Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity
4,250 Commits 133 Branches 44 Tags 106 MiB
5b950e5969
Commit Graph

1152 Commits

Author SHA1 Message Date
renovate[bot]
78ce220cf9
deps: update GitHub action dependencies (#3259) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-07-18 08:49:57 +02:00
Daniel Weiße
e08ed38be8
ci: fix relative paths for verify e2e test (#3249) 
* Use absolute paths to avoid issues with bazel run changing working directory
* Fix error message in attestationconfig cli

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-12 08:26:36 +02:00
Daniel Weiße
6c24963570
attestationconfigapi: revise upload frequency (#3238) 
* Add attestationconfigapi compare command
* Only upload the lowest version for each verify test

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-10 12:59:02 +02:00
Daniel Weiße
391deeae37
ci: reduce max parallel attestationconfig e2e tests back to 1 for stability (#3208) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-10 08:24:32 +02:00
Moritz Sanft
74e0f44230
chore: v2.17.0 post-release (#3229) 
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2024-07-04 11:17:55 +02:00
Daniel Weiße
e9a4ccd009
ci: run versionsapi through Bazel instead of building a container (#3231) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-04 10:02:59 +02:00
Daniel Weiße
9c3cb08f92
deps: bump Go version to v1.22.5 (#3225) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-07-03 09:49:37 +02:00
Moritz Sanft
c48995f249
ci: only commit measurements if changes are present (#3223) 
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2024-07-02 09:12:46 +02:00
Moritz Sanft
7945778d67
ci: fix directory deletion (#3222) 2024-07-01 17:24:44 +02:00
Moritz Sanft
c7027d9ddf
ci: add missing permissions in release workflow (#3220) 
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2024-07-01 16:23:53 +02:00
renovate[bot]
bdfb74f6ca
deps: update Terraform dependencies (#3200) 
* deps: update Terraform dependencies

* upgrade random provider

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Adrian Stobbe <stobbe.adrian@gmail.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2024-06-27 09:14:10 +02:00
Daniel Weiße
d67d0ac9df Enable upload of TDX reports to Constellation CDN 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-06-27 09:09:13 +02:00
renovate[bot]
af3f2bcd42
deps: update GitHub action dependencies (#3198) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-24 15:19:00 +02:00
renovate[bot]
d8680367b0
deps: update golang Docker tag to v1.22.4 (#3191) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-22 10:30:26 +02:00
Markus Rudy
6e2af89c01
ci: fix cdbg_deploy error reporting (#3182) 2024-06-20 08:25:30 +02:00
Markus Rudy
c911eb4e3a
versions: default to k8s v1.29, support k8s v1.30, EOL v1.27 (#3173) 
* versions: remove k8s 1.27 and patch-upgrade the others

* versions: add support for k8s 1.30.2

* versions: upgrade cloud provider images
 2024-06-19 17:34:34 +02:00
Markus Rudy
132d540ac0
ci: fix GCP CCM findvers.sh script (#3178) 2024-06-19 16:26:02 +02:00
renovate[bot]
9cd1184244
deps: update GitHub action dependencies (#3176) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-19 15:19:41 +02:00
Markus Rudy
9a295b2c3a
ci: better fence around tidy-check-generate summary (#3174) 2024-06-19 12:19:41 +02:00
Markus Rudy
429711bf5d
ci: don't assign 3u13r (#3169) 2024-06-14 13:32:10 +02:00
Markus Rudy
566137e7ab
ci: make cdbg deploy errors easier to spot (#3168) 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
 2024-06-14 13:31:42 +02:00
Moritz Sanft
3efd50a518
ci: bump origin versions of upgrade tests (#3158) 2024-06-10 14:04:00 +02:00
miampf
94cf85c65a
fix: let artifact_upload fail if a bash command errors (#3154) 2024-06-07 13:37:06 +02:00
Daniel Weiße
d64aba7636
ci: author scheduled PRs using edgelessci account (#3145) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-06-05 10:41:19 +02:00
Daniel Weiße
39b01f8dac
deps: bump Go version to v1.22.4 (#3146) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-06-05 10:27:39 +02:00
Daniel Weiße
1514351571
ci: update conditions on when to auto assign reviewer (#3141) 
* Use the correct value for `github.event.pull_request.requested_reviewers`
* Run the workflow on more events than just labeling a PR
* Skip workflow if there are already reviewers assigned

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-06-05 08:42:47 +02:00
renovate[bot]
72555e9ba1
deps: update GitHub action dependencies (#3140) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-04 14:50:20 +02:00
Daniel Weiße
66aa8a8d52
ci: adjust performance benchmark to run on different attestation variants (#3129) 
* Create perf bench artifacts based on attestation variant, not CSP
* Enable perf bench on gcp-sev-snp, azure-tdx and AWS

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-06-04 13:23:07 +02:00
renovate[bot]
3c3b993c36
deps: update golang:1.22.3 Docker digest to f43c6f0 (#3117) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-03 13:14:52 +02:00
miampf
fbdc8f6e85
ci: clean up failed miniconstellation e2e tests (#3109) 2024-05-31 13:51:55 +02:00
Daniel Weiße
3834373fd2
ci: disable perf-bench test for gcp-sev-snp (#3127) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-05-28 16:25:37 +02:00
renovate[bot]
80917921e3
deps: update GitHub action dependencies (#3123) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-24 11:04:23 +02:00
Daniel Weiße
d4ab6a83bc
ci: check for pattern completion instead of file when creating archive (#3120) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-05-24 08:46:22 +02:00
Malte Poll
bd8466a8c8 misc: remove malt3 from issue assignments 2024-05-24 08:31:59 +02:00
Malte Poll
b86faadfcc tidy: document MODULE.bazel.lock maintencance 2024-05-23 09:48:04 +02:00
Daniel Weiße
d0bab9eb08
ci: ignore missing files when creating archive (#3118) 
* Reduce output noise from using 7zip
* Ignore non existent files when creating archive

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2024-05-23 09:24:15 +02:00
renovate[bot]
36a827056f
deps: update softprops/action-gh-release action to v2 (#3103) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 10:54:37 +02:00
renovate[bot]
af64f99bfe
deps: update google-github-actions/auth action to v2.1.3 (#3094) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 09:28:58 +02:00
renovate[bot]
ed54277f78
deps: update actions/download-artifact action to v4 (#3096) 
* deps: update actions/download-artifact action to v4

* Update slsa generator action to v2

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
 2024-05-15 09:26:10 +02:00
renovate[bot]
73d86c25df
deps: update azure/login action to v2 (#3097) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 09:05:50 +02:00
renovate[bot]
d5d5ea857d
deps: update github/codeql-action action to v3 (#3099) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 09:05:38 +02:00
renovate[bot]
62baa9bed2
deps: update cachix/install-nix-action action to v26 (#3098) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 08:59:07 +02:00
renovate[bot]
c866e3d670
deps: update actions/checkout action to v4 (#3095) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-15 08:58:56 +02:00
Markus Rudy
8e3cf5a270
s3proxy: commit image version on release, too (#3093) 2024-05-14 15:45:06 +02:00
Malte Poll
93fcb51e67 ci: explicitly set bazel test timeout to four hours for e2e tests 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
 2024-05-14 13:34:50 +02:00
Markus Rudy
43e6b85026
ci: only assign reviewer to bot PRs (#3091) 2024-05-14 10:02:00 +02:00
renovate[bot]
d76c9ac82d
deps: update GitHub action dependencies (#3086) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-05-13 10:42:07 +02:00
Malte Poll
03475b60b3
ci: disable BuildBuddy (#3077) 2024-05-10 11:14:45 +02:00
Markus Rudy
174c3ab48a
terraform: add missing policies for AWS ALB (#3063) 
* terraform: add missing policies for AWS ALB
 2024-05-10 08:51:32 +02:00
Malte Poll
1c0c7d6227
ci: disable e2e-attestationconfigapi on PRs (#2937) 
This workflow touches shared state by deleting all objects of a bucket and then
uploading a signed blob of data to that S3 bucket under a fixed name.
It also does so multiple times in a row, while invalidating the cloudfront
cache and checking if the uploaded object exists.
All runs of this workflow share the same bucket.
Since this pipeline runs on any modification of go.mod, it is very prone
to race condition between PRs (or PRs and main).
 2024-05-08 14:59:03 +02:00