miampf
90c4bc3465
Transfer constellation workspace through actions
2025-02-20 11:51:29 +01:00
miampf
6031b22fd8
Wrote e2e_emergency_ssh action
2025-02-20 11:51:29 +01:00
miampf
bd3c2595ac
Wrote structure for e2e test
2025-02-20 11:51:28 +01:00
miampf
8d76abc1ac
Added loadbalancer_address output (important for e2e)
2025-02-20 11:51:28 +01:00
miampf
c8472b16da
bazel run //:generate
2025-02-20 11:51:28 +01:00
miampf
eaaa8a5998
Fix some vale errors
2025-02-20 11:51:28 +01:00
miampf
0718f14bc5
adjusted code accordingly
2025-02-20 11:51:28 +01:00
miampf
6f2f5b58f0
wrote ssh config specific info into docs
2025-02-20 11:51:27 +01:00
miampf
0f2d4bd122
fix certificate formatting
2025-02-20 11:51:27 +01:00
miampf
4d80e75a08
Use correct pathing and improve CLI tip
2025-02-20 11:51:27 +01:00
miampf
68d0e50186
update package hashes again
2025-02-20 11:51:27 +01:00
miampf
40744b69f4
Remove AuthorizedKeysFile setting
2025-02-20 11:51:27 +01:00
miampf
efd0f48094
Use CertificateFile instead of IdentityFile
2025-02-20 11:51:27 +01:00
miampf
97dedf751b
fix mirror from rebase
2025-02-20 11:51:26 +01:00
miampf
0092279e42
tidy check generate
2025-02-20 11:51:26 +01:00
miampf
639b713cfe
wrote docs for emergency ssh access workflow
2025-02-20 11:51:26 +01:00
miampf
2511f4a418
use /run/ssh subdir + harden openssh config a bit
2025-02-20 11:51:26 +01:00
miampf
28d17147b1
ProxyJump for hosts outside of 10.* range
...
removed unnecessary values for proxy host
2025-02-20 11:51:26 +01:00
miampf
6eb3ed4c53
adjust emergency_ssh variable description
2025-02-20 11:51:25 +01:00
miampf
323bac7a3e
add emergency_ssh var to other providers (untested)
2025-02-20 11:51:25 +01:00
miampf
53b750a699
nix fmt
2025-02-20 11:51:25 +01:00
miampf
78d58cab57
ssh node image configuration
2025-02-20 11:51:25 +01:00
miampf
e4fbbcbb92
change known_hosts file to writable location
2025-02-20 11:51:25 +01:00
miampf
2a5790f895
terraform ssh setup
2025-02-20 11:51:24 +01:00
miampf
188febd550
sshd and create-host-ssh-key service on node
2025-02-20 11:51:24 +01:00
miampf
60d703bee6
tf ssh access with custom lb
...
changed later to use existing load balancer instead of a custom setup
2025-02-20 11:51:24 +01:00
miampf
340730db66
sshd config and creation of create-host-ssh-key service
2025-02-20 11:51:24 +01:00
miampf
a5124daded
add openssh-server and openssh package
...
`openssh` package later removed since it is not needed for this feature
to function
2025-02-20 11:51:24 +01:00
3u13r
99a81cd246
versionsapi: canonicalize ref in version constructors ( #3652 )
...
* versionsapi: canonicalize ref in version constructors
Co-authored-by: 3u13r <lc@edgeless.systems>
Signed-off-by: Paul Meyer <katexochen0@gmail.com>
* hack/cli-k8s-compat: canonicalize ref
---------
Signed-off-by: Paul Meyer <katexochen0@gmail.com>
Co-authored-by: Paul Meyer <katexochen0@gmail.com>
2025-02-19 11:41:10 +01:00
edgelessci
f8a95de174
image: update measurements and image version ( #3655 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-19 08:28:08 +01:00
Markus Rudy
758191ad42
operator: bump controller-gen version ( #3653 )
...
* operator: bump controller-gen version
This bump the controller gen version and also adjusts the generate commands (back to the original ones). This allows correct generation of CRDs and go code.
---------
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2025-02-18 11:06:56 +01:00
Moritz Sanft
28ae7de4ea
ci: supply STACKIT credentials to cleanup job ( #3651 )
2025-02-17 15:27:51 +01:00
edgelessci
d208251df1
image: update locked rpms ( #3650 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-17 08:28:12 +01:00
renovate[bot]
0abd06053c
deps: update module k8s.io/kubernetes to v1.32.2 [SECURITY] ( #3648 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-14 09:16:50 +01:00
edgelessci
b204b3c59b
image: update measurements and image version ( #3649 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-14 08:35:50 +01:00
edgelessci
df2383ab09
chore: update CI for v2.20.1 ( #3647 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-13 20:04:58 +01:00
renovate[bot]
28e92b9732
deps: update dependency rules_cc to v0.1.1 ( #3643 )
...
* deps: update dependency rules_cc to v0.1.1
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-13 10:23:24 +01:00
Thomas Tendyck
1551f8884e
attestation: update go-azguestattestation to fix MAA PCR11 bug
2025-02-12 10:42:50 +01:00
edgelessci
c39ecc8a82
image: update measurements and image version ( #3645 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-12 09:42:02 +01:00
edgelessci
571c81cfd5
image: update measurements and image version ( #3641 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-07 13:38:12 +01:00
Daniel Weiße
4d79ce2773
deps: bump Go to v1.23.6 ( #3642 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-02-07 10:15:14 +01:00
renovate[bot]
cb77e7bb0d
deps: update dependency asciinema-player to v3.9.0 ( #3635 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-06 12:40:38 +01:00
renovate[bot]
3fa29a5ee8
deps: update Go dependencies ( #3631 )
...
* deps: update Go dependencies
* deps: fix dependency for go-control-plane/envoy
* Accept AGPL-3.0 for edgelesssys/go-tdx-qpl
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2025-02-06 11:07:06 +01:00
renovate[bot]
f81c357f51
deps: update Constellation containers ( #3638 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-06 08:03:14 +01:00
edgelessci
6d42d9b40e
image: update measurements and image version ( #3636 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-05 08:29:26 +01:00
renovate[bot]
f41c7619e1
deps: update ubuntu:24.04 Docker digest to 7229784 ( #3634 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-04 10:02:41 +01:00
renovate[bot]
f1e30863c1
deps: update GitHub action dependencies ( #3633 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-04 08:27:37 +01:00
Moritz Sanft
245700ee54
helm: grant configmap watch permission to constellation-operator-controller-manager ( #3632 )
2025-02-03 20:31:37 +01:00
edgelessci
76b642baf9
image: update locked rpms ( #3630 )
2025-02-02 10:02:35 +01:00
edgelessci
ad364f2089
image: update measurements and image version ( #3628 )
...
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-01-31 08:31:34 +01:00
