attestation: hardcode measurements for v2.14.2

.github/workflows/draft-release.yml

@@ -454,9 +454,10 @@ jobs:
             if [[ "${ext}" = "exe" ]]; then
               cp "${file}" "${folder_name}/terraform-provider-constellation_v${version}.exe"
             else
+              chmod 755 "${file}" # the upload artifact does not preserve file permissions (https://github.com/actions/upload-artifact/tree/main/?tab=readme-ov-file#permission-loss)
               cp "${file}" "${folder_name}/terraform-provider-constellation_v${version}"
             fi
-            zip -r "${folder_name}.zip" "${folder_name}"
+            (cd "${folder_name}" && zip "../${folder_name}.zip" ./*) # do not zip the folder itself
             rm -r "${folder_name}"
           done
 

.github/workflows/on-release.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-22.04
     permissions:
       id-token: write
-      contents: read
+      contents: write
     env:
       FULL_VERSION: ${{ github.event.release.tag_name }}${{ github.event.inputs.tag }}
     outputs:
@@ -32,11 +32,7 @@ jobs:
 
       - name: Determine branch names
         run: |
-          WITHOUT_V=${FULL_VERSION#v}
-          PART_MAJOR=${WITHOUT_V%%.*}
-          PART_MINOR=${WITHOUT_V#*.}
-          MAJOR_MINOR=${PART_MAJOR}.${PART_MINOR}
-          RELEASE_BRANCH="release/v${MAJOR_MINOR}"
+          RELEASE_BRANCH="release/${FULL_VERSION%.*}"
           WORKING_BRANCH="tmp/${FULL_VERSION}"
           echo "RELEASE_BRANCH=${RELEASE_BRANCH}" | tee -a "$GITHUB_ENV"
           echo "WORKING_BRANCH=${WORKING_BRANCH}" | tee -a "$GITHUB_ENV"
@@ -124,10 +120,12 @@ jobs:
     runs-on: ubuntu-22.04
     permissions:
       id-token: write
-      contents: read
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
       - name: Remove temporary branch
+        env:
+          WORKING_BRANCH: ${{needs.complete-release-branch-transaction.outputs.WORKING_BRANCH}}
         run: git push origin --delete "${WORKING_BRANCH}"

internal/attestation/measurements/measurements_enterprise.go

@@ -16,11 +16,11 @@ package measurements
 
 // revive:disable:var-naming
 var (
-	aws_AWSNitroTPM          = M{0: {Expected: []byte{0x73, 0x7f, 0x76, 0x7a, 0x12, 0xf5, 0x4e, 0x70, 0xee, 0xcb, 0xc8, 0x68, 0x40, 0x11, 0x32, 0x3a, 0xe2, 0xfe, 0x2d, 0xd9, 0xf9, 0x07, 0x85, 0x57, 0x79, 0x69, 0xd7, 0xa2, 0x01, 0x3e, 0x8c, 0x12}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x2f, 0xd4, 0x5c, 0x59, 0xae, 0xac, 0x2c, 0x64, 0x24, 0x5f, 0x6e, 0xd0, 0x05, 0x38, 0x22, 0x73, 0x66, 0x4d, 0x0e, 0x36, 0xd0, 0xec, 0xa7, 0xea, 0xec, 0xda, 0xcf, 0xac, 0x73, 0x07, 0x84, 0x8a}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x88, 0x46, 0x42, 0x2e, 0x06, 0x91, 0xb8, 0x00, 0xb0, 0xd6, 0x10, 0x55, 0x06, 0xb5, 0xc8, 0xc3, 0xe8, 0x0e, 0xe0, 0x82, 0x2a, 0x42, 0x29, 0xde, 0xf0, 0xed, 0xf9, 0x0c, 0x3f, 0xc1, 0x8f, 0xda}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x3a, 0x2d, 0x1b, 0xc7, 0x1b, 0xcb, 0x45, 0x02, 0x3a, 0x0f, 0xab, 0x63, 0x01, 0x4e, 0x78, 0x48, 0xfb, 0x06, 0x0e, 0x2a, 0xee, 0xe5, 0x49, 0xef, 0x8d, 0xa9, 0x20, 0x7b, 0x4a, 0x55, 0xc7, 0xf6}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	aws_AWSSEVSNP            = M{0: {Expected: []byte{0x7b, 0x06, 0x8c, 0x0c, 0x3a, 0xc2, 0x9a, 0xfe, 0x26, 0x41, 0x34, 0x53, 0x6b, 0x9b, 0xe2, 0x6f, 0x1d, 0x4c, 0xcd, 0x57, 0x5b, 0x88, 0xd3, 0xc3, 0xce, 0xab, 0xf3, 0x6a, 0xc9, 0x9c, 0x02, 0x78}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0xe7, 0xfc, 0x1b, 0x28, 0xe3, 0x00, 0x79, 0x46, 0x1a, 0x60, 0x3d, 0x71, 0x81, 0xa0, 0x4d, 0x4b, 0xc4, 0xbf, 0xad, 0x12, 0x08, 0x9b, 0x33, 0x82, 0x47, 0xd3, 0x59, 0xe8, 0x26, 0x1f, 0x97, 0xea}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xf6, 0x8e, 0x1c, 0x36, 0xf1, 0x20, 0x60, 0xf3, 0x57, 0xa1, 0x0e, 0x04, 0xf5, 0xd4, 0xb7, 0x0d, 0x72, 0x70, 0xb6, 0xfc, 0x89, 0x45, 0xd0, 0xec, 0x26, 0xe5, 0x9f, 0x9d, 0x6f, 0xbd, 0xa3, 0x35}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x3a, 0x75, 0x39, 0xf5, 0x1c, 0x1b, 0xb5, 0x31, 0x0a, 0x40, 0x3c, 0x3d, 0x7e, 0xac, 0x88, 0x32, 0xef, 0x27, 0x14, 0x28, 0x36, 0xc6, 0xa3, 0x0b, 0x60, 0x24, 0xc6, 0xb2, 0x1e, 0x04, 0x89, 0x1c}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
-	azure_AzureSEVSNP        = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x2e, 0x67, 0x6e, 0xb7, 0xf8, 0x6c, 0xb9, 0xa3, 0x5b, 0x6d, 0x90, 0xbf, 0xe8, 0x9f, 0xf2, 0x7d, 0x3c, 0x8c, 0x7f, 0x59, 0xe5, 0x88, 0xac, 0xc3, 0x80, 0xc4, 0xb8, 0xee, 0x73, 0x9e, 0x13, 0x29}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x10, 0xc8, 0xc7, 0x4c, 0x84, 0x56, 0x67, 0xa6, 0x95, 0x0c, 0xf4, 0x9b, 0x5e, 0x27, 0x4f, 0x6c, 0x00, 0xc1, 0x03, 0x66, 0x54, 0xb7, 0x88, 0x1d, 0xf5, 0xe6, 0xf7, 0xcf, 0xf1, 0xcf, 0x29, 0xc5}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x3b, 0x30, 0xba, 0xae, 0xea, 0xd5, 0x97, 0x34, 0x48, 0xc3, 0x6d, 0xd1, 0x16, 0x68, 0x77, 0xa4, 0xb9, 0x9b, 0x52, 0x37, 0x59, 0x14, 0x25, 0x27, 0x6e, 0x74, 0xfc, 0xae, 0x4e, 0xcb, 0xcf, 0xb5}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	aws_AWSNitroTPM          = M{0: {Expected: []byte{0x73, 0x7f, 0x76, 0x7a, 0x12, 0xf5, 0x4e, 0x70, 0xee, 0xcb, 0xc8, 0x68, 0x40, 0x11, 0x32, 0x3a, 0xe2, 0xfe, 0x2d, 0xd9, 0xf9, 0x07, 0x85, 0x57, 0x79, 0x69, 0xd7, 0xa2, 0x01, 0x3e, 0x8c, 0x12}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x13, 0x49, 0x27, 0x7f, 0x96, 0xe6, 0xaa, 0x31, 0x3d, 0xa3, 0x97, 0x06, 0x47, 0xcc, 0xf7, 0xcd, 0x18, 0x7d, 0x3e, 0x03, 0xfa, 0x19, 0x8e, 0x54, 0xce, 0x29, 0x40, 0xb6, 0xa2, 0x05, 0xf8, 0x45}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x3c, 0x12, 0xaf, 0xf7, 0xdb, 0x89, 0x44, 0xa6, 0xbe, 0x38, 0x60, 0x32, 0x45, 0x1f, 0x32, 0x59, 0x1f, 0xcc, 0x0c, 0x77, 0xae, 0x13, 0xc9, 0x87, 0x2e, 0x97, 0x20, 0xaf, 0x4e, 0x7a, 0x41, 0xf1}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xf7, 0xc0, 0x9b, 0x7a, 0x02, 0x9b, 0xdb, 0x69, 0x1f, 0x54, 0xd9, 0xfc, 0xd2, 0x00, 0xbc, 0x0b, 0xa1, 0x7e, 0x6c, 0x5b, 0x34, 0xf2, 0x63, 0x06, 0x0c, 0x38, 0x2e, 0xf3, 0xae, 0xda, 0x7b, 0x98}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	aws_AWSSEVSNP            = M{0: {Expected: []byte{0x7b, 0x06, 0x8c, 0x0c, 0x3a, 0xc2, 0x9a, 0xfe, 0x26, 0x41, 0x34, 0x53, 0x6b, 0x9b, 0xe2, 0x6f, 0x1d, 0x4c, 0xcd, 0x57, 0x5b, 0x88, 0xd3, 0xc3, 0xce, 0xab, 0xf3, 0x6a, 0xc9, 0x9c, 0x02, 0x78}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x7b, 0x76, 0x71, 0x93, 0x7f, 0x32, 0xbf, 0x38, 0xde, 0x90, 0xc8, 0x86, 0x04, 0x52, 0x0c, 0x5e, 0x46, 0xa1, 0xb5, 0xe0, 0xbb, 0xaa, 0x29, 0x57, 0xe0, 0x62, 0x5d, 0x07, 0x42, 0x81, 0x21, 0x3b}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xac, 0x9e, 0xf4, 0xf7, 0xbe, 0xfb, 0x71, 0xb8, 0x83, 0xfd, 0x37, 0x79, 0xcf, 0xb2, 0xdf, 0x5f, 0x05, 0xdd, 0x4c, 0x60, 0x82, 0xc6, 0x5f, 0x9e, 0xde, 0x35, 0xd7, 0xf5, 0x6e, 0x1d, 0x26, 0xe5}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x59, 0x79, 0xfc, 0xb1, 0xd0, 0x76, 0xf4, 0x32, 0xaf, 0x72, 0xcb, 0xaa, 0xa2, 0x1e, 0x33, 0xd4, 0x1e, 0xed, 0xd2, 0x9c, 0x84, 0x3d, 0x4e, 0x77, 0x12, 0x44, 0x71, 0x8b, 0xc5, 0x1e, 0x10, 0xef}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	azure_AzureSEVSNP        = M{1: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x78, 0x67, 0x6d, 0x2c, 0xde, 0x22, 0x65, 0xd6, 0xc9, 0xf0, 0x47, 0xdb, 0xf8, 0xcf, 0x21, 0x75, 0x5f, 0x14, 0x01, 0xaf, 0x01, 0x14, 0xe0, 0xb5, 0xa9, 0x0b, 0x38, 0x16, 0xfd, 0xc9, 0xf1, 0x31}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xf5, 0xe6, 0xfd, 0x5b, 0x52, 0x35, 0xaa, 0xca, 0xe7, 0x5c, 0x94, 0xc0, 0xd4, 0x9b, 0xb2, 0x14, 0xbf, 0x80, 0x5d, 0x09, 0x70, 0xb3, 0x59, 0xa1, 0x3c, 0xe1, 0xda, 0x76, 0x11, 0xb3, 0xf3, 0x39}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x95, 0x4f, 0x35, 0xab, 0xdc, 0xea, 0xb1, 0xb3, 0x35, 0x99, 0xb7, 0x22, 0x55, 0xb5, 0x48, 0x7d, 0xdc, 0x18, 0xf0, 0xac, 0x3f, 0xbb, 0x94, 0x4d, 0x72, 0xca, 0xa0, 0xa0, 0xd0, 0xc3, 0x8a, 0x36}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 	azure_AzureTrustedLaunch M
-	gcp_GCPSEVES             = M{1: {Expected: []byte{0x74, 0x5f, 0x2f, 0xb4, 0x23, 0x5e, 0x46, 0x47, 0xaa, 0x0a, 0xd5, 0xac, 0xe7, 0x81, 0xcd, 0x92, 0x9e, 0xb6, 0x8c, 0x28, 0x87, 0x0e, 0x7d, 0xd5, 0xd1, 0xa1, 0x53, 0x58, 0x54, 0x32, 0x5e, 0x56}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x84, 0x13, 0x48, 0x6b, 0x82, 0x41, 0x03, 0x8f, 0xa3, 0x4c, 0xa5, 0x77, 0xc4, 0x4a, 0x7e, 0x2a, 0x48, 0x3f, 0x07, 0xd1, 0x92, 0x87, 0x25, 0x67, 0x8b, 0x65, 0x59, 0xf9, 0xa0, 0xbf, 0x92, 0xde}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x46, 0x22, 0x77, 0x89, 0x88, 0xb8, 0x57, 0x37, 0xa8, 0x8b, 0xad, 0x3b, 0x87, 0x4a, 0x7a, 0x5c, 0x41, 0x03, 0x29, 0xb7, 0xd6, 0x47, 0x16, 0xf1, 0x5e, 0x7a, 0x32, 0x44, 0x2a, 0x37, 0x16, 0xe0}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x6d, 0xde, 0x83, 0x87, 0x2d, 0xbc, 0x7a, 0x7a, 0x1b, 0x30, 0x35, 0x5d, 0xa7, 0x10, 0xbb, 0xea, 0x4c, 0xe9, 0x9e, 0x7a, 0xe5, 0x38, 0x92, 0x99, 0xce, 0x03, 0x3e, 0x8f, 0x73, 0xc3, 0xe6, 0xda}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	gcp_GCPSEVES             = M{1: {Expected: []byte{0x74, 0x5f, 0x2f, 0xb4, 0x23, 0x5e, 0x46, 0x47, 0xaa, 0x0a, 0xd5, 0xac, 0xe7, 0x81, 0xcd, 0x92, 0x9e, 0xb6, 0x8c, 0x28, 0x87, 0x0e, 0x7d, 0xd5, 0xd1, 0xa1, 0x53, 0x58, 0x54, 0x32, 0x5e, 0x56}, ValidationOpt: WarnOnly}, 2: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 3: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 4: {Expected: []byte{0x2e, 0x74, 0x9d, 0x82, 0x1a, 0xd2, 0x83, 0xeb, 0x1a, 0x89, 0x38, 0x10, 0xf3, 0x81, 0x45, 0x06, 0xf3, 0x41, 0x29, 0xa6, 0xfa, 0x45, 0x60, 0x34, 0x07, 0xba, 0x3a, 0xf4, 0xad, 0x76, 0x2f, 0xe5}, ValidationOpt: Enforce}, 6: {Expected: []byte{0x3d, 0x45, 0x8c, 0xfe, 0x55, 0xcc, 0x03, 0xea, 0x1f, 0x44, 0x3f, 0x15, 0x62, 0xbe, 0xec, 0x8d, 0xf5, 0x1c, 0x75, 0xe1, 0x4a, 0x9f, 0xcf, 0x9a, 0x72, 0x34, 0xa1, 0x3f, 0x19, 0x8e, 0x79, 0x69}, ValidationOpt: WarnOnly}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x81, 0x00, 0x3d, 0xdc, 0xa6, 0x20, 0xf1, 0x0a, 0x1f, 0x14, 0x78, 0x6f, 0x08, 0xa5, 0x23, 0x6a, 0xb9, 0x31, 0xa7, 0x6e, 0x77, 0xa4, 0xc3, 0xcf, 0xe3, 0x8c, 0x38, 0x8b, 0x5e, 0x76, 0x22, 0x95}, ValidationOpt: Enforce}, 11: {Expected: []byte{0xb7, 0xdd, 0x7b, 0x3a, 0xa7, 0x8a, 0x6f, 0x7b, 0x8b, 0x35, 0xc5, 0xb8, 0x8b, 0x75, 0x41, 0x27, 0x0b, 0x69, 0x64, 0x24, 0x9c, 0xae, 0x2d, 0xd4, 0x23, 0x34, 0x95, 0xd0, 0xa0, 0x15, 0xa0, 0xa7}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 	qemu_QEMUTDX             M
-	qemu_QEMUVTPM            = M{4: {Expected: []byte{0x18, 0xac, 0x38, 0xad, 0x3c, 0x0f, 0x51, 0xd2, 0x38, 0x3e, 0xbe, 0xda, 0x93, 0x99, 0xef, 0xc5, 0xfe, 0x27, 0xf6, 0x3d, 0xe9, 0xf7, 0x6d, 0x1d, 0x42, 0x49, 0xe4, 0x6f, 0x90, 0x46, 0x78, 0x7b}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0x23, 0x3b, 0x66, 0x64, 0x16, 0x15, 0x14, 0x24, 0xae, 0x55, 0x4c, 0x58, 0xab, 0x88, 0xa7, 0xc9, 0x0a, 0xf8, 0x45, 0x31, 0x31, 0x11, 0x05, 0x06, 0x63, 0xf1, 0xac, 0xda, 0xc8, 0xd5, 0xe9, 0xfe}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x7a, 0x95, 0xc8, 0xae, 0x5a, 0x94, 0x1e, 0xb7, 0xad, 0x8d, 0x1d, 0x46, 0x21, 0xd0, 0x48, 0x3e, 0x44, 0x92, 0x52, 0x7d, 0xe7, 0xe0, 0xf4, 0x07, 0xe1, 0x52, 0x96, 0x02, 0x17, 0x12, 0xeb, 0x74}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
+	qemu_QEMUVTPM            = M{4: {Expected: []byte{0x9b, 0x33, 0xed, 0x21, 0xd7, 0x81, 0x44, 0xcf, 0xde, 0x9f, 0xa5, 0xa5, 0x42, 0x3f, 0x9c, 0x10, 0xbc, 0x84, 0x97, 0xdf, 0xd8, 0xd7, 0x06, 0x93, 0x5b, 0xdb, 0x24, 0x66, 0xd0, 0x9c, 0x1d, 0xbf}, ValidationOpt: Enforce}, 8: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 9: {Expected: []byte{0xca, 0xdd, 0x27, 0x2d, 0xcf, 0x7d, 0x3f, 0x0d, 0x04, 0xa5, 0x31, 0x32, 0x7c, 0x34, 0x4c, 0x04, 0xb7, 0x7e, 0x73, 0xed, 0x6f, 0x60, 0xe2, 0x23, 0x03, 0x94, 0x9e, 0x09, 0xc8, 0xa1, 0xbf, 0x67}, ValidationOpt: Enforce}, 11: {Expected: []byte{0x6e, 0xb2, 0x67, 0x0e, 0x57, 0xa0, 0x05, 0x56, 0xda, 0x92, 0x37, 0x9e, 0x79, 0x77, 0xa6, 0x02, 0x54, 0xe9, 0x6c, 0x2d, 0xe8, 0x11, 0xf6, 0x04, 0xc5, 0xeb, 0x5a, 0x61, 0x19, 0xde, 0xf1, 0x87}, ValidationOpt: Enforce}, 12: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 13: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}, 14: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: WarnOnly}, 15: {Expected: []byte{0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}, ValidationOpt: Enforce}}
 )

internal/config/image_enterprise.go

@@ -10,5 +10,5 @@ package config
 
 const (
 	// defaultImage is the default image to use.
-	defaultImage = "ref/main/stream/nightly/v2.14.0-pre.0.20231214193540-2c50abcc919b"
+	defaultImage = "v2.14.2"
 )

s3proxy/deploy/s3proxy/Chart.yaml

@@ -2,4 +2,4 @@ apiVersion: v2
 name: s3proxy
 description: Helm chart to deploy s3proxy.
 type: application
-version: 0.0.0
+version: 2.14.2

terraform-provider-constellation/examples/full/aws_cluster.tf

@@ -53,7 +53,7 @@ module "aws_infrastructure" {
       instance_type = "m6a.xlarge"
       disk_size     = 30
       disk_type     = "gp3"
-      initial_count = 2
+      initial_count = 3
       zone          = local.zone
     },
     worker_default = {
@@ -70,6 +70,7 @@ module "aws_infrastructure" {
   image_id                                = data.constellation_image.bar.image.reference
   region                                  = local.region
   zone                                    = local.zone
+  internal_load_balancer                  = false
   debug                                   = false
   enable_snp                              = true
   custom_endpoint                         = ""
@@ -100,6 +101,7 @@ resource "constellation_cluster" "aws_example" {
   measurement_salt        = local.measurement_salt
   out_of_cluster_endpoint = module.aws_infrastructure.out_of_cluster_endpoint
   in_cluster_endpoint     = module.aws_infrastructure.in_cluster_endpoint
+  api_server_cert_sans    = module.aws_infrastructure.api_server_cert_sans
   network_config = {
     ip_cidr_node    = module.aws_infrastructure.ip_cidr_node
     ip_cidr_service = "10.96.0.0/12"

terraform-provider-constellation/examples/full/azure_cluster.tf

@@ -64,10 +64,11 @@ module "azure_infrastructure" {
       initial_count = 2
     }
   }
-  location       = local.location
-  image_id       = data.constellation_image.bar.image.reference
-  resource_group = module.azure_iam.base_resource_group
-  create_maa     = true
+  location               = local.location
+  image_id               = data.constellation_image.bar.image.reference
+  resource_group         = module.azure_iam.base_resource_group
+  internal_load_balancer = false
+  create_maa             = true
 }
 
 data "constellation_attestation" "foo" {
@@ -95,6 +96,7 @@ resource "constellation_cluster" "azure_example" {
   measurement_salt        = local.measurement_salt
   out_of_cluster_endpoint = module.azure_infrastructure.out_of_cluster_endpoint
   in_cluster_endpoint     = module.azure_infrastructure.in_cluster_endpoint
+  api_server_cert_sans    = module.azure_infrastructure.api_server_cert_sans
   azure = {
     tenant_id                   = module.azure_iam.tenant_id
     subscription_id             = module.azure_iam.subscription_id

terraform-provider-constellation/examples/full/gcp_cluster.tf

@@ -56,7 +56,7 @@ module "gcp_infrastructure" {
       instance_type = "n2d-standard-4"
       disk_size     = 30
       disk_type     = "pd-ssd"
-      initial_count = 2
+      initial_count = 3
       zone          = local.zone
     },
     worker_default = {
@@ -68,11 +68,12 @@ module "gcp_infrastructure" {
       zone          = local.zone
     }
   }
-  image_id = data.constellation_image.bar.image.reference
-  debug    = false
-  zone     = local.zone
-  region   = local.region
-  project  = local.project_id
+  image_id               = data.constellation_image.bar.image.reference
+  debug                  = false
+  zone                   = local.zone
+  region                 = local.region
+  project                = local.project_id
+  internal_load_balancer = false
 }
 
 data "constellation_attestation" "foo" {
@@ -99,6 +100,7 @@ resource "constellation_cluster" "gcp_example" {
   measurement_salt        = local.measurement_salt
   out_of_cluster_endpoint = module.gcp_infrastructure.out_of_cluster_endpoint
   in_cluster_endpoint     = module.gcp_infrastructure.in_cluster_endpoint
+  api_server_cert_sans    = module.gcp_infrastructure.api_server_cert_sans
   gcp = {
     project_id          = module.gcp_infrastructure.project
     service_account_key = module.gcp_iam.service_account_key

terraform-provider-constellation/internal/provider/cluster_resource.go

@@ -572,9 +572,10 @@ func (r *ClusterResource) apply(ctx context.Context, data *ClusterResourceModel,
 	}
 
 	// parse API server certificate SANs
-	apiServerCertSANs := make([]string, 0, len(data.APIServerCertSANs.Elements()))
-	for _, san := range data.APIServerCertSANs.Elements() {
-		apiServerCertSANs = append(apiServerCertSANs, san.String())
+	apiServerCertSANs, convertDiags := r.getAPIServerCertSANs(ctx, data)
+	diags.Append(convertDiags...)
+	if diags.HasError() {
+		return diags
 	}
 
 	// parse network config
@@ -1050,6 +1051,15 @@ func (r *ClusterResource) getMicroserviceVersion(ctx context.Context, data *Clus
 	return ver, diags
 }
 
+func (r *ClusterResource) getAPIServerCertSANs(ctx context.Context, data *ClusterResourceModel) ([]string, diag.Diagnostics) {
+	if data.APIServerCertSANs.IsNull() {
+		return nil, nil
+	}
+	apiServerCertSANs := make([]string, 0, len(data.APIServerCertSANs.Elements()))
+	diags := data.APIServerCertSANs.ElementsAs(ctx, &apiServerCertSANs, false)
+	return apiServerCertSANs, diags
+}
+
 // tfContextLogger is a logging adapter between the tflog package and
 // Constellation's logger.
 type tfContextLogger struct {

version.txt

@@ -1 +1 @@
-v2.14.0-pre
+v2.14.2