Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-09-20 08:15:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,343 Commits 131 Branches 43 Tags 105 MiB
a1c84cb080
Commit Graph

3343 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Weiße
ef4d789dc8
ci: fix notify trigger in e2e upgrade workflow (#2221) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-14 11:45:04 +02:00
Adrian Stobbe
1af13878a0
fix configmap backup during upgrade (#2219) 2023-08-14 09:16:46 +02:00
Adrian Stobbe
c7bbf90989
ci: add e2e-mini to daily test (#2217) 2023-08-14 08:13:29 +02:00
renovate[bot]
d82dd6693c
deps: update ubuntu:20.04 Docker digest to 33a5cc2 (#2214) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-11 15:32:39 +02:00
Adrian Stobbe
4788467bca
cli: upgrade uses same helm releases as init (#2177) 2023-08-11 15:18:59 +02:00
Daniel Weiße
2049713620
internal: move watcher package from internal to joinservice (#2212) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 15:17:55 +02:00
Daniel Weiße
0e73e625d1
cli: don't refer to a message below, as it was printed above (#2216) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 14:35:25 +02:00
renovate[bot]
1850829cd2
deps: update K8s constrained AWS versions (#2199) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-11 14:11:57 +02:00
Paul Meyer
de9e841853 e2e: use Kubernetes 1.26 in daily test 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-11 14:06:35 +02:00
renovate[bot]
d4e8d25636
deps: update golang:1.20.7 Docker digest to 37c7d85 (#2213) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-11 13:44:55 +02:00
Daniel Weiße
715cc1f9de Fix version ordering in semver error messages 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 12:20:21 +02:00
Daniel Weiße
dcd1c8bd1e Fix CSI chart version not being compared to CLI version 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 12:20:21 +02:00
3u13r
4acfcaf723
cloud: use instanceid as name in aws (#2210) 2023-08-11 12:09:29 +02:00
edgelessci
aa787a3ea6
image: update measurements and image version (#2206) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-08-11 11:19:57 +02:00
Daniel Weiße
589ac8c400
cli: correctly print absolute path for kubeconfig (#2207) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 10:40:27 +02:00
Daniel Weiße
066fff951f
ci: correctly default to false for upgrade e2e notifications (#2208) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-11 09:05:44 +02:00
renovate[bot]
c58770b8f8
deps: update K8s constrained GCP versions (#2194) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-10 19:56:59 +02:00
renovate[bot]
3528418f1b
deps: update K8s constrained Azure versions (#2200) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-10 19:20:56 +02:00
renovate[bot]
d9c4e4f6b3
deps: update Kubernetes versions (#2195) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-10 18:40:21 +02:00
Daniel Weiße
e30179a8aa Remove manual state migration steps for AWS 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-10 15:46:59 +02:00
Daniel Weiße
154d1cc3cf Make kubernetes version optional in e2e tests 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-10 15:46:59 +02:00
Daniel Weiße
0dd62fc59d
ci: allow setting region/zone for e2e tests (#2205) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-10 12:53:40 +02:00
renovate[bot]
d12b6bf443
deps: update dependency rules_python to v0.24.0 (#2197) 
* deps: update dependency rules_python to v0.24.0

* deps: upgrade rules_python archive

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-08-10 12:47:39 +02:00
renovate[bot]
34228cd261
deps: update module github.com/bazelbuild/rules_go to v0.41.0 (#2198) 
* deps: update module github.com/bazelbuild/rules_go to v0.41.0

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2023-08-10 11:24:20 +02:00
Malte Poll
9aa14f58eb
bazel: remove stale build rules (#2202) 2023-08-10 11:16:06 +02:00
renovate[bot]
a5d6e80dd8
deps: update fedora:38 Docker digest to 61f921e (#2196) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-08-10 10:56:35 +02:00
Malte Poll
f70fc36075
deps: update bazel, rules_go and gazelle (#2203) 
* deps: update dependency bazel to v6.3.2

* deps: update dependency io_bazel_rules_go to v0.41.0

* deps: update dependency bazel_gazelle to v0.32.0

* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2023-08-10 10:52:15 +02:00
Malte Poll
33c962b427
renovate: group core bazel dependencies (Bazel, rules_go, gazelle) (#2204) 
* migrate renovate config and adopt json5

* renovate: group core bazel dependencies (Bazel, rules_go, gazelle)
 2023-08-10 10:49:28 +02:00
renovate[bot]
947ceaa670
deps: update bufbuild/buf to v1.25.1 (#2191) 
* deps: update bufbuild/buf to v1.25.1
* deps: tidy all modules

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
 2023-08-10 08:55:24 +02:00
Paul Meyer
670c20b18c e2e: cleanup test inputs 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-09 18:42:04 +02:00
Paul Meyer
e466ce2f26 e2e: detect changing idKeyDigests on azure 
by setting the Azure SNP enforcement policy to equal in the weekly e2e.
The run should fail when there are unexpected ID Key digests used.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-09 16:45:42 +02:00
3u13r
c43210c90b
ci: fix recover test (#2162) 
* ci: fix recover test
Previously the test failed if not all nodes were recovered by the cli.

* ci: refactor recover test
 2023-08-09 16:01:43 +02:00
Daniel Weiße
89b342900f Move workspace path functions to sub-package of cmd 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:42:24 +02:00
Daniel Weiße
99c579b45a Add package design goals to CLI package documentation 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:42:24 +02:00
Daniel Weiße
946942ba68 Add package updating/creation tips to dev-docs 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:42:24 +02:00
Daniel Weiße
21c80e7bf3 Remove iamid package 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:42:24 +02:00
Daniel Weiße
23394ea2e2
cli: fix missing safety check in ShowIAM (#2165) 
* Add missing safety check to ShowIAM

* someErr->assert.AnError

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:25:59 +02:00
Daniel Weiße
c9cae643e2
internal: fix unmarshalling attestation version numbers from JSON (#2187) 
* Fix unmarshalling attestation version numbers from JSON

* Add unit test for UnmarshalJSON

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-09 15:11:14 +02:00
Adrian Stobbe
656cdbb4bb
remove unused CloudServiceAccountUri from init request (#2182) 2023-08-09 14:16:45 +02:00
Otto Bittner
d5e88115a0
ci: replace mastersecret flag in recover (#2186) 2023-08-09 13:00:27 +02:00
Paul Meyer
29dcb72bea e2e: remove existingConfig field 
The existingConfig field is always set to true during create, as we use
the IAM create step to generate the config in all cases. Accordingly,
secret injection into config isn't needed anymore in create.
This fixes a bug where other parameters like Kubernetes version and
cluster name wouldn't be injected into the config due to existingConfig
being true.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-09 12:36:36 +02:00
Adrian Stobbe
d8db9d0add
strict input validation on attestation version numbers (#2180) 2023-08-09 11:41:04 +02:00
Adrian Stobbe
d1febd7276
fix e2e upgrade config migration (#2179) 2023-08-09 10:28:13 +02:00
edgelessci
81a13319b7
image: update measurements and image version (#2183) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-08-09 10:14:39 +02:00
Malte Poll
e1c6c533ed
docs: document node groups and migration from old config fields (#2175) 2023-08-09 09:46:22 +02:00
Paul Meyer
eb2f3c3021 ci: verify all pods in verify e2e 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-08 18:46:13 +02:00
Paul Meyer
5dfa0520ce attestation: print pcr value of mismatch 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-08 18:46:13 +02:00
Adrian Stobbe
70861ee8ad
cli: declare mastersecret as immutable and print attestationCfg diff in warning (#2167) 2023-08-08 13:03:23 +02:00
Paul Meyer
e97b2afc14 cli: print maa token in verify 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-08 11:50:26 +02:00
Daniel Weiße
8dbe79500f
cli: fix incorrect usage of masterSecret salt for clusterID generation (#2169) 
* Fix incorrect use of masterSecret salt for clusterID generation

Signed-off-by: Daniel Weiße <dw@edgeless.systems>

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-07 15:24:46 +02:00