Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2024-12-27 08:29:33 -05:00
Code Issues Packages Projects Releases Wiki Activity
3,252 Commits 138 Branches 49 Tags 92 MiB
fcc46d6bf2
Commit Graph

3252 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
3u13r
a25c90e9bb
remove deprecated constellation create flags (#2325) 
* chore: clean-up TODOs

* cli: make OpenStack error explicit

* cli: remove deprecated flags

* config: require DeployCSIDriver field
 2023-09-08 21:15:02 +02:00
Adrian Stobbe
5960025da7
cli: new flag to skip phases of upgrade (#2310) 
Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-09-08 14:55:07 +02:00
Malte Poll
7376c6a998
ci: remove aspect workflows (#2324) 2023-09-08 14:19:14 +02:00
Daniel Weiße
94a7b9e7b2
cli: save Helm charts to disk before running upgrades (#2305) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-08 12:02:16 +02:00
3u13r
6cb506bca7
deps: bump go version (#2318) 2023-09-08 10:19:07 +02:00
Daniel Weiße
9765003298
cli: print ordered measurements list during constellation verify (#2302) 
* Print measurements as ordered list during verify
* Fix missing safety check in AWS attestation validation

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-08 08:08:09 +02:00
Adrian Stobbe
0eb9ca2e18
move csp logic to cloudcmd (#2311) 2023-09-07 12:10:36 +02:00
Daniel Weiße
25ba8ecfed
rfc: Constellation state file (#2281) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-09-07 08:55:46 +02:00
Daniel Weiße
442f904ceb
ci: don't automatically create git tag in release pipeline (#2316) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-07 08:47:01 +02:00
Daniel Weiße
327315d5de
csi: let constructor take care of setting up cryptsetup (#2312) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-06 15:05:59 +02:00
Otto Bittner
d3c940a6a0
ci: use virtee project for sev-snp-measure-go (#2307) 
Our port is part of the virtee org. Lets use it to keep it up-to-date.
 2023-09-06 14:02:53 +02:00
edgelessci
4b48b5fdef
image: update measurements and image version (#2309) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-09-06 08:40:59 +02:00
Moritz Sanft
224178b936
use updated url (#2308) 
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2023-09-06 08:23:05 +02:00
Moritz Eckert
c7996481f2
docs: switch to native mermaid support (#2306) 2023-09-05 11:24:20 +02:00
Otto Bittner
6e5ba774d8 cli: disable nosmt via VMM temporarily. 
AWS asked us to disable these options temporarily until they resolve
some internal issues that sometimes prevents these instances
from starting.
 2023-09-05 08:23:18 +02:00
Otto Bittner
cb934ed087
image: move idle and nosmt to aws-only images (#2297) 
We don't want these options on other CSPs. This is temporary until AWS
fixed some background issues.
We need to set the option we want to set differently on each provider
once per provider as we need to keep some of the options we set with
higher priority.
 2023-09-04 14:02:10 +02:00
Malte Poll
ecfb6d9b1f
image: update to Linux 6.1.46 (#2268) 2023-09-04 11:41:25 +02:00
Otto Bittner
376bc6d39f api: move hack/configapi into internal/api 
The tool has an e2e test and is part of our production pipeline.
 2023-09-04 11:20:13 +02:00
Otto Bittner
97dc15b1d1 staticupload: correctly set invalidation timeout 
Previously the timeout was not set in the client's constructor, thus the
zero value was used. The client did not wait for invalidation.
To prevent this in the future a warning is logged if wait is disabled.

Co-authored-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-04 11:20:13 +02:00
Otto Bittner
fdaa5aab3c api: use new signature type for Azure SNP versions 
* Remove signature checks from unittests. Would need to export
signature from client/fetcher (unwanted). Can't figure out a better way.
e2e test completes in ~4sec and runs automatically.
So seems like a acceptable tradeoff.
* list object is now signed, but not verified. If we start to verify the list
we will have to adapt the e2e test to restore the previous list.
Otherwise there could be conflicts between dev and release keys.
 2023-09-04 11:20:13 +02:00
Otto Bittner
2b19632e09 api: refine signature types 
Wrapping apiObject does not work as intended as the version field
is when fetching objects from the API. Thus we need to insert
the target path of the signature directly.
 2023-09-04 11:20:13 +02:00
Otto Bittner
7ffa1344e3 Configapi: pipeline to run e2e test for CLI 
Co-authored-by: Paul Meyer <pm@edgeless.systems>
 2023-09-04 11:20:13 +02:00
Otto Bittner
d2071e945a hack: make bucket/region configurable 
The is useful for testing the configapi cli.
 2023-09-04 11:20:13 +02:00
Daniel Weiße
d35822cff8
ci: add hint about cleaning up lingering resources on failure (#2300) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-04 10:09:35 +02:00
Daniel Weiße
311da4c082
cli: correctly trim white spaces for certificates in verify (#2299) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-04 08:30:18 +02:00
renovate[bot]
dd035f2bec
deps: update Constellation containers to v2.11.0-pre.0.20230821060133-60bf770e62bc (#2292) 
Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-09-01 17:56:36 +02:00
Daniel Weiße
f3218f4197
ci: fix incorrect signing key for sbom signature and wrong public key in release artifacts (#2296) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-01 16:40:09 +02:00
Daniel Weiße
a4d6016ae5
ci: make sure permissions to terminate cluster are always set for e2e upgrade (#2298) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-09-01 16:15:13 +02:00
Otto Bittner
75ce11af14
cli: disable smt via cpu_options (#2291) 
Disabling SMT dynamically inside the image creates problems on AWS.
The problem should be fixed by disabling smt through the VMM.
By recommendation from AWS: add idle=poll.
This should improve our launch success rate while they investigate some
upstream issues.
 2023-09-01 11:26:21 +02:00
edgelessci
463833433c
image: update measurements and image version (#2295) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-09-01 08:19:37 +02:00
edgelessci
eed2be0aa3
image: update measurements and image version (#2294) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-08-30 14:03:35 +02:00
Daniel Weiße
b25425a9f3
deps: update grpc-middleware to v2 (#2286) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-29 14:07:19 +02:00
Daniel Weiße
ce374243ef
cli: retry join-config operations (#2290) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-29 11:40:44 +02:00
Paul Meyer
11efc8d512 ci: comment Go coverage report on PR 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-28 15:44:07 +02:00
Thomas Tendyck
5272e7c86f docs: publish fixes in performance section to 2.10 2023-08-28 10:01:15 +02:00
Adrian Stobbe
7c9a78fe51
make release idempotent (#2278) 2023-08-28 09:21:25 +02:00
Moritz Sanft
a671367794
iamcreate: collect Terraform logs (#2289) 
Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
 2023-08-28 09:01:03 +02:00
Adrian Stobbe
19893c565e
docs: document constellation-cluster.log file (#2285) 2023-08-25 12:50:12 +02:00
edgelessci
0f4bd8296b
image: update measurements and image version (#2284) 
Co-authored-by: katexochen <katexochen@users.noreply.github.com>
 2023-08-25 08:45:50 +02:00
Adrian Stobbe
a03325466c
cli: helm install and upgrade unification (#2244) 2023-08-24 16:40:47 +02:00
Adrian Stobbe
9e79e2e0a1
cli: cleanup terraform files when create fails (#2282) 2023-08-24 16:38:02 +02:00
Moritz Eckert
b278b76df5
docs: add vault benchmark (#2271) 
* Refactor benchmark structure
* Add vault-benchmark section
* update 2.10 docs

Co-authored-by: Otto Bittner <cobittner@posteo.net>
Co-authored-by: Thomas Tendyck <tt@edgeless.systems>
 2023-08-24 15:52:05 +02:00
Daniel Weiße
f33cc647ed
Revert "docs: fix sigstore doc links (#2272)" (#2280) 
This reverts commit ec1bba7a8b.
 2023-08-24 11:12:28 +02:00
Adrian Stobbe
f15c5444da
upgrade test from v2.10.1 (#2279) 2023-08-24 09:15:43 +02:00
renovate[bot]
2da3ae3f09
deps: update Azure SDK (major) (#2253) 
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-24 07:55:56 +02:00
Moritz Sanft
49e5a17aec
docs: document upgrade backup files (#2275) 
* document backup files on upgrade

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>

* reword TF backup

* Update docs/docs/workflows/upgrade.md

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* Update docs/docs/workflows/upgrade.md

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* Update docs/docs/workflows/upgrade.md

Co-authored-by: Otto Bittner <cobittner@posteo.net>

* Update upgrade.md

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>

---------

Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Co-authored-by: Otto Bittner <cobittner@posteo.net>
Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
 2023-08-23 21:22:36 +02:00
Paul Meyer
abd5cdf362 ci: fix ccm build when no new version are found 
Previous output of findvers.sh would be [""] in case no version were
found, now the output is []. Also, GitHub cannot handle empty arrays
in the matrix field, so we add an if and check if the array is empty.

Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
 2023-08-23 15:05:22 +02:00
Daniel Weiße
47fc676927
cli: parse image and k8s versions as semver (#2235) 
Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-23 14:37:53 +02:00
renovate[bot]
6d7c7f71a4
deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0 (#2276) 
* deps: update ghcr.io/edgelesssys/cloud-provider-gcp Docker tag to v26.4.0

* deps: bump gcp ccm for 1.27 and 1.28

---------

Co-authored-by: Leonard Cohnen <lc@edgeless.systems>
 2023-08-23 11:22:17 +02:00
Daniel Weiße
0a911806d1
cli: remove/refactor upgrade package (#2266) 
* Move IAM migration client to cloudcmd package

* Move Terraform Cluster upgrade client to cloudcmd package

* Use hcl for creating Terraform IAM variables files

* Unify terraform upgrade code

* Rename some cloudcmd files for better clarity

---------

Signed-off-by: Daniel Weiße <dw@edgeless.systems>
 2023-08-23 10:35:42 +02:00