3u13r
8c321ec1ab
cli: add role to aws instance name ( #2130 )
2023-08-14 13:42:20 +02:00
Adrian Stobbe
1af13878a0
fix configmap backup during upgrade ( #2219 )
2023-08-14 09:16:46 +02:00
Adrian Stobbe
4788467bca
cli: upgrade uses same helm releases as init ( #2177 )
2023-08-11 15:18:59 +02:00
Daniel Weiße
0e73e625d1
cli: don't refer to a message below, as it was printed above ( #2216 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-11 14:35:25 +02:00
Daniel Weiße
dcd1c8bd1e
Fix CSI chart version not being compared to CLI version
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-11 12:20:21 +02:00
Daniel Weiße
589ac8c400
cli: correctly print absolute path for kubeconfig ( #2207 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-11 10:40:27 +02:00
Daniel Weiße
e30179a8aa
Remove manual state migration steps for AWS
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-10 15:46:59 +02:00
Malte Poll
9aa14f58eb
bazel: remove stale build rules ( #2202 )
2023-08-10 11:16:06 +02:00
Daniel Weiße
89b342900f
Move workspace path functions to sub-package of cmd
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-09 15:42:24 +02:00
Daniel Weiße
99c579b45a
Add package design goals to CLI package documentation
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-09 15:42:24 +02:00
Daniel Weiße
21c80e7bf3
Remove iamid package
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-09 15:42:24 +02:00
Daniel Weiße
23394ea2e2
cli: fix missing safety check in ShowIAM ( #2165 )
...
* Add missing safety check to ShowIAM
* someErr->assert.AnError
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-09 15:25:59 +02:00
Daniel Weiße
c9cae643e2
internal: fix unmarshalling attestation version numbers from JSON ( #2187 )
...
* Fix unmarshalling attestation version numbers from JSON
* Add unit test for UnmarshalJSON
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-09 15:11:14 +02:00
Adrian Stobbe
656cdbb4bb
remove unused CloudServiceAccountUri from init request ( #2182 )
2023-08-09 14:16:45 +02:00
Adrian Stobbe
70861ee8ad
cli: declare mastersecret as immutable and print attestationCfg diff in warning ( #2167 )
2023-08-08 13:03:23 +02:00
Paul Meyer
e97b2afc14
cli: print maa token in verify
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-08-08 11:50:26 +02:00
Daniel Weiße
8dbe79500f
cli: fix incorrect usage of masterSecret salt for clusterID generation ( #2169 )
...
* Fix incorrect use of masterSecret salt for clusterID generation
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-08-07 15:24:46 +02:00
Malte Poll
15bb9588d7
cli: update config migration to migrate v3 -> v4 ( #2166 )
2023-08-04 15:57:36 +02:00
Daniel Weiße
d1ace13713
cli: add --workspace
flag to set base directory for Constellation workspace ( #2148 )
...
* Remove `--config` and `--master-secret` falgs
* Add `--workspace` flag
* In CLI, only work on files with paths created from `cli/internal/cmd`
* Properly print values for GCP on IAM create when not directly updating the config
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-04 13:53:51 +02:00
renovate[bot]
ec33530c38
deps: update gcr.io/kubebuilder/kube-rbac-proxy Docker tag to v0.14.1 ( #2063 )
...
* deps: update gcr.io/kubebuilder/kube-rbac-proxy Docker tag to v0.14.1
* deps: use gcr.io/kubebuilder/kube-rbac-proxy:v0.14.1
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-08-04 13:49:38 +02:00
Malte Poll
7bfcb0bd5d
cli: remove old config migration from v2 to v3
2023-08-04 12:36:45 +02:00
Malte Poll
56089a4c70
cli: update init_test to use nodeGroups
2023-08-04 12:36:45 +02:00
Malte Poll
7dfac1f758
cli: use nodeGroups when setting default disk size for QEMU
2023-08-04 12:36:45 +02:00
Malte Poll
0c20ccb477
terraform: create nodeGroups in tfvars from nodeGroups in config
2023-08-04 12:36:45 +02:00
Malte Poll
d0ec7a3e54
terraform: move OpenStack flavorID into nodeGroups
2023-08-04 12:36:45 +02:00
Malte Poll
3047cb2798
create: deprecate --control-plane-nodes and --worker-nodes flags
...
Also print and configure node groups
2023-08-04 12:36:45 +02:00
Malte Poll
c0177c565f
config: update tests
2023-08-04 12:36:45 +02:00
Malte Poll
15bb3b31fd
config: add nodeGroups
2023-08-04 12:36:45 +02:00
Daniel Weiße
374f8c7dae
cli: fix missing init parameters in mini up ( #2159 )
...
* Fix missing init parameters in mini up
* Remove redundant passing of file.Handler in init functions
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-08-04 10:42:09 +02:00
Moritz Sanft
af05e17f49
ci: keep embedded measurements if stable image is used ( #2109 )
...
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-08-04 09:43:32 +02:00
3u13r
720c48ea45
cli: refactor terraform output parsing ( #2158 )
2023-08-03 16:17:23 +02:00
Adrian Stobbe
70ce195a5f
cli: unify chart value setup ( #2153 )
2023-08-03 13:54:48 +02:00
3u13r
5119d843f1
terraform: fix uami parsing ( #2155 )
2023-08-03 13:22:26 +02:00
Adrian Stobbe
13eea1ca31
cli: install cilium in cli instead of bootstrapper ( #2146 )
...
* add wait and restartDS
* cilium working (tested on azure + gcp)
* clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* fixup! clean helm code from bootstrapper
* add patchnode for gcp
* fix gcp
* patch node inside bootstrapper
* apply renaming of client
* fixup! apply renaming of client
* otto feedback
2023-08-02 15:49:40 +02:00
renovate[bot]
7e3123232e
deps: update Terraform azurerm to v3.67.0 ( #2147 )
...
Also update Azure terraform:
ignore snp policy changes on resource
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-08-02 08:15:22 +02:00
Otto Bittner
dac690656e
api: add functions to transparently handle signatures upon API interaction ( #2142 )
2023-08-01 16:48:13 +02:00
Adrian Stobbe
26480016a9
azure: fix ccm config with correct uami client_id ( #2144 )
...
* fix azure ccm config with correct uami client_id
* fix tests
2023-08-01 08:40:44 +02:00
Adrian Stobbe
26305e8f80
cli: install helm charts in cli instead of bootstrapper ( #2136 )
...
* init
* fixup! init
* gcp working?
* fixup! fixup! init
* azure cfg for microService installation
* fixup! azure cfg for microService installation
* fixup! azure cfg for microService installation
* cleanup bootstrapper code
* cleanup helminstall code
* fixup! cleanup helminstall code
* Update internal/deploy/helm/install.go
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
* daniel feedback
* TODO add provider (also to CreateCluster) so we can ensure that provider specific output
* fixup! daniel feedback
* use debugLog in helm installer
* placeholderHelmInstaller
* rename to stub
---------
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
2023-07-31 10:53:05 +02:00
Paul Meyer
372aa0fc08
verify: print formatted SNP report
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-07-31 08:18:50 +02:00
Paul Meyer
c8b1765e1d
verify: use helper function for format writing
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-07-31 08:18:50 +02:00
Paul Meyer
8e7f4cd046
verify: print VCEK extension values
...
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
2023-07-31 08:18:50 +02:00
Daniel Weiße
9bc8217fcd
cli: output CSI driver versions on status
( #2128 )
...
* Output CSI driver versions
* Improve status output
* Correctly update CSI version on upgrades
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-07-27 16:14:36 +02:00
Daniel Weiße
28e29ffe61
cli: don't backup CRs that cannot be found ( #2133 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-07-27 10:28:56 +02:00
Adrian Stobbe
a3184af7a2
cli: add iam upgrade apply
( #2132 )
...
* add new iam upgrade apply
* remove iam tf plan from upgrade apply check
* add iam migration warning to upgrade apply
* update release process
* document migration
* Apply suggestions from code review
Co-authored-by: Otto Bittner <cobittner@posteo.net>
* add iam upgrade
* remove upgrade dir check in test
* ask only without --yes
* make iam upgrade provider specific
* test without seperate logins
* remove csi and only add conditionally
* Revert "test without seperate logins"
This reverts commit 05a12e59c9
.
* fix msising cred
* support iam migration for all csps
* add iam upgrade label
---------
Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-07-26 17:29:03 +02:00
Otto Bittner
7db058f946
cli: wait for public ip update before reading fqdn ( #2135 )
2023-07-26 15:23:37 +02:00
Adrian Stobbe
7776a890d4
remove csi and only add conditionally ( #2138 )
2023-07-26 12:45:47 +02:00
Otto Bittner
1d5a8283e0
cli: use Semver type to represent microservice versions ( #2125 )
...
Previously we used strings to pass microservice versions. This invited
bugs due to missing input validation.
2023-07-25 14:20:25 +02:00
Adrian Stobbe
04dc6256e6
cli: only install aws-lb and csi charts conditionally ( #2131 )
...
* init
* upgrade csi chart conditionally
2023-07-25 10:54:47 +02:00
Adrian Stobbe
39cea48741
aws: fix get version error ( #2127 )
...
* init
* only add awsLB to versions if installed
2023-07-24 14:25:11 +02:00
Adrian Stobbe
92abb890ef
upgrade: retry when node image update fails due to conflict error ( #2123 )
...
* retry when node image update fails due to conflict error
* improve test
2023-07-24 12:15:11 +02:00