Commit graph

1258 commits

Author SHA1 Message Date
Daniel Weiße
09d974609a
ci: scale down automatic e2e testing (#3949)
* ci: only build new image once a week
* ci: only test stable images on daily test
* ci: stop testing gcp-sev-es on daily test
* ci: scale down weekly e2e tests
* ci: disable tests on azure-tdx

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-09-09 08:23:39 +02:00
edgelessci
e9438aa432
Post v2.24.0 release updates to main (#3945)
* docs: release 2.24

* chore: update version.txt to v2.25.0-pre

* chore: update CI for v2.24.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-09-03 08:46:27 +02:00
Daniel Weiße
6e1e49cc4f
ci: extend aws credential lifetime during image build (#3944)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-09-02 11:01:02 +02:00
renovate[bot]
65f05a24d8
deps: update dependency matplotlib to v3.10.6 (#3939)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-01 16:31:09 +02:00
renovate[bot]
b6a49e7e8b
deps: update Python dependencies (#3917)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-08-21 09:52:05 +02:00
Markus Rudy
7a7559e4e8
dev-docs: add script for updating k8s versions in workflow files (#3899)
* ci: use v prefix for k8s version in e2e daily

* dev-docs: suggest script for k8s version bump in workflows
2025-07-31 11:51:45 +02:00
Moritz Sanft
31b8ff9dea
versions: add K8s v1.32; remove K8s v1.29 (#3895)
* versions: remove K8s v1.29

* versions: add K8s v1.32

* versions: default to K8s v1.31

* docs: add k8s v1.32

* versions: update microservice versions for k8s v1.32

* ci: bump k8s versions

* dev-docs: mention ci k8s bump

* bazel: ignore GO-2025-3770
2025-07-30 18:41:12 +02:00
Daniel Weiße
da6468e536
Remove old codeowners (#3875)
* remove elchead from codeowners
* remove left over assignments to 3u13r
* remove leftover assignments to derpsteb

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-07-07 10:28:34 +02:00
renovate[bot]
6c0476c83a
deps: update dependency Pillow to v11.3.0 [SECURITY] (#3873)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-02 08:33:44 +02:00
miampf
7ea5c41f9b
feat: use SSH host certificates (#3786) 2025-07-01 12:47:04 +02:00
renovate[bot]
bd1e56adfa
deps: update dependency numpy to v2.3.0 (#3859)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-12 16:00:15 +02:00
renovate[bot]
b122f941ee
deps: update GitHub action dependencies (#3852)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-03 08:01:42 +02:00
renovate[bot]
5b0073ffe8
deps: update GitHub action dependencies (#3837)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-20 08:31:47 +02:00
renovate[bot]
5cb48e6f6e
deps: update dependency numpy to v2.2.6 (#3835)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-19 08:23:30 +02:00
renovate[bot]
b566e98b2d
deps: update GitHub action dependencies (#3829)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-13 08:31:04 +02:00
edgelessci
9d719df5a4
chore: update CI for v2.23.1 (#3795)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-05-12 21:02:22 +02:00
Daniel Weiße
228e1e76fd
ci: dont fail if Azure resources were already deleted (#3827)
* ci: dont fail if Azure resources were already deleted
* ci: fix error assignement

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-05-12 11:24:11 +02:00
renovate[bot]
85ed31405b
deps: update dependency matplotlib to v3.10.3 (#3820)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-09 23:16:44 +02:00
Daniel Weiße
823c891135
ci: run e2e cleanup daily (#3819)
* ci: run e2e cleanup job once daily
* ci: dont abort cleanup on first error
* ci: clean up leftover resources from release workflows

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-05-09 10:30:38 +02:00
renovate[bot]
53a4db167a
deps: update dependency numpy to v2.2.5 (#3811)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-07 09:59:56 +02:00
Markus Rudy
e27cdd00be
e2e: simplify e2e release workflow (#3804) 2025-05-06 10:41:26 +02:00
renovate[bot]
b8c942ab35
deps: update dependency DeterminateSystems/nix-installer to v3.4.2 (#3799)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-06 10:17:47 +02:00
renovate[bot]
8c3801f6fe
deps: update GitHub action dependencies (#3801)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-06 10:17:30 +02:00
edgelessci
1998fb877f
Post v2.23.0 release updates to main (#3790)
* docs: release 2.23

* chore: update version.txt to v2.24.0-pre

* chore: update CI for v2.23.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-05-02 09:09:43 +02:00
Moritz Sanft
c5ef866cdc
ci: add missing checkout step (#3791) 2025-04-30 11:31:10 +02:00
renovate[bot]
66de14b9a4
deps: update Terraform dependencies (#3769)
* deps: update Terraform dependencies

* terraform: fix provider lock file entries

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2025-04-23 10:43:14 +02:00
renovate[bot]
4a93870d1d
deps: update marocchino/sticky-pull-request-comment action to v2.9.2 (#3765)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-15 08:27:41 +02:00
renovate[bot]
36049f9a5d
deps: update dependency Pillow to v11.2.1 (#3759)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-14 08:41:08 +02:00
renovate[bot]
55ffe967e4
deps: update GitHub action dependencies (major) (#3746)
* deps: update GitHub action dependencies
* allow unrestricted namespaces when building on ubuntu 24.04

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2025-04-10 09:26:36 +02:00
renovate[bot]
2fdb533798
deps: update GitHub action dependencies (#3745)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-08 08:43:54 +02:00
Moritz Sanft
819ec9a22c
ci: rename nixpkgs input (#3741)
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2025-04-04 11:19:37 +02:00
renovate[bot]
1079fba200
deps: update dependency DeterminateSystems/nix-installer to v3.2.1 (#3736)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-03 07:37:51 +02:00
renovate[bot]
5ab11ab996
deps: update dependency DeterminateSystems/nix-installer to v3.2.0 (#3730)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-02 08:59:01 +02:00
edgelessci
700eb60614
Post v2.22.0 release updates to main (#3717)
* docs: release 2.22

* chore: update version.txt to v2.23.0-pre

* chore: update CI for v2.22.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-04-01 10:52:26 +02:00
Leonard Cohnen
be146cdb22
ci: bump slsa verifier (#3718) 2025-03-26 21:53:32 +01:00
Leonard Cohnen
66815a4a47
gcp: support projects with no default permissions (#3656)
* helm/gcp: use service account in operator and joinservice

* helm: format operator testdata

* terraform/iam: create additional service account for VMs

This service account is used in the following commits and is attached to the VMs

* config: pass VM service account from iam create to cluster create via config

* cli/iamcreate: limit name prefix length

* docs: add minimal gcp IAM permissions
2025-03-25 14:13:38 +01:00
miampf
3cc930fa97
feat: implement RFC 16 to allow emergency node access (#3557) 2025-03-25 11:28:48 +00:00
renovate[bot]
c7369fa2a7
deps: update GitHub action dependencies (#3711)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-25 11:59:07 +01:00
renovate[bot]
41396b21e5
deps: update dependency numpy to v2.2.4 (#3708)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 14:30:14 +01:00
Daniel Weiße
f64dc96e7a
ci: add k8s v1.31 and remove v1.28 from stackit e2e test (#3699)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2025-03-17 10:34:34 +01:00
renovate[bot]
dbb7c5b0fd
deps: update Python dependencies (#3692)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-14 10:02:56 +01:00
edgelessci
e5d1aab7d8
chore: update CI for v2.21.1 (#3686)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-03-07 09:34:08 +01:00
renovate[bot]
a1e24742a9
deps: update dependency DeterminateSystems/nix-installer to v3 (#3684)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-06 16:16:40 +01:00
renovate[bot]
f66c03e0c8
deps: update dependency DeterminateSystems/nix-installer to v0.38.1 (#3640)
* deps: update dependency DeterminateSystems/nix-installer to v0.38.1

* ci: pin nix version

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
2025-03-06 12:32:56 +01:00
miampf
ddbcda848b
e2e: measurements reproducibility test for images (#3654) 2025-03-06 10:50:43 +00:00
edgelessci
6225d910de
Post v2.21.0 release updates to main (#3670)
* docs: release 2.21

* chore: update version.txt to v2.22.0-pre

* chore: update CI for v2.21.0

---------

Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-03-04 12:45:58 +01:00
renovate[bot]
60604fdc5e
deps: update Terraform dependencies (#3665)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-02-28 09:38:28 +01:00
Markus Rudy
473b04abd5
versions: add k8s 1.31, remove k8s 1.28 (#3396)
* constellation-node-operator: upgrade control plane nodes first (#3663)

* versions: add k8s 1.31, remove k8s 1.28

* e2e: set default k8s version for daily to 1.30

* e2e: remove defaults for required arguments

* versions: move 1.31 to the end of the list

* kubernetes: set feature gate ControlPlaneKubeletLocalMode

Co-Authored-By: Leonard Cohnen <lc@edgeless.systems>
Co-authored-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2025-02-26 14:07:42 +01:00
Moritz Sanft
28ae7de4ea
ci: supply STACKIT credentials to cleanup job (#3651) 2025-02-17 15:27:51 +01:00
edgelessci
df2383ab09
chore: update CI for v2.20.1 (#3647)
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2025-02-13 20:04:58 +01:00