Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-12 01:14:28 -05:00
Code Issues Packages Projects Releases Wiki Activity
4,324 Commits 137 Branches 49 Tags 108 MiB
c03f72f754
Commit Graph

379 Commits

Author SHA1 Message Date
Otto Bittner
8f21972aec
attestation: add awsSEVSNP as new variant (#1900) 
* variant: move into internal/attestation
* attesation: move aws attesation into subfolder nitrotpm
* config: add aws-sev-snp variant
* cli: add tf option to enable AWS SNP

For now the implementations in aws/nitrotpm and aws/snp
are identical. They both contain the aws/nitrotpm impl.
A separate commit will add the actual attestation logic.
 2023-06-09 15:41:02 +02:00
Thomas Tendyck
947d0cb20a cli: hide --insecure of config fetch-measurements 2023-06-09 15:07:31 +02:00
Moritz Eckert
9463d6fb27
cli: fix azure config warning message (#1902) 2023-06-09 11:16:54 +02:00
edgelessci
f43366ed89
docs: add release v2.8.0 (#1884) 
* docs: add release v2.8.0
* docs: mention required AWS IAM permissions for upgrades

---------

Co-authored-by: malt3 <malt3@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
 2023-06-07 10:34:07 +02:00
3u13r
7c07e3be18
Add --insecure to config fetch-measurement (#1879) 
* cli: add --insecure to fetch-measurements

* cli: rename fake to stub

* ci: upload measurements for debug images

* fix cli docs
 2023-06-06 10:32:22 +02:00
Malte Poll
eb9bea1cff
docs: refine instructions for upgrade process (#1865) 
Incorporate customer feedback regarding the recommended commands when upgrading a Constellation cluster.
Showing the full command "constellation upgrade check --write-config" is important to ensure only valid, safe upgrades are applied.

Co-authored-by: Otto Bittner <cobittner@posteo.net>
 2023-06-05 09:10:20 +02:00
renovate[bot]
a31c3dbbcd
deps: update ubuntu:22.04 Docker digest to 2fdb1cf (#1857) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: malt3 <mp@edgeless.systems>
 2023-06-02 11:20:59 +02:00
3u13r
e0285c122e
todo responsibilities and cleanup (#1837) 
* chore: add TODO responsibilities

* chore: remove not needed TODOs

* chore: remove outdated migrations

* chore: remove resolved goleak exception

* chore: remove not needed cosign env

* config: add link to our Azure snp docs
 2023-06-01 12:33:06 +02:00
Moritz Sanft
6d5e7e1f7c
cli: support StackIT provider on config generate (#1803) 
* support stackit provider on config generate

* update cli reference

* default config values

* deploy csi driver

Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>

---------

Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
 2023-05-30 09:02:50 +02:00
3u13r
661f084ffa
cli: use uami for in-cluter authentication (#1820) 2023-05-26 11:45:03 +02:00
renovate[bot]
0eeb1d2ceb deps: update dependency @cmfcmf/docusaurus-search-local to v1 2023-05-24 13:47:50 +02:00
renovate[bot]
9dd428557f
deps: update dependency prism-react-renderer to v2 (#1824) 
* deps: update dependency prism-react-renderer to v2

* Update docusaurus.config.js

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-05-24 13:30:14 +02:00
renovate[bot]
1ea2814fe4
deps: update dependency mermaid to v10 (#1823) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2023-05-24 13:10:19 +02:00
Thomas Tendyck
69464bca4b docs: publish 2023-05-23 15:51:46 +02:00
3u13r
964775c4c2
Add autoscaling and cluster upgrade support for AWS (#1758) 
* aws: autoscaling and upgrades

* docs: update scaling and upgrades for AWS

* deps: pin vuln check against release
 2023-05-19 13:57:31 +02:00
Adrian Stobbe
f99e06b63b
cli: new flag to set the attestation type for config generate (#1769) 
* add attestation flag to specify type in config
 2023-05-17 16:53:56 +02:00
miampf
e7b7a544f0
docs: add a qemu section (#1724) 2023-05-17 13:21:35 +00:00
Moritz Eckert
fd83f3439e
docs: update state of clouds (#1732) 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-05-10 10:04:20 +02:00
renovate[bot]
f3e14f2b42
deps: update ubuntu:22.04 Docker digest to ca5534a (#1744) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-05-05 14:38:11 +02:00
Paul Meyer
30cd024076
deps: add Kubernetes v1.27, remove Kubernetes v1.24 (#1669) 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-05-05 13:22:53 +02:00
Malte Poll
653bf3621d image: replicate AWS images to eu-west-1 and eu-west-3 2023-05-05 12:06:44 +02:00
Daniel Weiße
c3b13178aa
docs: add short explanation on attestation config options (#1654) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-05-04 15:00:06 +02:00
Daniel Weiße
d7a2ddd939
config: add separate option for handling attestation parameters (#1623) 
* Add attestation options to config

* Add join-config migration path for clusters with old measurement format

* Always create MAA provider for Azure SNP clusters

* Remove confidential VM option from provider in favor of attestation options

* cli: add config migrate command to handle config migration (#1678)

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-05-03 11:11:53 +02:00
Moritz Sanft
478b6ddb72
add terraform debug docs (#1627) 2023-04-21 08:43:27 +02:00
Moritz Sanft
3031d395a9
cli: force-delete Azure resource group (#1667) 
* force-delete Azure resource group

* were not -> weren't

* fix typo
 2023-04-19 08:30:11 +02:00
3u13r
14d26e1af4
terraform: use nat gateway on azure (#1655) 
* terraform: use nat gateway on azure

* docs: add new azure permission
 2023-04-17 11:00:35 +02:00
Moritz Sanft
1d0ee796e8
cli: add Terraform log support (#1620) 
* add Terraform logging

* add TF logging to CLI

* fix path

* only create file if logging is enabled

* update bazel files

* register persistent flags manually

* clidocgen

* move logging code to separate file

* reword yes flag parsing error

* update bazel buildfile

* factor out log level setting
 2023-04-14 14:15:07 +02:00
Moritz Eckert
af9e03f66b docs: update versioned benchmarks 2023-04-11 14:28:21 +02:00
Moritz Eckert
0b66119a41 docs: group perf graphics by csp 2023-04-11 14:28:21 +02:00
Moritz Eckert
db32251daa docs: update benchmarks with v2.6.0 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-04-11 14:28:21 +02:00
Moritz Eckert
a1f5e0e53d ci: Add tooling to create benchmark figures 2023-04-11 14:28:21 +02:00
edgelessci
06bbdda9dc
docs: add release v2.7.0 (#1592) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-04-05 10:33:16 +02:00
Moritz Sanft
e71c33c88d
cli: print attestation document with constellation verify (#1577) 
* wip: verification output

* wip: Azure cert parsing

* wip: print actual PCRs

* wip: use string builder for output formatting

* compare PCR expected with actual

* tests

* change naming

* update cli reference

* update bazel buildfile

* bazel update

* change loop signature
 2023-04-03 15:06:27 +02:00
Paul Meyer
176d32599f terraform: add missing permission to AWS iam 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-04-03 07:23:00 -04:00
Paul Meyer
63b07ede8a terraform: sort permissions 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-04-03 07:23:00 -04:00
Otto Bittner
c8c2953d7b cli: add status cmd 
The new command allows checking the status of an upgrade
and which versions are installed.
Also remove the unused restclient.
And make GetConstellationVersion a function.
 2023-04-03 12:03:41 +02:00
Paul Meyer
b8d6b110b1
cli: add missing -y short flag to iam create (#1572) 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-03-31 17:26:14 +02:00
Moritz Sanft
1f7acf8dfb
docs: list minimal permissions for Constellation setup (#1442) 
* add required Azure perms

* add minimal aws permissions

* add minimal gcp permissions

* [wip] split Azure perms by iam create/create step

* Update docs/docs/getting-started/install.md

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

* Update docs/docs/getting-started/install.md

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

* minimal gcp permissions for iam create/create step

* escape footnote bracket

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* active voice

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* link to config step

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* add predefined roles for Azure

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* add AWS and GCP predefined min roles

* add Azure attestationprovider perm

* footnote for attestation mode

* Update docs/docs/getting-started/install.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* accept superset

* fix negation

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

* update footnote

---------

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-03-30 10:16:57 +02:00
Thomas Tendyck
6fabb2a84b docs: rearrange troubleshooting 2023-03-29 10:57:17 +02:00
Otto Bittner
861bc84f94
cli: only apply upgrades on gcp/azure (#1518) 
The constellation-operator currently doesn't support the
necessary operations for AWS, OpenStack and QEMU.
 2023-03-24 17:07:14 +01:00
derpsteb
870182987c docs: update cli reference 2023-03-24 08:47:53 +01:00
Otto Bittner
55067b12cd docs: explain how to change cluster measurements 
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2023-03-23 18:08:18 +01:00
Malte Poll
44db16b42e
cli: give Azure uami all perms previously given to app registration (#1334) 
This is the first step for deprecating app registrations on Azure.
The user-assigned managed identity (uami) should first gain all permissions that are currently held by the app registration.

* cli: give Azure uami all permissions previously given to app registratio
* docs: document required owner role for user-assigned managed identity on Azure
 2023-03-21 10:00:13 +01:00
renovate[bot]
79395ddd20
deps: update ubuntu:22.04 Docker digest to 7a57c69 (#1452) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-03-17 18:31:20 +01:00
Moritz Eckert
16f2f9bb64
docs: simplify readme svg (#1418) 2023-03-15 12:11:54 +01:00
Paul Meyer
d16f01d810 docs: pin base image of screencast container 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-03-14 13:08:19 -04:00
Thomas Tendyck
1a4c1f34bc
docs: refer to known issues (#1414) 
* docs: refer to known issues

* publish
 2023-03-14 08:27:06 +01:00
Thomas Tendyck
d8895446de docs: remove pcr warning from asciinema casts 2023-03-13 08:26:56 +01:00
Fabian Kammel
566924caf8
docs: embedd asciinema casts (#1154) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
Co-authored-by: 3u13r <lc@edgeless.systems>
 2023-03-11 00:13:32 +01:00
derpsteb
02694c0648 docs: add release v2.6.0 2023-03-09 13:14:28 +01:00
edgelessci
ff7ac40590
docs: update cli reference (#1378) 
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
 2023-03-08 15:53:25 +01:00
Thomas Tendyck
c94d1db76d attestation: remove PCR 0 and 10 on GCP 2023-03-06 13:09:57 +01:00
Thomas Tendyck
3471d73c6c docs: publish 2023-03-06 10:43:49 +01:00
Thomas Tendyck
c7f0cf1e79 docs: few fixes and rewording 2023-03-06 10:43:49 +01:00
Thomas Tendyck
420fecb986
docs: publish minor fixes (#1220) 2023-03-03 16:45:00 +01:00
Otto Bittner
67a58bcc56 docs: rename components to microservices 
Since we now have a config value called microserviceVersion
it hopefully makes it easier for users to understand what
this value controls if we also use the term microservice
in the docs.
 2023-03-03 15:40:57 +01:00
Otto Bittner
273225968f docs: rewrite upgrade docs for new commands 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-03-03 15:40:57 +01:00
Nirusu
9867faaf7e docs: update cli reference 2023-03-03 09:12:34 +01:00
Nils Hanke
f67594a5ea docs: adjust wording for resource provider troubleshooting 2023-03-01 16:10:06 +01:00
Nils Hanke
b327287577
docs: mention resource provider registration for Azure (#1308) 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-03-01 14:35:46 +01:00
Paul Meyer
483c0b47fe
docs: update cli reference (#1293) 
Co-authored-by: derpsteb <derpsteb@users.noreply.github.com>
 2023-02-28 18:40:10 +01:00
Moritz Sanft
a2096c2e33
docs: add docs on general Terraform usage (#1263) 
* add docs on general tf usage

* reminder to not delete terraform dir

* fix spelling check

* add to sidebar

* reference terraform page

* embed link into natural language

* mention iam folder

* separate hack tools from official tf docs

* assume familiarity with tf
 2023-02-28 10:36:20 +01:00
Paul Meyer
ca1a594f04
docs: update cli reference (#1292) 2023-02-28 09:31:44 +01:00
github-actions[bot]
95a6bd8030
docs: update cli reference (#1254) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-02-27 15:36:45 +01:00
miampf
5137e9fa57
cli: iam destroy (#946) 2023-02-24 11:36:41 +01:00
Nils Hanke
3c24fa37e8 docs: specify requirement of 4 vCPUs more clearly 2023-02-22 15:25:51 +01:00
Nils Hanke
573de3191e docs: add support for GCP C2D VMs 2023-02-22 15:25:51 +01:00
Otto Bittner
d78d22f95a
cli: add config kubernetes-versions subcommand (#1224) 
Allows users to learn which k8s versions are supported by the
current CLI.
Extend respective docs section.
 2023-02-22 09:52:47 +01:00
leongross
ff31f20488 docs: update cli reference 2023-02-21 18:52:28 +01:00
Thomas Tendyck
91c251090f
Fix links and clean lycheeignore (#1219) 
* docs: fix links to cilium docs

* docs: clean lycheeignore

* docs: remove link to no longer existing blog post
 2023-02-19 21:45:20 +01:00
stdoutput
013be33143 fix terminate docs filename 2023-02-19 16:23:15 +01:00
Moritz Sanft
782b4ec680
extend docs on terraform iam resource destruction (#1217) 2023-02-19 13:17:26 +01:00
derpsteb
d0daf26da7 docs: update cli reference 2023-02-16 08:54:47 +01:00
thomasten
94245416ca docs: update cli reference 2023-02-13 08:39:40 +01:00
Daniel Weiße
c29107f5be
init: create kubeconfig file with unique user/cluster name (#1133) 
* Generate kubeconfig with unique name

* Move create name flag to config

* Add name validation to config

* Move name flag in e2e tests to config generation

* Remove name flag from create

* Update ascii cinema flow

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-02-10 13:27:22 +01:00
github-actions[bot]
35d9efd351
docs: generate docs for v2.5.0 (#1059) 
Co-authored-by: release[bot] <release[bot]@users.noreply.github.com>
 2023-01-23 20:13:24 +01:00
Moritz Eckert
aa1b2f8d30
docs: add missing asterisk reference (#970) 2023-01-23 13:19:51 +01:00
3u13r
03154c6e64
docs: document terraform support (#1037) 2023-01-23 10:37:28 +01:00
Moritz Sanft
88bbfb2065
docs: add docs for automatic config filling of iam values (#1000) 
* AB#2821 iam config filling docs

* AB#2821 rephrasing
 2023-01-19 10:24:58 +01:00
github-actions[bot]
8664e57c36
docs: update cli reference (#951) 
* CLI reference was updated by edgelesssys/constellation@64ec0408

* CLI reference was updated by edgelesssys/constellation@e844ceb2

Co-authored-by: stdoutput <stdoutput@users.noreply.github.com>
 2023-01-17 14:39:13 +01:00
Otto Bittner
90b88e1cf9 kms: rename kms to keyservice 
In the light of extending our eKMS support it will be helpful
to have a tighter use of the word "KMS".
KMS should refer to the actual component that manages keys.
The keyservice, also called KMS in the constellation code,
does not manage keys itself. It talks to a KMS backend,
which in turn does the actual key management.
 2023-01-16 11:56:34 +01:00
Thomas Tendyck
c66119fe93
docs: remove disclaimer about resolved Azure performance issue (#944) 
* docs: remove disclaimer about resolved Azure performance issue

* Update first-steps.md

* Update first-steps.md
 2023-01-11 17:29:29 +01:00
release[bot]
0d1b2283f6 Generate docs for v2.4.0 2023-01-11 16:26:07 +01:00
github-actions[bot]
6dad94137b
CLI reference was updated by edgelesssys/constellation@075a0e0a (#883) 
Co-authored-by: derpsteb <derpsteb@users.noreply.github.com>
 2023-01-05 18:21:23 +01:00
Fabian Kammel
6323bd774d
fix linter issues (#820) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-12-22 09:35:10 +01:00
Fabian Kammel
f1bee6dab8
Azure disclaimer (#805) 
* make flxflx code owner of docs

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* add azure disclaimer

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-12-20 17:07:56 +01:00
github-actions[bot]
edabdb025e
CLI reference was updated by edgelesssys/constellation@efcd0337 (#814) 
Co-authored-by: derpsteb <derpsteb@users.noreply.github.com>
 2022-12-19 16:59:16 +01:00
Thomas Tendyck
5fcc81538c
docs: publish gcp zone fix (#810) 2022-12-19 12:15:44 +01:00
Moritz Sanft
6e961997ac
fix wrong GCP zone (#804) 2022-12-16 09:41:19 +01:00
Malte Poll
92fcba118a Release docs for v2.3 2022-12-12 17:52:29 +01:00
Thomas Tendyck
5ecf945226 docs: few fixes and rewording 2022-12-12 14:34:59 +01:00
Moritz Sanft
dd4fc0d869
AB#2685 Add documentation for automatic IAM creation (#711) 2022-12-12 13:33:19 +01:00
Otto Bittner
e461b6385a
Document cert-manager installation. (#752) 2022-12-09 13:28:29 +01:00
Daniel Weiße
7e50f871bf
Update CSI installation instructions in versioned docs (#741) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-12-09 08:48:33 +01:00
Moritz Sanft
d03abfa45e
AB#2652 Add supported CP regions to Azure & GCP Docs (#715) 
* AB#2652 Add supported CP regions to Azure & GCP Docs

* AB#2652 fix numeration
 2022-12-07 12:12:05 +01:00
Moritz Sanft
85e7b836a3
AB#2651 Compatibility warning for MiniConstellation (#713) 2022-12-07 10:20:01 +01:00
Paul Meyer
516e33bee6 docs: update dependencies 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2022-12-07 10:17:48 +01:00
Thomas Tendyck
e91b60c577
AB#2686 docs: rephrase cluster identity (#723) 
* AB#2686 docs: rephrase cluster identity

* clarify clusterID measurement

* publish
 2022-12-05 17:48:26 +01:00
Thomas Tendyck
92d97e117a docs: improve wording 2022-12-01 12:07:04 +01:00
Malte Poll
e67f65709f
Prepare release checklist for v2.3 (#690) 2022-12-01 10:46:04 +01:00
Fabian Kammel
f3e9a83000
improve wording (#677) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-11-30 12:41:07 +01:00
Thomas Tendyck
21529d0e9e don't promote Trusted Launch for now 2022-11-30 12:24:37 +01:00
Daniel Weiße
6bd62f0f7a
Update docs to new measurement format (#660) 
* Remove fetch-measurements from create workflow

* Explain new measurements format in docs

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-11-30 08:29:17 +01:00
Fabian Kammel
cf49f7d755
Document SLSA adoption and current level (#661) 
* Document SLSA adoption and current level
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2022-11-29 12:56:28 +01:00
Moritz Eckert
bffa5c580c
Fix components diagram (#659) 2022-11-28 15:30:46 +01:00
Fabian Kammel
c71fd89e80
Provenance for CLI (#647) 
* provenance generation for cli
* document provenance generation for CLI
* include CLI SBOM in provenance
Co-authored-by: 3u13r <lc@edgeless.systems>
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-11-25 16:13:20 +01:00
Nils Hanke
878d66dcda
Remove SSHUsers and UserKey from config v2 (#650) 
* Remove SSHUsers and UserKey as part of configVersion v2

* Add migration nodes to docs

* Update CHANGELOG.md
 2022-11-25 15:27:34 +01:00
Malte Poll
8d9254e050 Docs: document breaking changes in the config file 2022-11-23 15:47:46 +01:00
github-actions[bot]
d8463e984b
Update CLI reference (#613) 
* CLI reference was updated by edgelesssys/constellation@9f64fdad
* CLI reference was updated by edgelesssys/constellation@1f9b6ba9
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
 2022-11-22 10:06:22 +01:00
Daniel Weiße
b915d03487
AB#2615 Update docs to new CSI installation method (#606) 
* Update docs to new CSI installation method

* Fix invalid volume expansion option

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
 2022-11-22 09:36:08 +01:00
Malte Poll
74aabe86fa Move PCR[8] -> PCR[12] 2022-11-18 10:37:45 +01:00
Nils Hanke
4a2cba988c Create separate Terraform workspace directory 2022-11-17 13:49:34 +01:00
Fabian Kammel
bb76a4e4c8
AB#2512 Config secrets via env var & config refactoring (#544) 
* refactor measurements to use consistent types and less byte pushing
* refactor: only rely on a single multierr dependency
* extend config creation with envar support
* document changes
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-11-15 15:40:49 +01:00
leongross
366b7ffed4
AB#2606 add default 'EnforcedMeasurements' for AWSConfig, add aws tab… (#471) 
* AB#2606 add AWS to attestation documentation
 2022-11-14 12:48:17 +01:00
Thomas Tendyck
cf82794b1d docs: publish access manager removal 2022-11-14 10:42:30 +01:00
Fabian Kammel
b92b3772ca
Remove access manager (#470) 
* remove access manager from code base
* document new node ssh workflow
* keep config backwards compatible
* slow down link checking to prevent http 429
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-11-11 08:44:36 +01:00
Thomas Tendyck
4f710528bc docs: publish 2022-11-09 16:30:05 +01:00
Thomas Tendyck
01fbfeebb9 docs: misc fixes and rewording 2022-11-09 16:30:05 +01:00
Fabian Kammel
2b64f31104
release docs for v2.2 (#482) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-11-08 18:25:56 +01:00
Fabian Kammel
598761541b
AWS Docs (#446) 
* document AWS support
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2022-11-08 18:21:09 +01:00
Leonard Cohnen
f09ce515e2 docs: remove constellation-state.json 2022-11-07 19:09:24 +01:00
Otto Bittner
a70161730f
Explain unenforced measurements in config (#445) 2022-11-07 08:56:57 +01:00
Moritz Eckert
69644add5d
Add plausbile to docusaurus (#456) 2022-11-04 14:15:34 +01:00
Nirusu
ad15c7f84d CLI reference was updated by edgelesssys/constellation@8f3076e7 2022-11-02 18:22:05 +01:00
Nils Hanke
8f3076e74e Fix Vale complaints 2022-11-02 18:18:30 +01:00
Nils Hanke
141fa3f593 Document termination prompt 2022-11-02 18:18:30 +01:00
Fabian Kammel
18ae86c38e
sbom signing (#303) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-10-21 15:19:51 +02:00
Malte Poll
a901759725 docs: Updates for transition CoreOS -> mkosi / Fedora 2022-10-21 11:04:25 +02:00
Daniel Weiße
e5aaf0a42f Add hint about problematic iptables rules to minic11n requirements 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-10-21 09:35:39 +02:00
daniel-weisse
6cf5003321 CLI reference was updated by edgelesssys/constellation@085f7b1a 2022-10-21 08:29:24 +02:00
Christoph Meyer
cd557e33fc AB#2493 Recreate benchmark graphs in edgeless colors 2022-10-19 18:53:43 +02:00
Felix Schuster
c4d8fa54a6
Brush over MiniConstellation in docs and README (#285) 
* Pass over mini-constellation
* Update version 2.1
* Update README
 2022-10-17 16:41:56 +02:00
Thomas Tendyck
bd6accbc01 publish doc changes 2022-10-17 08:33:53 +02:00
Daniel Weiße
f068e50dee
Attestation logging (#275) 
* Add section for checking joinservice logs

* Add logging for attestation validation

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-10-14 16:29:21 +02:00
github-actions[bot]
74c3c93dec
Update CLI reference (#248) 
Co-authored-by: katexochen <49727155+katexochen@users.noreply.github.com>
 2022-10-14 10:48:20 +02:00
Moritz Eckert
c7010f76ca
Update wording for MiniConstellation in docs (#241) 2022-10-13 11:29:56 +02:00
Fabian Kammel
50cff97ec5
improve wording in title (#239) 
Signed-off-by: Fabian Kammel <fk@edgeless.systems>

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
 2022-10-13 08:58:06 +02:00
Thomas Tendyck
76e9d7c5ac docs: mini-constellation: fix typos and simplify some sentences 2022-10-10 09:34:32 +02:00
Thomas Tendyck
9db71a41de docs: publish to 2.1 2022-10-10 09:29:50 +02:00
Thomas Tendyck
7003a86363 docs: publish to 2.0 2022-10-10 09:29:50 +02:00
Thomas Tendyck
617a55a230 docs: fixes and rewording of architecture 2022-10-10 09:29:50 +02:00
Paul Meyer
fd63ca1251
Release docs for v2.1 (#222) 2022-10-07 12:14:55 +02:00
Daniel Weiße
7f96b82288
Wrap references to mini Constellation in tip boxes (#221) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-10-07 10:16:25 +02:00
github-actions[bot]
ff25593f7e
CLI reference was updated by edgelesssys/constellation@0edae36e (#220) 
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
 2022-10-07 09:44:41 +02:00
Daniel Weiße
e1059aceac
AB#2425 Constellation mini docs (#214) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-10-07 09:42:14 +02:00
Christoph Meyer
8d4c1c389e AB#2377 Repeat benchmarks on CVMs 2022-10-06 15:04:26 +02:00
Thomas Tendyck
27e8604a9b docs: publish to 2.0 2022-09-28 16:33:04 +02:00
Thomas Tendyck
c7e8fe0bd6 docs: fixes and rewording of workflows 2022-09-28 16:33:04 +02:00
github-actions[bot]
91655e1bcb
CLI reference was updated by edgelesssys/constellation@804c173d (#196) 
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
 2022-09-26 16:03:01 +02:00
Felix Schuster
2b32b79026
Rewording in "Getting started" (#193) 
* Small changes

* Update docs/docs/getting-started/first-steps.md

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

* Update docs/docs/getting-started/first-steps.md

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

* Update docs/versioned_docs/version-2.0/getting-started/first-steps.md

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>

Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>
 2022-09-26 15:19:09 +02:00
github-actions[bot]
9f0a18cbe2
CLI reference was updated by edgelesssys/constellation@30f05541 (#194) 
Co-authored-by: daniel-weisse <daniel-weisse@users.noreply.github.com>
 2022-09-26 10:22:00 +02:00
Daniel Weiße
30f0554168
AB#2262 Automatic recovery (#158) 
* Update `constellation recover` to be fully automated

* Update recovery docs

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-09-26 09:57:40 +02:00
Felix Schuster
4f596cde3c
Extend community license (#186) 2022-09-22 12:12:17 +02:00
Thomas Tendyck
811ccc80a3
docs: clarify permissions on install page (#184) 
* docs: clarify permissions on install page

* docs: remove default attribute from tabs

* docs: publish to 2.0
 2022-09-21 16:58:04 +02:00
Nils Hanke
029e6783a3 Add link where to download CLI signatures 2022-09-21 15:07:36 +02:00
Nils Hanke
38d042db71 Provide CLI commands to install the CLI 2022-09-21 15:07:36 +02:00
Thomas Tendyck
a283f96b87 docs: minor wording fixes in overview pages 2022-09-20 19:00:15 +02:00
katexochen
6293575172 CLI reference was updated by edgelesssys/constellation@788cfd9b 2022-09-20 14:40:45 +02:00
katexochen
bcab213139 Document cluster based autoscaling 2022-09-20 13:41:23 +02:00
3u13r
67d9be38d7 CLI reference was updated by edgelesssys/constellation@774e300a 2022-09-20 13:07:48 +02:00
Thomas Tendyck
bff4351839 docs: reword examples 2022-09-19 10:36:54 +02:00
Thomas Tendyck
7b7c4b3246 docs: fix CLI reference heading 2022-09-16 15:57:50 +02:00
Thomas Tendyck
72d5aa7558 docs: fix command in trusted launch workflow and add fetch-measurements 2022-09-14 18:26:41 +02:00
Nils Hanke
c6a6d7ffe4
Recude speed for asciicinema (#150) 2022-09-14 15:28:33 +02:00
Thomas Tendyck
d861f7b519
docs: minor fixes in first steps and wording improvements (#155) 
* docs: minor fixes in first steps and wording improvements

* publish to 2.0
 2022-09-14 14:40:41 +02:00
Leonard Cohnen
a5e82fcb0e remove sample config in docs 2022-09-14 12:09:34 +02:00
Felix Schuster
eb213878a2
Re-wording in docs/workflows (#135) 
* Quick pass over create.md

* pass over verify.md

* Re-arrange workflows

* Quick polish of scale.md and upgrade.md

* Quick polish of terminate.md

* Cut recovery.md down

* Brush over ssh

* storage

* Brush over trusted launch VMs

* Update docs/docs/workflows/verify-cluster.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* Update docs/docs/workflows/verify-cluster.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* Update docs/docs/workflows/verify-cluster.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* Add Azure back to title

* Update docs/docs/workflows/verify-cluster.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

* fix lint errors

* publish to 2.0

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2022-09-13 15:12:05 +02:00
Felix Schuster
d5d5448935
Overwrite v2.0 in docs (#144) 2022-09-13 12:05:07 +02:00
Felix Schuster
0165a6be43
Brush over first-steps (#137) 
Brush over first-steps in docs
 2022-09-13 11:48:19 +02:00
Felix Schuster
b972bfa17d
Update concept graphic in README (#136) 
* Update concept graphic in README
 2022-09-13 11:31:52 +02:00
Thomas Tendyck
7cf80ecc61 docs: fix some code highlightings 2022-09-12 18:52:05 +02:00
Felix Schuster
ebb8d7ca96
Rewrite install.md and create verify-cli.md (#124) 
* Rewrite install.md and create verify-cli

* Small beautification

* Address review comment

* Shorten examples.md

* Quick brush over examples

* Fix broken links in v2.0

* Fix broken links in v2.0

* fix lint errors

Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2022-09-12 18:35:12 +02:00
Nils Hanke
55af5695ed Update asciicinema 2022-09-12 16:27:21 +02:00
Nils Hanke
ae9fe284f7 Directly install CSI drivers from (public) GitHub 2022-09-12 14:00:39 +02:00
github-actions[bot]
fba697144d
Update CLI reference (#126) 
* CLI reference was updated by edgelesssys/constellation@d83a5f86

* CLI reference was updated by edgelesssys/constellation@4b36d3a9

Co-authored-by: thomasten <thomasten@users.noreply.github.com>
 2022-09-12 13:39:56 +02:00
Thomas Tendyck
0952435e25 fix some doc links 2022-09-12 13:09:55 +02:00
Thomas Tendyck
5cd69d4aee
promote issues as support channel (#123) 
* promote issues as support channel

* add question issue template
 2022-09-12 13:01:50 +02:00
Moritz Eckert
15592e8f3f
Ref/docs 2.0 (#112) 2022-09-09 17:01:57 +02:00
Nirusu
e0bfdec7ff CLI reference was updated by edgelesssys/constellation@491249fe 2022-09-09 10:31:08 +02:00
Nils Hanke
491249fea6 Sync Azure/GCP tab choice 2022-09-09 10:12:27 +02:00
Moritz Eckert
98ee807247
Change doc fonts to Roboto (#101) 2022-09-08 17:55:32 +02:00
Thomas Tendyck
a85777fd02 enforce pcr4 2022-09-08 17:34:12 +02:00
Nils Hanke
1c63b65af2
Document instanceType in first-steps.md (#59) 
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2022-09-08 15:39:53 +02:00
Daniel Weiße
21397bf98b
Update docs to new recover workflow (#100) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-09-08 14:47:48 +02:00
Malte Poll
a7b20b2a11
Explain replication lag on Azure AD (#99) 2022-09-08 14:11:10 +02:00
Nils Hanke
cf107f5925 Update asciicinema SVG (now with 3x speed) 2022-09-08 13:38:24 +02:00
Nils Hanke
c9c954c675 Remove service provider in CLI commands in docs 2022-09-08 13:38:24 +02:00
Malte Poll
765c097beb
AB#2399 Add GCP service account script (#95) 2022-09-08 09:53:16 +02:00
Daniel Weiße
03148c6706
Add Service Account User as required GCP permission (#91) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2022-09-08 09:08:29 +02:00
Felix Schuster
0286a83dfa
Re-write Intro/Welcome (#97) 
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
 2022-09-08 08:43:40 +02:00
Thomas Tendyck
e3c5a5ab78 docs: remove discarded verify feature 2022-09-07 18:16:07 +02:00
Felix Schuster
6aec009aaf
Re-word (#92) 2022-09-07 18:08:13 +02:00
Moritz Eckert
23b9319809
Add search functionality to the docs (#90) 2022-09-07 17:57:45 +02:00
Fabian Kammel
e3ede64ae6
Document trusted launch on Azure (#48) 
* Document trusted launch usage for Azure

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* there is no valid link because there is no valid release yet

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* fix link

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* fix linter issues

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* improve

* importAzure.sh: print final image ID

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2022-09-07 15:05:24 +02:00
Felix Schuster
35cded6261
Update "Product features" and re-arrange "Confidential Kubernetes" (#81) 
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
 2022-09-07 09:41:35 +02:00
Malte Poll
ab5f00ba32
Docs: recommend latest version of azure cli (#77) 
Prevent users from running az versions < 2.25.0 and experience https://github.com/Azure/azure-cli/issues/19892
 2022-09-05 16:46:05 +02:00
Nils Hanke
4bfb98d35a Fix typo in sidebar 2022-09-05 11:10:57 +02:00
Nirusu
76896ac190 CLI reference was updated by edgelesssys/constellation@3c7d76f5 2022-09-05 10:45:03 +02:00
Thomas Tendyck
95ff987bfc add license 2022-09-05 09:17:25 +02:00
Felix Schuster
d06d403d1d
Add page on CSPs (#56) 
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
 2022-09-04 22:11:10 +02:00