Adrian Stobbe
54058eed2a
terraform: fix security rule reconciliation on Azure ( #3454 )
...
* fix security rule reconciliation on azure
* fix simulated patch version upgrade
2024-11-04 08:59:16 +01:00
Markus Rudy
bff8bce88f
docs: how to reproduce released artifacts ( #3451 )
...
* ci: test reproducability with different dependency installation methods
* nix: mitigate nix store optimisiation
* docs: reproducible builds
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
* ci: upgrade ubuntu runners for reproducible builds
---------
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
2024-10-29 14:04:59 +01:00
Daniel Weiße
132218ac1e
ci: report failure in scheduled Terraform provider tests on cancel ( #3460 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-10-28 10:46:24 +01:00
Moritz Sanft
44b2a758dd
chore: v2.19.0 post-release ( #3445 )
2024-10-21 09:59:04 +02:00
Moritz Sanft
843d9bcb7c
treewide: upgrade to Go 1.23.2 ( #3417 )
...
* treewide: upgrade to Go 1.23.2
* deps: update golangci/golangci-lint to v1.61.0
* deps: tidy all modules
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-10-15 13:52:45 +02:00
Daniel Weiße
6c94b5ae6b
ci: upgrade to ubuntu-24.04 fixups ( #3413 )
...
* Upgrade workflows to ubuntu-24.04
* Install missing tools for ubuntu-24.04
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-10-14 11:10:30 +02:00
renovate[bot]
810f86582d
deps: update Kubernetes versions ( #3358 )
...
* deps: update Kubernetes versions
* e2e: run vale with python venv
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Markus Rudy <mr@edgeless.systems>
2024-10-11 19:23:31 +02:00
renovate[bot]
ac26c80a90
deps: update GitHub action dependencies ( #3399 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-10-09 12:16:10 +02:00
Markus Rudy
b1cf9bc3fe
e2e: upgrade: allow specifying the origin k8s version ( #3397 )
2024-10-09 11:33:21 +02:00
Moritz Sanft
39e6059607
ci: fix matrix runner spec ( #3380 )
2024-09-27 16:07:38 +02:00
Moritz Sanft
648e9370b6
treewide: v2.18.0 post-release ( #3381 )
2024-09-27 09:43:47 +02:00
Markus Rudy
1ca8d4f977
ci: remove obsolete python dep ( #3369 )
2024-09-19 14:16:51 +02:00
renovate[bot]
a295ecaffb
cli: add --subscriptionID
flag for iam create azure
command ( #3328 )
...
* deps: update Terraform azurerm to v4
* Set Azure subscription ID when applying Terraform files
* Upgrade azurerm to v4.1.0
* Mark subscriptionID flag as not required
* deps: tidy all modules
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: edgelessci <edgelessci@users.noreply.github.com>
2024-09-17 12:30:22 +02:00
Moritz Sanft
fe2fd0a2da
treewide: update Go toolchain to 1.22.7 ( #3343 )
2024-09-09 12:45:48 +02:00
Daniel Weiße
ffde0ef7b7
ci: give scheduled image builds more time between executions ( #3297 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-08-07 13:27:06 +02:00
renovate[bot]
5538a7a23d
deps: update GitHub action dependencies ( #3288 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-02 15:06:00 +02:00
renovate[bot]
92b9d5ab20
deps: update GitHub action dependencies ( #3278 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-08-01 10:34:44 +02:00
Moritz Sanft
2e9dda52b7
ci: mirror GCP SEV-SNP marketplace images ( #3274 )
2024-07-26 12:43:16 +02:00
Adrian Stobbe
212aa64f10
ci: add conformance test to weekly ( #3230 )
2024-07-25 17:38:17 +02:00
Daniel Weiße
b781a75af7
ci: run performance e2e tests using nightly image ( #3272 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-25 16:25:56 +02:00
Thomas Tendyck
399376d3e3
Make SEV-SNP the default attestation variant on GCP ( #3267 )
...
* Make SNP the default on GCP
* fixup! Make SNP
* fixup! Make SNP
2024-07-22 13:29:27 +02:00
renovate[bot]
78ce220cf9
deps: update GitHub action dependencies ( #3259 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-07-18 08:49:57 +02:00
Daniel Weiße
391deeae37
ci: reduce max parallel attestationconfig e2e tests back to 1 for stability ( #3208 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-10 08:24:32 +02:00
Moritz Sanft
74e0f44230
chore: v2.17.0 post-release ( #3229 )
...
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-04 11:17:55 +02:00
Daniel Weiße
e9a4ccd009
ci: run versionsapi through Bazel instead of building a container ( #3231 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-04 10:02:59 +02:00
Daniel Weiße
9c3cb08f92
deps: bump Go version to v1.22.5 ( #3225 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-07-03 09:49:37 +02:00
Moritz Sanft
c48995f249
ci: only commit measurements if changes are present ( #3223 )
...
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-02 09:12:46 +02:00
Moritz Sanft
c7027d9ddf
ci: add missing permissions in release workflow ( #3220 )
...
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
2024-07-01 16:23:53 +02:00
Daniel Weiße
d67d0ac9df
Enable upload of TDX reports to Constellation CDN
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-27 09:09:13 +02:00
renovate[bot]
af3f2bcd42
deps: update GitHub action dependencies ( #3198 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-24 15:19:00 +02:00
Markus Rudy
c911eb4e3a
versions: default to k8s v1.29, support k8s v1.30, EOL v1.27 ( #3173 )
...
* versions: remove k8s 1.27 and patch-upgrade the others
* versions: add support for k8s 1.30.2
* versions: upgrade cloud provider images
2024-06-19 17:34:34 +02:00
renovate[bot]
9cd1184244
deps: update GitHub action dependencies ( #3176 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-19 15:19:41 +02:00
Markus Rudy
9a295b2c3a
ci: better fence around tidy-check-generate summary ( #3174 )
2024-06-19 12:19:41 +02:00
Moritz Sanft
3efd50a518
ci: bump origin versions of upgrade tests ( #3158 )
2024-06-10 14:04:00 +02:00
Daniel Weiße
d64aba7636
ci: author scheduled PRs using edgelessci account ( #3145 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-05 10:41:19 +02:00
Daniel Weiße
39b01f8dac
deps: bump Go version to v1.22.4 ( #3146 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-05 10:27:39 +02:00
Daniel Weiße
1514351571
ci: update conditions on when to auto assign reviewer ( #3141 )
...
* Use the correct value for `github.event.pull_request.requested_reviewers`
* Run the workflow on more events than just labeling a PR
* Skip workflow if there are already reviewers assigned
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-05 08:42:47 +02:00
renovate[bot]
72555e9ba1
deps: update GitHub action dependencies ( #3140 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-04 14:50:20 +02:00
Daniel Weiße
66aa8a8d52
ci: adjust performance benchmark to run on different attestation variants ( #3129 )
...
* Create perf bench artifacts based on attestation variant, not CSP
* Enable perf bench on gcp-sev-snp, azure-tdx and AWS
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-06-04 13:23:07 +02:00
miampf
fbdc8f6e85
ci: clean up failed miniconstellation e2e tests ( #3109 )
2024-05-31 13:51:55 +02:00
Daniel Weiße
3834373fd2
ci: disable perf-bench test for gcp-sev-snp ( #3127 )
...
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
2024-05-28 16:25:37 +02:00
renovate[bot]
80917921e3
deps: update GitHub action dependencies ( #3123 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-24 11:04:23 +02:00
Malte Poll
b86faadfcc
tidy: document MODULE.bazel.lock maintencance
2024-05-23 09:48:04 +02:00
renovate[bot]
36a827056f
deps: update softprops/action-gh-release action to v2 ( #3103 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 10:54:37 +02:00
renovate[bot]
ed54277f78
deps: update actions/download-artifact action to v4 ( #3096 )
...
* deps: update actions/download-artifact action to v4
* Update slsa generator action to v2
---------
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2024-05-15 09:26:10 +02:00
renovate[bot]
73d86c25df
deps: update azure/login action to v2 ( #3097 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 09:05:50 +02:00
renovate[bot]
d5d5ea857d
deps: update github/codeql-action action to v3 ( #3099 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 09:05:38 +02:00
renovate[bot]
62baa9bed2
deps: update cachix/install-nix-action action to v26 ( #3098 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 08:59:07 +02:00
renovate[bot]
c866e3d670
deps: update actions/checkout action to v4 ( #3095 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 08:58:56 +02:00
Markus Rudy
8e3cf5a270
s3proxy: commit image version on release, too ( #3093 )
2024-05-14 15:45:06 +02:00