Commit Graph

1183 Commits

Author SHA1 Message Date
Daniel Weiße
775ba22ab2
ci: run terraform apply in provider example test with timeout (#3482)
* Run terraform apply with timeouts
* Ignore lock file when running terraform destroy

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-11-21 08:32:22 +01:00
3u13r
521ff0d14c
Pin crane and npm dependencies (#3477)
* ci: pin crane dependency

* docs: pin npm dependencies

* deps: bump docusaurus

---------

Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
2024-11-20 18:34:25 +01:00
Markus Rudy
173ef26f70
ci: pin nix version to 2.25.2 (#3484)
* ci: pin nix version to 2.25.2

* bazel: update stale lock file
2024-11-20 09:09:20 +01:00
Daniel Weiße
e0c95a34bb
ci: update workload identity provider url (#3483)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-11-18 16:36:32 +01:00
Adrian Stobbe
54058eed2a
terraform: fix security rule reconciliation on Azure (#3454)
* fix security rule reconciliation on azure
* fix simulated patch version upgrade
2024-11-04 08:59:16 +01:00
Markus Rudy
bff8bce88f
docs: how to reproduce released artifacts (#3451)
* ci: test reproducability with different dependency installation methods

* nix: mitigate nix store optimisiation

* docs: reproducible builds

Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* ci: upgrade ubuntu runners for reproducible builds

---------

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
2024-10-29 14:04:59 +01:00
Daniel Weiße
132218ac1e
ci: report failure in scheduled Terraform provider tests on cancel (#3460)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-10-28 10:46:24 +01:00
Moritz Sanft
44b2a758dd
chore: v2.19.0 post-release (#3445) 2024-10-21 09:59:04 +02:00
Moritz Sanft
50df35438e
ci: fix artifact deletion (#3437)
GitHub seemingly now adds a newline to the output of the gh CLI, so we need to cut it before using it.
2024-10-17 09:37:59 +02:00
Daniel Weiße
dd73c4ce5f
ci: enable Teams mentions for burgerdev (#3422)
* Enable Teams mentions for burgerdev
* Add instructions on how to update notify_teams assignees

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-10-16 10:54:53 +02:00
Moritz Sanft
843d9bcb7c
treewide: upgrade to Go 1.23.2 (#3417)
* treewide: upgrade to Go 1.23.2

* deps: update golangci/golangci-lint to v1.61.0

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-10-15 13:52:45 +02:00
Daniel Weiße
6c94b5ae6b
ci: upgrade to ubuntu-24.04 fixups (#3413)
* Upgrade workflows to ubuntu-24.04
* Install missing tools for ubuntu-24.04

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-10-14 11:10:30 +02:00
renovate[bot]
810f86582d
deps: update Kubernetes versions (#3358)
* deps: update Kubernetes versions

* e2e: run vale with python venv

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
2024-10-11 19:23:31 +02:00
renovate[bot]
ac26c80a90
deps: update GitHub action dependencies (#3399)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-09 12:16:10 +02:00
Markus Rudy
b1cf9bc3fe
e2e: upgrade: allow specifying the origin k8s version (#3397) 2024-10-09 11:33:21 +02:00
Moritz Sanft
39e6059607
ci: fix matrix runner spec (#3380) 2024-09-27 16:07:38 +02:00
Moritz Sanft
648e9370b6
treewide: v2.18.0 post-release (#3381) 2024-09-27 09:43:47 +02:00
Daniel Weiße
c0a59a18d5
ci: update e2e mini default region and always return resource group name (#3373)
* Choose resource group name outside of Terraform to catch issues during apply
* Run test in West Europe

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-09-25 08:37:27 +02:00
Markus Rudy
1ca8d4f977
ci: remove obsolete python dep (#3369) 2024-09-19 14:16:51 +02:00
Daniel Weiße
89eb8ca6ae
ci: check if CLI version supports --subscriptionID flag before using it (#3364)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-09-18 10:04:29 +02:00
renovate[bot]
a295ecaffb
cli: add --subscriptionID flag for iam create azure command (#3328)
* deps: update Terraform azurerm to v4
* Set Azure subscription ID when applying Terraform files
* Upgrade azurerm to v4.1.0
* Mark subscriptionID flag as not required
* deps: tidy all modules

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-09-17 12:30:22 +02:00
Moritz Sanft
fe2fd0a2da
treewide: update Go toolchain to 1.22.7 (#3343) 2024-09-09 12:45:48 +02:00
Daniel Weiße
ffde0ef7b7
ci: give scheduled image builds more time between executions (#3297)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-08-07 13:27:06 +02:00
renovate[bot]
b010015326
deps: update dependency Pillow to v10.3.0 [SECURITY] (#3293)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-07 08:30:52 +02:00
renovate[bot]
5538a7a23d
deps: update GitHub action dependencies (#3288)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-02 15:06:00 +02:00
renovate[bot]
92b9d5ab20
deps: update GitHub action dependencies (#3278)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-01 10:34:44 +02:00
Daniel Weiße
9d58f8a494
ci: correctly fetch image on nightly image ref (#3276)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-30 12:58:57 +02:00
Moritz Sanft
2e9dda52b7
ci: mirror GCP SEV-SNP marketplace images (#3274) 2024-07-26 12:43:16 +02:00
Adrian Stobbe
212aa64f10
ci: add conformance test to weekly (#3230) 2024-07-25 17:38:17 +02:00
Daniel Weiße
b781a75af7
ci: run performance e2e tests using nightly image (#3272)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-25 16:25:56 +02:00
Thomas Tendyck
399376d3e3
Make SEV-SNP the default attestation variant on GCP (#3267)
* Make SNP the default on GCP

* fixup! Make SNP

* fixup! Make SNP
2024-07-22 13:29:27 +02:00
renovate[bot]
78ce220cf9
deps: update GitHub action dependencies (#3259)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-18 08:49:57 +02:00
Daniel Weiße
e08ed38be8
ci: fix relative paths for verify e2e test (#3249)
* Use absolute paths to avoid issues with bazel run changing working directory
* Fix error message in attestationconfig cli

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-12 08:26:36 +02:00
Daniel Weiße
6c24963570
attestationconfigapi: revise upload frequency (#3238)
* Add attestationconfigapi compare command
* Only upload the lowest version for each verify test

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-10 12:59:02 +02:00
Daniel Weiße
391deeae37
ci: reduce max parallel attestationconfig e2e tests back to 1 for stability (#3208)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-10 08:24:32 +02:00
Moritz Sanft
74e0f44230
chore: v2.17.0 post-release (#3229)
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-04 11:17:55 +02:00
Daniel Weiße
e9a4ccd009
ci: run versionsapi through Bazel instead of building a container (#3231)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-04 10:02:59 +02:00
Daniel Weiße
9c3cb08f92
deps: bump Go version to v1.22.5 (#3225)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-03 09:49:37 +02:00
Moritz Sanft
c48995f249
ci: only commit measurements if changes are present (#3223)
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-02 09:12:46 +02:00
Moritz Sanft
7945778d67
ci: fix directory deletion (#3222) 2024-07-01 17:24:44 +02:00
Moritz Sanft
c7027d9ddf
ci: add missing permissions in release workflow (#3220)
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-01 16:23:53 +02:00
renovate[bot]
bdfb74f6ca
deps: update Terraform dependencies (#3200)
* deps: update Terraform dependencies

* upgrade random provider

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Adrian Stobbe <stobbe.adrian@gmail.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-06-27 09:14:10 +02:00
Daniel Weiße
d67d0ac9df Enable upload of TDX reports to Constellation CDN
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-27 09:09:13 +02:00
renovate[bot]
af3f2bcd42
deps: update GitHub action dependencies (#3198)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-24 15:19:00 +02:00
renovate[bot]
d8680367b0
deps: update golang Docker tag to v1.22.4 (#3191)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-22 10:30:26 +02:00
Markus Rudy
6e2af89c01
ci: fix cdbg_deploy error reporting (#3182) 2024-06-20 08:25:30 +02:00
Markus Rudy
c911eb4e3a
versions: default to k8s v1.29, support k8s v1.30, EOL v1.27 (#3173)
* versions: remove k8s 1.27 and patch-upgrade the others

* versions: add support for k8s 1.30.2

* versions: upgrade cloud provider images
2024-06-19 17:34:34 +02:00
Markus Rudy
132d540ac0
ci: fix GCP CCM findvers.sh script (#3178) 2024-06-19 16:26:02 +02:00
renovate[bot]
9cd1184244
deps: update GitHub action dependencies (#3176)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-19 15:19:41 +02:00
Markus Rudy
9a295b2c3a
ci: better fence around tidy-check-generate summary (#3174) 2024-06-19 12:19:41 +02:00