Malte Poll
94758bc392
bootstrapper: allow building without cgo dependencies for linting
2023-05-23 13:44:56 +02:00
Malte Poll
78085cba68
qemu-metadata-api: allow building without cgo dependencies for linting
2023-05-23 13:44:56 +02:00
Malte Poll
15d51c3a3f
bazel: use hermetic go in PATH for golicenses
2023-05-23 13:44:56 +02:00
Malte Poll
4bffeefd70
bazel: use hermetic go in PATH for golangci-lint
2023-05-23 13:44:56 +02:00
renovate[bot]
66ff0b0b78
deps: update registry.k8s.io/provider-aws/cloud-controller-manager Docker tag to v1.27.1 ( #1754 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-05-23 13:30:38 +02:00
3u13r
6062b10035
cli: split image into oss and enterprise ( #1788 )
2023-05-23 10:49:47 +02:00
Adrian Stobbe
cfef384f36
config: support latest as version value for Azure SEVSNP ( #1786 )
...
* support latest as version value
2023-05-23 08:55:49 +01:00
Otto Bittner
b86b52a598
ci: run upgrade check
during e2e-upgrade
2023-05-23 07:44:37 +02:00
Otto Bittner
3b3be85841
cli: fix supportedVersions during upgrade check
...
Previously the service version was always 0.0.0
2023-05-23 07:44:37 +02:00
renovate[bot]
13f1eb23d7
deps: update module github.com/stretchr/testify to v1.8.3 ( #1815 )
...
* deps: update module github.com/stretchr/testify to v1.8.3
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2023-05-22 17:35:28 +02:00
renovate[bot]
6ba461015d
deps: update module github.com/hashicorp/hc-install to v0.5.2 ( #1812 )
...
* deps: update module github.com/hashicorp/hc-install to v0.5.2
* deps: tidy all modules
* chore: tidy + update
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-05-22 16:32:00 +02:00
renovate[bot]
2a721bfa33
deps: update module github.com/mattn/go-isatty to v0.0.19 ( #1813 )
...
* deps: update module github.com/mattn/go-isatty to v0.0.19
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2023-05-22 16:31:52 +02:00
renovate[bot]
971e814551
deps: update module github.com/google/go-tpm-tools to v0.3.12 ( #1811 )
...
* deps: update module github.com/google/go-tpm-tools to v0.3.12
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2023-05-22 15:40:42 +02:00
renovate[bot]
624af80f7f
deps: update module cloud.google.com/go/compute to v1.19.3 ( #1810 )
...
* deps: update module cloud.google.com/go/compute to v1.19.3
* chore: tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-05-22 15:29:48 +02:00
3u13r
6e574fd52c
ci: fix os image archive path ( #1809 )
2023-05-22 14:05:34 +02:00
Moritz Sanft
c69e6777bd
cli: Terraform migrations on upgrade ( #1685 )
...
* add terraform planning
* overwrite terraform files in upgrade workspace
* Revert "overwrite terraform files in upgrade workspace"
This reverts commit 8bdacfb8bef23ef2cdbdb06bad0855b3bbc42df0.
* prepare terraform workspace
* test upgrade integration
* print upgrade abort
* rename plan file
* write output to file
* add show plan test
* add upgrade tf workdir
* fix workspace preparing
* squash to 1 command
* test
* bazel build
* plan test
* register flag manually
* bazel tidy
* fix linter
* remove MAA variable
* fix workdir
* accept tf variables
* variable fetching
* fix resource indices
* accept Terraform targets
* refactor upgrade command
* Terraform migration apply unit test
* pass down image fetcher to test
* use new flags in e2e test
* move file name to constant
* update buildfiles
* fix version constant
* conditionally create MAA
* move interface down
* upgrade dir
* update buildfiles
* fix interface
* fix createMAA check
* fix imports
* update buildfiles
* wip: workspace backup
* copy utils
* backup upgrade workspace
* remove debug print
* replace old state after upgrade
* check if flag exists
* prepare test workspace
* remove prefix
Co-authored-by: Otto Bittner <cobittner@posteo.net>
* respect file permissions
* refactor tf upgrader
* check workspace before upgrades
* remove temp upgrade dir after completion
* clean up workspace after abortion
* fix upgrade apply test
* fix linter
---------
Co-authored-by: Otto Bittner <cobittner@posteo.net>
2023-05-22 13:31:20 +02:00
Moritz Sanft
339e750c18
bazel: add Bazel shell completion scripts ( #1804 )
...
* add bazel autocomplete script
* indentation
* shfmt
* shellcheck ignore completion file
* fix shellcheck ignore path
2023-05-22 12:54:38 +02:00
Malte Poll
dc9b3c1937
ci: run e2e tests as last step of release pipeline ( #1793 )
2023-05-22 09:22:00 +02:00
Malte Poll
ab257944f9
bazel: provide semi-hermetic python toolchain ( #1753 )
...
The actual python version used in bazel is hermetic after this PR.
However, we still require a host python toolchain for bootstrapping (this will be fixed soon upstream) and host wide glibc (+ libcrypt.so.1).
2023-05-22 09:10:41 +02:00
edgelessci
87b9d85669
image: update measurements and image version ( #1798 )
...
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
2023-05-19 18:17:53 +02:00
renovate[bot]
4ee4423389
deps: update github.com/gophercloud/utils digest to 6eab72e ( #1791 )
...
* deps: update github.com/gophercloud/utils digest to 6eab72e
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2023-05-19 15:34:20 +02:00
renovate[bot]
8bd93680f1
deps: update katexochen/ghh to v0.2.1 ( #1805 )
...
* deps: update katexochen/ghh to v0.2.1
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2023-05-19 14:18:16 +02:00
3u13r
964775c4c2
Add autoscaling and cluster upgrade support for AWS ( #1758 )
...
* aws: autoscaling and upgrades
* docs: update scaling and upgrades for AWS
* deps: pin vuln check against release
2023-05-19 13:57:31 +02:00
renovate[bot]
12ccfea543
deps: update module golang.org/x/tools to v0.9.1 ( #1801 )
...
* deps: update module golang.org/x/tools to v0.9.1
* chore: tidy
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-05-19 13:18:54 +02:00
renovate[bot]
4c8568963b
deps: update module golang.org/x/crypto to v0.9.0 ( #1799 )
...
* deps: update module golang.org/x/crypto to v0.9.0
* chore: tidy
* deps: bump pseudo version tool
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-05-19 12:00:25 +02:00
3u13r
3b7bae7535
deps: bump minimum terraform version ( #1797 )
2023-05-18 12:59:10 +02:00
edgelessci
2754d7817d
image: update measurements and image version ( #1795 )
...
Co-authored-by: 3u13r <3u13r@users.noreply.github.com>
2023-05-17 19:39:32 +02:00
Adrian Stobbe
f99e06b63b
cli: new flag to set the attestation type for config generate
( #1769 )
...
* add attestation flag to specify type in config
2023-05-17 16:53:56 +02:00
miampf
e7b7a544f0
docs: add a qemu section ( #1724 )
2023-05-17 13:21:35 +00:00
Moritz Eckert
6252193879
cli: deploy cinder as OpenStack CSI plugin
2023-05-17 15:20:39 +02:00
Moritz Eckert
9607f01510
cli: add cinder csi helm charts
2023-05-17 15:20:39 +02:00
Malte Poll
7b313feaa3
ci: increase mini-e2e waiting timeout for docker daemon to start
2023-05-17 11:37:26 +02:00
Daniel Weiße
ad924181d9
Allow tdx repo in bazel license check
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Daniel Weiße
1d5af5f0f4
Rebase fixes
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Nils Hanke
63d938d9a4
cli: improve error handling for validator
2023-05-17 11:37:26 +02:00
Nils Hanke
e130188ecd
cli: add verify support for TDX
2023-05-17 11:37:26 +02:00
Nils Hanke
e80474ff7f
oid: add missing String() for QEMUTDX
2023-05-17 11:37:26 +02:00
Nils Hanke
c507bd7d95
cli: Generalize PCRs to Measurements in preparation for TDX
2023-05-17 11:37:26 +02:00
Daniel Weiße
7e5e3b9d2e
Add license exception for tdx repo
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Daniel Weiße
c478df36fa
Add TDX bazel files
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Daniel Weiße
bda999d54e
Use TDX device to mark node as initialized ( #1426 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Nils Hanke
9e987778e0
measurements: Add length field for WithAllBytes
2023-05-17 11:37:26 +02:00
Nils Hanke
fe3622d982
cli/attestation: use const for PCR/TDX lengths
2023-05-17 11:37:26 +02:00
Nils Hanke
d58b5f1c06
measurement-reader: unify TPM & TDX sorting
2023-05-17 11:37:26 +02:00
Nils Hanke
253d201ff3
measurement-reader: add support for TDX
2023-05-17 11:37:26 +02:00
Daniel Weiße
dd2da25ebe
attestation: tdx issuer/validator ( #1265 )
...
* Add TDX validator
* Add TDX issuer
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2023-05-17 11:37:26 +02:00
Malte Poll
d104af6e51
image: support intel TDX direct linux boot under TDX OVMF
2023-05-17 11:37:26 +02:00
Malte Poll
79986a2b25
cli: implement qemu direct linux boot
2023-05-17 11:37:26 +02:00
renovate[bot]
daea874b46
deps: update com_github_ash2k_bazel_tools digest to 2add5bb ( #1789 )
...
* deps: update com_github_ash2k_bazel_tools digest to 2add5bb
* deps: set bazel-tools hash
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2023-05-17 09:43:36 +02:00
renovate[bot]
53758e65ad
deps: update module github.com/siderolabs/talos/pkg/machinery to v1.4.4 ( #1764 )
...
* deps: update module github.com/siderolabs/talos/pkg/machinery to v1.4.4
* deps: tidy all modules
* update pseudo version tool
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
2023-05-16 22:19:16 +02:00