Commit Graph

770 Commits

Author SHA1 Message Date
Nils Hanke
c51dec6d00 Use distroless images for JoinService & KMS 2022-09-09 18:11:33 +02:00
Nils Hanke
0949393dbb Update build environment to Fedora 36 & Go 1.19.1 2022-09-09 18:11:33 +02:00
Malte Poll
b8b169c93d
Bump node-operator (#114) 2022-09-09 17:33:55 +02:00
Leonard Cohnen
7163c161b6 Deploy Konnectivity 2022-09-09 17:26:02 +02:00
Moritz Eckert
15592e8f3f
Ref/docs 2.0 (#112) 2022-09-09 17:01:57 +02:00
Nils Hanke
2529323910 Remove clone3 workaround 2022-09-09 15:34:28 +02:00
Nils Hanke
5684b9f607 Add updating CMakeLists.txt to release docs 2022-09-09 15:33:16 +02:00
Nils Hanke
9bedaf20ea Use CMake project version across all places & remove obsolete build tags 2022-09-09 15:33:16 +02:00
Malte Poll
aa75a065d7
e2e test: wait for specified amount of nodes to join the cluster and become ready (#87)
Co-authored-by: Nils Hanke <Nirusu@users.noreply.github.com>
2022-09-09 13:28:53 +02:00
Nils Hanke
56accc7766 CI: Simplify "Generate reference docs" step 2022-09-09 11:24:59 +02:00
Nils Hanke
9a560847f7 CI: Remove obsolete checkout for old docs repo 2022-09-09 11:24:59 +02:00
Nils Hanke
9c8ba7b153 CI: Trigger CLI action on cli/cmd & cli/internal/cmd changes 2022-09-09 11:24:59 +02:00
Nirusu
e0bfdec7ff CLI reference was updated by edgelesssys/constellation@491249fe 2022-09-09 10:31:08 +02:00
Nils Hanke
491249fea6 Sync Azure/GCP tab choice 2022-09-09 10:12:27 +02:00
Moritz Eckert
653b01499d
Pin docs actions to sha (#105) 2022-09-09 09:51:42 +02:00
Moritz Eckert
cdc9eb5c36
Add docs to release process (#104) 2022-09-09 08:04:34 +02:00
Moritz Eckert
98ee807247
Change doc fonts to Roboto (#101) 2022-09-08 17:55:32 +02:00
Thomas Tendyck
a85777fd02 enforce pcr4 2022-09-08 17:34:12 +02:00
Otto Bittner
ef26917c5e AB#2369: Use contributing.md as ToC for dev docs.
* Structure content into typical sections and
split into separate files.
* Also document how to locally create measurements

Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-08 16:08:42 +02:00
Nils Hanke
1c63b65af2
Document instanceType in first-steps.md (#59)
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
2022-09-08 15:39:53 +02:00
Daniel Weiße
21397bf98b
Update docs to new recover workflow (#100)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 14:47:48 +02:00
Daniel Weiße
8cb155d5c5
AB#2260 Refactor disk-mapper recovery (#82)
* Refactor disk-mapper recovery

* Adapt constellation recover command to use new disk-mapper recovery API

* Fix Cilium connectivity on rebooting nodes (#89)

* Lower CoreDNS reschedule timeout to 10 seconds (#93)

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 14:45:27 +02:00
Malte Poll
a7b20b2a11
Explain replication lag on Azure AD (#99) 2022-09-08 14:11:10 +02:00
Nils Hanke
8d7bb9905c Add CLI create & verify changes to CHANGELOG.md 2022-09-08 13:38:24 +02:00
Nils Hanke
cf107f5925 Update asciicinema SVG (now with 3x speed) 2022-09-08 13:38:24 +02:00
Nils Hanke
3e579315fe Update Conformance docs for cluster creation with latest CLI 2022-09-08 13:38:24 +02:00
Nils Hanke
c9c954c675 Remove service provider in CLI commands in docs 2022-09-08 13:38:24 +02:00
Nils Hanke
46c461c23e E2E: Don't use cloudProvider in constellation create 2022-09-08 13:38:24 +02:00
Nils Hanke
ce0edc8c80 Purge provider argument from constellation create and verify 2022-09-08 13:38:24 +02:00
Nils Hanke
7aded65ea8 Add validation for zero or more than one provider 2022-09-08 13:38:24 +02:00
Moritz Eckert
fb5faa681c
Add provider to license check (#88) 2022-09-08 11:02:04 +02:00
Malte Poll
765c097beb
AB#2399 Add GCP service account script (#95) 2022-09-08 09:53:16 +02:00
Daniel Weiße
03148c6706
Add Service Account User as required GCP permission (#91)
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2022-09-08 09:08:29 +02:00
Felix Schuster
0286a83dfa
Re-write Intro/Welcome (#97)
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
2022-09-08 08:43:40 +02:00
Thomas Tendyck
e3c5a5ab78 docs: remove discarded verify feature 2022-09-07 18:16:07 +02:00
Felix Schuster
6aec009aaf
Re-word (#92) 2022-09-07 18:08:13 +02:00
Moritz Eckert
23b9319809
Add search functionality to the docs (#90) 2022-09-07 17:57:45 +02:00
Fabian Kammel
e3ede64ae6
Document trusted launch on Azure (#48)
* Document trusted launch usage for Azure

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* there is no valid link because there is no valid release yet

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* fix link

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* fix linter issues

Signed-off-by: Fabian Kammel <fk@edgeless.systems>

* improve

* importAzure.sh: print final image ID

Signed-off-by: Fabian Kammel <fk@edgeless.systems>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
2022-09-07 15:05:24 +02:00
Otto Bittner
611ec25f22 AB#2380: Add unittest for validateAk
Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-07 13:59:09 +02:00
Nils Hanke
9e20ea15ce Add firewall / debugCluster changes to README.md 2022-09-07 13:27:15 +02:00
Nils Hanke
86a1153cff cdbg: Warn user when debugCluster is false 2022-09-07 13:27:15 +02:00
Nils Hanke
30725bb0c6 Warn when a debug cluster is created 2022-09-07 13:27:15 +02:00
Nils Hanke
fe70231f2a Rename IsImageDebug -> IsDebugImage for consistency 2022-09-07 13:27:15 +02:00
Nils Hanke
dd4ccdd390 E2E / debugd: Replace remains of ingressFirewall with debugCluster flag 2022-09-07 13:27:15 +02:00
Nils Hanke
72d4456b3f GCP: Only create debugd loadbalancer when debugCluster is set 2022-09-07 13:27:15 +02:00
Nils Hanke
d74c7a3769 Azure: Only create debugd loadbalancer when debugCluster is set 2022-09-07 13:27:15 +02:00
Nils Hanke
1a4b4f564a Remove firewall configuration and make it static with a debug flag 2022-09-07 13:27:15 +02:00
Otto Bittner
23bf4aa665
AB#2379: Validate version in SNP report (#80)
* AB#2379: Validate version in SNP report

* Check that TCB version in VCEK matches COMMITTED_TCB
* Check that LAUNCH, CURRENT and REPORTED TCB are at least
at the same security level as we are currently.
* Rename variables in snpReport struct
* Use default values in validator_test.go

Signed-off-by: Otto Bittner <cobittner@posteo.net>
2022-09-07 10:39:38 +02:00
Thomas Tendyck
9d264604c0 cli: remove GCP ADC project name check 2022-09-07 10:29:41 +02:00
Felix Schuster
35cded6261
Update "Product features" and re-arrange "Confidential Kubernetes" (#81)
Co-authored-by: Moritz Eckert <m1gh7ym0@gmail.com>
2022-09-07 09:41:35 +02:00