Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-10-01 01:36:09 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,967 Commits 133 Branches 44 Tags 106 MiB
aa00c43156
Commit Graph

2967 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Weiße
aa00c43156 Add missing validating webhook configuration 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-20 15:47:12 +02:00
Daniel Weiße
8619a90149 Deploy CSI snapshotter on init 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-20 15:47:12 +02:00
Daniel Weiße
2c8c86a0cb
ci: remove Azure portal internal links from docs (#2122) 
* Remove Azure internal links from docs

* Ignore Azure internal link in dev-docs

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-20 15:04:34 +02:00
Otto Bittner
c58d03a7b8
ci: fix ahead-check for working branch (#2120) 
Also list remote branches during on-release
 2023-07-19 17:48:29 +02:00
renovate[bot]
ac575c9a2c
deps: update quay.io/medik8s/node-maintenance-operator Docker tag to v0.15.0 (#2064) 
* deps: update quay.io/medik8s/node-maintenance-operator Docker tag to v0.15.0

* upgrade vendored nmo api folder

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-07-19 15:37:17 +02:00
Malte Poll
6098ff3612
image: synchronize time via ntp (#2118) 2023-07-19 14:11:24 +02:00
Otto Bittner
c2849f4bbe
cli: ignore name changes on lb public ip resource (#2117) 
Changing the name forces a recreate, which would break existing clusters.
The name change seems to be "only" about having clearer names.
 2023-07-19 10:15:23 +02:00
edgelessci
2660c1aa87
image: update measurements and image version (#2116) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-07-19 08:35:56 +02:00
Daniel Weiße
6a40c73ff7
disk-mapper: set LUKS2 token to allow reusing unintialized state disks (#2083) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-18 16:20:03 +02:00
renovate[bot]
dc373971b2
deps: update dependency cryptography to v41.0.2 [SECURITY] (#2106) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-07-18 15:33:23 +02:00
Daniel Weiße
d03f8c7d78
image: use AWS linux kernel for AWS images to fix deadlock (#2115) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-18 15:08:34 +02:00
Malte Poll
bae9dc9a36
image: always copy amazon ena driver into initrd (#2112) 2023-07-18 11:23:30 +02:00
Malte Poll
f597c12bca
cli: set Azure ConfidentialVM option in terraform vars when migrating (#2113) 2023-07-18 10:30:55 +02:00
Adrian Stobbe
320fd4b726
doc: add iam:DeletePolicyVersion (#2111) 
* document iam:DeletePolicyVersion

* add in all doc versions
 2023-07-18 10:24:52 +02:00
Moritz Sanft
9bc143ea7f
remove unused file.Handler (#2114) 2023-07-18 10:17:01 +02:00
Moritz Sanft
5f71934f56
cli: write Terraform migration output directly to constellation-id.json (#2107) 
* backup `constellation-id.json` before upgrade

* remove superfluous `file.Handler` arguments

* merge `constellation-id.json` on upgrade

* fix typo
 2023-07-18 09:33:42 +02:00
Malte Poll
5cbdb3a519
terraform: allows cluster name length of 10 characters on AWS (#2110) 2023-07-17 17:45:41 +02:00
Daniel Weiße
ac1128d07f
cryptsetup: unify code (#2043) 
* Add common backend for interacting with cryptsetup

* Use common cryptsetup backend in bootstrapper

* Use common cryptsetup backend in disk-mapper

* Use common cryptsetup backend in csi lib

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-17 13:55:31 +02:00
Daniel Weiße
f52c6752e2
ci: update failure tasks (#2087) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-17 13:46:20 +02:00
Daniel Weiße
484b6c5c24
ci: combine node count inputs into one (#2084) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-07-17 13:45:53 +02:00
Otto Bittner
4f1ed669d4
ci: increase autoscaling timeout to 25m (#2103) 
During testing on AWS SNP we can sometimes observe the scaling
take longer than 15 mins due to slow setup times of SNP machines.
Eventually the scaling works as expected.
 2023-07-17 10:30:14 +02:00
Otto Bittner
08e790b8fd
docs: mention need to delete variants (#2096) 2023-07-17 10:29:59 +02:00
Otto Bittner
c1c48f19bf chore: bump e2e-upgrade fromVersion 2023-07-17 10:29:43 +02:00
Otto Bittner
65cdaf0a23 chore: bump version.txt 2023-07-17 10:29:43 +02:00
edgelessci
a300b453f3
docs: add release v2.9.0 (#2102) 2023-07-14 16:24:05 +02:00
Moritz Sanft
43076e96a6
ci: fix resource selection for serial log downloading (#2101) 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Otto Bittner <cobittner@posteo.net>
 2023-07-13 16:28:33 +02:00
Otto Bittner
6ed8fce6b0
ci: separate PCR0 value for aws-sev-snp variant (#2100) 
Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-07-13 11:37:47 +02:00
Malte Poll
e4a6d4b4fa
ci: replicate Azure images to Southeast Asia (#2099) 2023-07-13 11:26:03 +02:00
Malte Poll
e536ff6df1
operators: correctly update launch template default version on AWS image upgrade (#2097) 
Co-authored-by: Adrian Stobbe <stobbe.adrian@gmail.com>
 2023-07-12 16:50:36 +02:00
Otto Bittner
ff4b5db74c
config: make deployCSIDriver backwards compatible (#2088) 
We added the field in 2.9 but can only require it in 2.10.
 2023-07-12 15:08:37 +02:00
Malte Poll
26f4a13934
cli: allow helm upgrades with old k8s patch version (#2095) 2023-07-12 12:42:51 +02:00
Malte Poll
37af5f5f50
cli: allow upgrade to succeed if desired attestation config == actual config (#2094) 2023-07-12 11:53:00 +02:00
Otto Bittner
ef404b5839
ci: use us-east-2 for e2e tests (#2091) 
We have much higher quotas there and thus don't need to wait for
the increase in eu-west-1.
 2023-07-12 10:51:52 +02:00
Paul Meyer
01f518f0a4
deps: update to Go v1.20.6 (#2093) 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-07-12 09:51:40 +02:00
renovate[bot]
c1c4e72c61
deps: update golang Docker tag to v1.20.6 (#2092) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-07-12 08:46:51 +02:00
Otto Bittner
f97edd512d
ci: use 2.8 as fromVersion in release upgrade test (#2086) 
The current value (2.7.1) is outdated since the release of 2.8.
 2023-07-11 09:56:43 +02:00
Otto Bittner
cfa3bb6276
ci: do not build additional streams (#2085) 
Large amounts of uploaded data seem to break the GH Actions cache.
 2023-07-10 17:46:08 +02:00
Malte Poll
738b22caba
cli: fix broken "constellation mini up" due to incompatible terraform json (#2081) 
* deps: downgrade terraform-json to v0.15.0

terraform-exec requires a matching version of terraform json.
Since the latest released version of terraform-exec still uses terraform-json v0.15.0,
we need to stay on that version.

* cli: add "--skip-helm-wait" flag for "constellation init" to "constellation mini up"
 2023-07-10 15:16:45 +02:00
Otto Bittner
ef526562df
cli: remove old migrations (#2079) 
The migrations are not required for upgrading from 2.8.
 2023-07-10 14:03:45 +02:00
Malte Poll
5f5a752b54
rfc: canonical endpoint / custom dns (#1985) 2023-07-10 11:15:08 +02:00
Moritz Sanft
184530a80d
ci: update aws asg resource selector (#1991) 
* update resource selector

* tidy

* fix shellcheck

* bazel tidy
 2023-07-10 11:13:37 +02:00
renovate[bot]
d3ad46f727
deps: update module github.com/bazelbuild/rules_go to v0.40.1 (#2072) 
* deps: update module github.com/bazelbuild/rules_go to v0.40.1
* deps: tidy all modules
* deps: updated bazel rules toolchain

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-07-10 10:58:51 +02:00
3u13r
52f4410334
deps: bump go-secure-stdlib/awsutil (#2076) 
* deps: bump  go-secure-stdlib/awsutil

* deps: tidy after upgrade

---------

Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-07-10 10:52:20 +02:00
Adrian Stobbe
304fbf04e6
ci: fix notify e2e failure (#2078) 2023-07-10 10:44:30 +02:00
Malte Poll
c6230ff8ca
ci: add constellation-windows-amd64.exe to release artifacts uploaded to GitHub (#2075) 2023-07-10 10:21:48 +02:00
Thomas Tendyck
2c1da48437 docs: publish 2023-07-10 09:08:15 +02:00
Thomas Tendyck
0aaf58b710 docs: misc fixes 2023-07-10 09:08:15 +02:00
Malte Poll
1ff40533f1
cli: add "--skip-helm-wait" flag (#2061) 
* cli: add "--skip-helm-wait" flag

This flag can be used to disable the atomic and wait flags during helm install.
This is useful when debugging a failing constellation init, since the user gains access to
the cluster even when one of the deployments is never in a ready state.
 2023-07-07 17:09:45 +02:00
Adrian Stobbe
7e83991154
feat: status shows attestation config (#2056) 
* init

* update doc

* fix tests

* unmarshal typed attestation config for consistent yaml formatting

* fix comments

* marshal numerical attestation values in join-config

* GetAttestationConfig marshals numerical value
 2023-07-07 17:02:01 +02:00
Adrian Stobbe
fafafb48d7 pin dependency for aws-snp-launchmeasurement 2023-07-07 16:44:31 +02:00