Nils Hanke
c51dec6d00
Use distroless images for JoinService & KMS
2022-09-09 18:11:33 +02:00
Nils Hanke
0949393dbb
Update build environment to Fedora 36 & Go 1.19.1
2022-09-09 18:11:33 +02:00
Malte Poll
b8b169c93d
Bump node-operator ( #114 )
2022-09-09 17:33:55 +02:00
Leonard Cohnen
7163c161b6
Deploy Konnectivity
2022-09-09 17:26:02 +02:00
Moritz Eckert
15592e8f3f
Ref/docs 2.0 ( #112 )
2022-09-09 17:01:57 +02:00
Nils Hanke
2529323910
Remove clone3 workaround
2022-09-09 15:34:28 +02:00
Nils Hanke
5684b9f607
Add updating CMakeLists.txt to release docs
2022-09-09 15:33:16 +02:00
Nils Hanke
9bedaf20ea
Use CMake project version across all places & remove obsolete build tags
2022-09-09 15:33:16 +02:00
Malte Poll
aa75a065d7
e2e test: wait for specified amount of nodes to join the cluster and become ready ( #87 )
...
Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>
2022-09-09 13:28:53 +02:00
Nils Hanke
56accc7766
CI: Simplify "Generate reference docs" step
2022-09-09 11:24:59 +02:00
Nils Hanke
9a560847f7
CI: Remove obsolete checkout for old docs repo
2022-09-09 11:24:59 +02:00
Nils Hanke
9c8ba7b153
CI: Trigger CLI action on cli/cmd & cli/internal/cmd changes
2022-09-09 11:24:59 +02:00
Nirusu
e0bfdec7ff
CLI reference was updated by edgelesssys/constellation@491249fe
2022-09-09 10:31:08 +02:00
Nils Hanke
491249fea6
Sync Azure/GCP tab choice
2022-09-09 10:12:27 +02:00
Moritz Eckert
653b01499d
Pin docs actions to sha ( #105 )
2022-09-09 09:51:42 +02:00
Moritz Eckert
cdc9eb5c36
Add docs to release process ( #104 )
2022-09-09 08:04:34 +02:00
Moritz Eckert
98ee807247
Change doc fonts to Roboto ( #101 )
2022-09-08 17:55:32 +02:00
Thomas Tendyck
a85777fd02
enforce pcr4
2022-09-08 17:34:12 +02:00
Otto Bittner
ef26917c5e
AB#2369: Use contributing.md as ToC for dev docs.
...
* Structure content into typical sections and
split into separate files.
* Also document how to locally create measurements
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-08 16:08:42 +02:00
Nils Hanke
1c63b65af2
Document instanceType in first-steps.md ( #59 )
...
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
2022-09-08 15:39:53 +02:00
Daniel Weiße
21397bf98b
Update docs to new recover workflow ( #100 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 14:47:48 +02:00
Daniel Weiße
8cb155d5c5
AB#2260 Refactor disk-mapper recovery ( #82 )
...
* Refactor disk-mapper recovery
* Adapt constellation recover command to use new disk-mapper recovery API
* Fix Cilium connectivity on rebooting nodes (#89 )
* Lower CoreDNS reschedule timeout to 10 seconds (#93 )
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 14:45:27 +02:00
Malte Poll
a7b20b2a11
Explain replication lag on Azure AD ( #99 )
2022-09-08 14:11:10 +02:00
Nils Hanke
8d7bb9905c
Add CLI create & verify changes to CHANGELOG.md
2022-09-08 13:38:24 +02:00
Nils Hanke
cf107f5925
Update asciicinema SVG (now with 3x speed)
2022-09-08 13:38:24 +02:00
Nils Hanke
3e579315fe
Update Conformance docs for cluster creation with latest CLI
2022-09-08 13:38:24 +02:00
Nils Hanke
c9c954c675
Remove service provider in CLI commands in docs
2022-09-08 13:38:24 +02:00
Nils Hanke
46c461c23e
E2E: Don't use cloudProvider in constellation create
2022-09-08 13:38:24 +02:00
Nils Hanke
ce0edc8c80
Purge provider argument from constellation create and verify
2022-09-08 13:38:24 +02:00
Nils Hanke
7aded65ea8
Add validation for zero or more than one provider
2022-09-08 13:38:24 +02:00
Moritz Eckert
fb5faa681c
Add provider to license check ( #88 )
2022-09-08 11:02:04 +02:00
Malte Poll
765c097beb
AB#2399 Add GCP service account script ( #95 )
2022-09-08 09:53:16 +02:00
Daniel Weiße
03148c6706
Add Service Account User as required GCP permission ( #91 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 09:08:29 +02:00
Felix Schuster
0286a83dfa
Re-write Intro/Welcome ( #97 )
...
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
2022-09-08 08:43:40 +02:00
Thomas Tendyck
e3c5a5ab78
docs: remove discarded verify feature
2022-09-07 18:16:07 +02:00
Felix Schuster
6aec009aaf
Re-word ( #92 )
2022-09-07 18:08:13 +02:00
Moritz Eckert
23b9319809
Add search functionality to the docs ( #90 )
2022-09-07 17:57:45 +02:00
Fabian Kammel
e3ede64ae6
Document trusted launch on Azure ( #48 )
...
* Document trusted launch usage for Azure
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
* there is no valid link because there is no valid release yet
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
* fix link
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
* fix linter issues
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
* improve
* importAzure.sh: print final image ID
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
2022-09-07 15:05:24 +02:00
Otto Bittner
611ec25f22
AB#2380: Add unittest for validateAk
...
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-07 13:59:09 +02:00
Nils Hanke
9e20ea15ce
Add firewall / debugCluster changes to README.md
2022-09-07 13:27:15 +02:00
Nils Hanke
86a1153cff
cdbg: Warn user when debugCluster is false
2022-09-07 13:27:15 +02:00
Nils Hanke
30725bb0c6
Warn when a debug cluster is created
2022-09-07 13:27:15 +02:00
Nils Hanke
fe70231f2a
Rename IsImageDebug -> IsDebugImage for consistency
2022-09-07 13:27:15 +02:00
Nils Hanke
dd4ccdd390
E2E / debugd: Replace remains of ingressFirewall with debugCluster flag
2022-09-07 13:27:15 +02:00
Nils Hanke
72d4456b3f
GCP: Only create debugd loadbalancer when debugCluster is set
2022-09-07 13:27:15 +02:00
Nils Hanke
d74c7a3769
Azure: Only create debugd loadbalancer when debugCluster is set
2022-09-07 13:27:15 +02:00
Nils Hanke
1a4b4f564a
Remove firewall configuration and make it static with a debug flag
2022-09-07 13:27:15 +02:00
Otto Bittner
23bf4aa665
AB#2379: Validate version in SNP report ( #80 )
...
* AB#2379: Validate version in SNP report
* Check that TCB version in VCEK matches COMMITTED_TCB
* Check that LAUNCH, CURRENT and REPORTED TCB are at least
at the same security level as we are currently.
* Rename variables in snpReport struct
* Use default values in validator_test.go
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-07 10:39:38 +02:00
Thomas Tendyck
9d264604c0
cli: remove GCP ADC project name check
2022-09-07 10:29:41 +02:00
Felix Schuster
35cded6261
Update "Product features" and re-arrange "Confidential Kubernetes" ( #81 )
...
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
2022-09-07 09:41:35 +02:00