:00
Paul Meyer
3ef7a60c21
bazel: reduce size of uploaded build event stream
...
by eliminating duplicate file references
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:06:21 +02:00
Paul Meyer
7fefa671ef
bazel: add container builder script
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:06:21 +02:00
Paul Meyer
caedb1c081
bazel: add builder container
...
Co-authored-by: Malte Poll <mp@edgeless.systems>
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-17 12:06:21 +02:00
Malte Poll
c3c068b65e
bazel: allow running devbuild in containers with other filesystem layout
2023-04-17 12:06:21 +02:00
3u13r
14d26e1af4
terraform: use nat gateway on azure ( #1655 )
...
* terraform: use nat gateway on azure
* docs: add new azure permission
2023-04-17 11:00:35 +02:00
Paul Meyer
0b3190ea8b
ci: fix naming issues ( #1662 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-15 19:24:48 +02:00
Paul Meyer
860d72a083
ci: reduce number of steps with continue-on-error ( #1593 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 18:50:58 +02:00
Paul Meyer
632b24e7cd
ci: fix version publishing on release ( #1658 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 18:04:03 +02:00
Moritz Sanft
1d0ee796e8
cli: add Terraform log support ( #1620 )
...
* add Terraform logging
* add TF logging to CLI
* fix path
* only create file if logging is enabled
* update bazel files
* register persistent flags manually
* clidocgen
* move logging code to separate file
* reword yes flag parsing error
* update bazel buildfile
* factor out log level setting
2023-04-14 14:15:07 +02:00
renovate[bot]
ca1400819d
deps: update github.com/edgelesssys/constellation/v2/3rdparty/node-maintenance-operator digest to d2967ff
( #1485 )
...
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:21:58 +02:00
Paul Meyer
1cc0ab2614
ci: improve e2e failure reporting and checklist ( #1656 )
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:14:25 +02:00
Paul Meyer
76979136de
ci: refactor artifact and resource naming
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:12:39 +02:00
Paul Meyer
1f82b4d266
ci: reduce continue-on-error usage in e2e upgrade
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:12:39 +02:00
Paul Meyer
d24ebd660e
ci: fix order in e2e upgrade
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:12:39 +02:00
Paul Meyer
677ed052a4
ci: use iam created Azure resource group in e2e upgrade
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-04-14 13:12:39 +02:00
Otto Bittner
d2967fff6b
cli: fix misleading error while applying kubernetes-only upgrade ( #1630 )
...
* The check would previously fail if e.g. `apply` did not upgrade the
image, but a new image was specified in the config. This could
happen if the specified image was too new, but a valid Kuberentes
upgrade was specified.
* ci: fix variable expansion in e2e-upgrade call
* e2e: do not verify measurement signature
2023-04-13 15:58:37 +02:00
Malte Poll
ea86520f0b
bazel: update pseudo-version tool hashes ( #1645 )
2023-04-13 12:11:51 +02:00
Malte Poll
eb11e9ac8a
bazel: download pseudo-version tool instead of "go build" ( #1629 )
...
Required for bootstrapping bazel stamping since we cannot use "bazel build" during the workspace_status command.
Adds a small script that builds the pseudo-version tool in bazel (without stamping) and uploads it to the mirror.
On the first bazel build with stamping, the pseudo-version tool is downloaded.
2023-04-12 17:41:13 +02:00
renovate[bot]
1ae39703d1
deps: update module golang.org/x/tools to v0.8.0 ( #1642 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-04-12 17:31:48 +02:00
renovate[bot]
326460c037
deps: update module golang.org/x/mod to v0.10.0 ( #1640 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-04-12 16:48:50 +02:00
renovate[bot]
44dc127036
deps: update module github.com/spf13/cobra to v1.7.0 ( #1638 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-04-12 16:46:16 +02:00
renovate[bot]
fdaef3da0c
deps: update mvdan/gofumpt to v0.5.0 ( #1643 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-04-12 16:12:57 +02:00