Commit Graph

  • 1a9b33d738 Restructure config and constants katexochen 2022-04-06 10:36:58 +02:00
  • 66bb632a69 Generalized arg validation katexochen 2022-04-04 15:55:58 +02:00
  • 938beec2ef add KMS to multi-coordinator (#68) Benedict Schlüter 2022-04-20 15:22:39 +02:00
  • 2d9b64df14 fix disk mapper path Leonard Cohnen 2022-04-19 19:33:27 +02:00
  • 4f6af8d304 remove aws image Leonard Cohnen 2022-04-19 12:12:34 +02:00
  • 990ca20469 increase gRPC error message verbosity (#62) Benedict Schlüter 2022-04-16 20:57:33 +02:00
  • d869e10a85 Bump coordinator images to 1649852687 Benedict 2022-04-13 18:51:38 +02:00
  • c1c12fd7d0 coordinator-integrationtest: cover multi-coordinator Benedict 2022-04-13 12:40:57 +02:00
  • 8d5c50014d coordinator: add new multi-coord gRPC functions Benedict 2022-04-13 12:40:36 +02:00
  • f0e35a43d4 peer: save PublicIP instead of publicEndpoint / add multi-coord gRPCs Benedict 2022-04-13 12:39:55 +02:00
  • 55a1aa783f Persist Node State to disk after node activation Malte Poll 2022-04-13 09:18:32 +02:00
  • 0501d07f4a VPN: Add method to retrieve wireguard private key Malte Poll 2022-04-13 09:17:05 +02:00
  • e10a47f255 file handler: Add "mkdirAll" flag Malte Poll 2022-04-13 09:15:27 +02:00
  • 49a1a07049 AB#1902 Ping Coordinator from initramfs for key (#53) Daniel Weiße 2022-04-12 14:24:36 +02:00
  • 7e990fb91a disable AWS CI Leonard Cohnen 2022-04-12 10:36:10 +02:00
  • 1c0f52e04e refactor cli vpn config (#46) 3u13r 2022-04-12 14:20:46 +02:00
  • 4c73c5076e Integration tests: use simulated TPM in debug coordinator Malte Poll 2022-04-11 11:46:11 +02:00
  • bcd8c36777 Coordinator start: add skeleton to check for pre-existing node state Malte Poll 2022-04-11 10:38:03 +02:00
  • 462052427f Add constellation node state Malte Poll 2022-04-11 10:35:17 +02:00
  • be004c971d Coordinator vTPM: add method to check for previous node initialization Malte Poll 2022-04-11 10:34:15 +02:00
  • af1aca4b34 Coordinator Role: json marshaling as string Malte Poll 2022-04-11 10:31:10 +02:00
  • 0f35a9a5c2 fix debugd readme url (#54) Malte Poll 2022-04-12 10:19:51 +02:00
  • 4abb483902 Ref/store ectd (#45) datosh 2022-04-12 09:38:10 +02:00
  • dfee5910b3 Add disk-mapper to build pipeline Daniel Weiße 2022-04-07 15:40:51 +02:00
  • 5548cde22e Add integration test workflows Daniel Weiße 2022-04-07 16:39:21 +02:00
  • 0e2025b67c Add state disk volume mounter Daniel Weiße 2022-04-05 15:12:20 +02:00
  • 4b156be15e Add kernel panic util function Daniel Weiße 2022-04-05 16:50:51 +02:00
  • b30101aba6 AB#1898 cli: fix create aws node count Thomas Tendyck 2022-04-07 13:50:09 +02:00
  • f0dc48e3c7 AB#1898 cli: fix create aws arg validation Thomas Tendyck 2022-04-07 10:56:32 +02:00
  • 393c1f7dd1 cli: fix coordinator/node count order Thomas Tendyck 2022-04-06 14:01:32 +02:00
  • 8b7bafb482 add coordinator count to cli Leonard Cohnen 2022-04-04 16:44:15 +02:00
  • dbfbdfe3cd cli: format output in writeOutput Thomas Tendyck 2022-04-05 09:13:09 +02:00
  • ea4b9d2d85 coordinator: send additional status log messages to cli in ActivateAsCoordinator Thomas Tendyck 2022-04-05 09:12:18 +02:00
  • 7315e80374 cli: add output before long-running actions Thomas Tendyck 2022-04-05 09:11:45 +02:00
  • daf2280e3f create state disk on constellation create Malte Poll 2022-04-05 14:25:49 +02:00
  • ede83bd555 update CoreOS builder pipeline to allow parallel runs Malte Poll 2022-04-04 14:02:53 +02:00
  • 2cd8d580d8 Bump coreos images to 1649063903 Malte Poll 2022-04-04 12:51:00 +02:00
  • f77536b38b Use containerd CRI socket in kubernetes Malte Poll 2022-04-01 10:05:46 +02:00
  • f74d7e22eb update aws image Leonard Cohnen 2022-04-01 16:59:13 +02:00
  • 604ed96160 Move READMEs to their own packages Daniel Weiße 2022-04-01 13:02:45 +02:00
  • aaed8ad1e3 debugd: stop discovery loop once coordinator was downloaded successfully or coordinator binary exists Malte Poll 2022-03-30 13:21:05 +02:00
  • 6954683f18 debugd: filter own instance from list of discovered debugd instances Malte Poll 2022-03-30 13:26:17 +02:00
  • 7143b29caf debugd: return download error if download is not attempted due to retry backoff Malte Poll 2022-03-30 13:25:34 +02:00
  • 995f2f6270 Docs about dependencies for cryptsetup (#35) datosh 2022-04-01 14:54:21 +02:00
  • c0105a59aa cli: set MTU in wg-quick conf Thomas Tendyck 2022-03-31 16:40:59 +02:00
  • 935b2a4490 Move and fix GCP storage integration test Daniel Weiße 2022-03-31 09:25:38 +02:00
  • 373b07d590 Add large key test Daniel Weiße 2022-03-29 10:19:38 +02:00
  • 2622d3c39d Add GCP storage unit tests Daniel Weiße 2022-03-25 11:55:49 +01:00
  • ef5c85dad2 Add Azure storage tests Daniel Weiße 2022-03-28 16:49:17 +02:00
  • 436ade2dc9 Assert for ErrDEKUnset Daniel Weiße 2022-03-28 14:16:58 +02:00
  • 81ca9ad8bb Add AWS storage unit tests Daniel Weiße 2022-03-25 11:55:09 +01:00
  • f1299a40f4 Update GCP KMS tests and implementation Daniel Weiße 2022-03-25 11:02:02 +01:00
  • fefff8ee92 Add Azure KMS unit tests Daniel Weiße 2022-03-24 18:00:17 +01:00
  • 19bb65338d Update AWS KMS unit tests Daniel Weiße 2022-03-24 16:48:38 +01:00
  • ed45ba2777 Rename things in vpn package katexochen 2022-03-29 11:55:47 +02:00
  • 66fe34ee32 Write WireGuard config file on init katexochen 2022-03-29 11:38:14 +02:00
  • 5cf8f83ed8 Remove pubkey flag from init katexochen 2022-03-28 08:58:56 +02:00
  • 7275f318f8 Switch GCP default zone to europe Malte Poll 2022-03-30 14:14:31 +02:00
  • 8d7253ca75 Bump coreos images to 1648560610 Malte Poll 2022-03-29 17:03:07 +02:00
  • 8a6825c429 refactor storewrapper IP handling / add coordinator IP-Block Benedict 2022-03-30 14:28:14 +02:00
  • 04be09d5d3 store: new error type (noElementsLeft) Benedict 2022-03-30 14:25:44 +02:00
  • 0718452bf9 etcdstore: fix missing errorcheck Benedict 2022-03-30 14:24:37 +02:00
  • 3282995bda AB#1877 Set location in azure cloud config Daniel Weiße 2022-03-29 17:31:18 +02:00
  • 719b6d5f6f separate addPeer into VPN- and store-add (#18) Benedict Schlüter 2022-03-29 16:49:11 +02:00
  • cf738bb973 Cloud provider Azure: add Secrets / Volumes / VolumeMounts / Env to cluster-autoscaler deployment Malte Poll 2022-03-29 13:26:35 +02:00
  • 97685648a4 Cloud provider GCP: add Secrets / Volumes / VolumeMounts / Env to cluster-autoscaler deployment Malte Poll 2022-03-29 13:26:27 +02:00
  • 203ae6df96 Cloud provider AWS: add Secrets / Volumes / VolumeMounts / Env to cluster-autoscaler deployment Malte Poll 2022-03-29 13:26:03 +02:00
  • 1e7794b4c2 Add Secrets / Volumes / VolumeMounts / Env to cluster-autoscaler deployment Malte Poll 2022-03-29 13:25:04 +02:00
  • efdd88459b fix cloud-node-manager stub Malte Poll 2022-03-29 13:21:47 +02:00
  • f04765dab5 re-enable azure node groups in statefile and send azure scaleset as autoscaling group Malte Poll 2022-03-29 13:30:50 +02:00
  • 71b5a0c6c0 Set vmType in azure cloud config Daniel Weiße 2022-03-29 13:28:23 +02:00
  • eb3411f2c1 Allow waiting for multiple states (#11) Daniel Weiße 2022-03-29 09:10:22 +02:00
  • 9df71da33f coordinator-integrationtest: docker-build cache go dependencies (#19) Benedict Schlüter 2022-03-28 20:28:00 +02:00
  • aac6e0b239 debugd: prevent deadlock by checking if file exists before aquiring read lock and cleanup downloaded coordinator binary if download fails Malte Poll 2022-03-23 10:30:49 +01:00
  • 391e36c0ac create and use kubeadm join token with no expiry Malte Poll 2022-03-28 11:33:28 +02:00
  • 037569cd85 Cloud provider fake: adopt changes to CCM / CNM for debug_coordinator Malte Poll 2022-03-25 11:20:16 +01:00
  • 20811794c2 Cloud provider Azure: adopt changes to CCM / CNM for Azure Malte Poll 2022-03-28 12:24:41 +02:00
  • 3c1ddfb94e Cloud provider GCP: adopt changes to CCM / CNM for GCP Malte Poll 2022-03-25 10:55:37 +01:00
  • a59ce30e7b Cloud provider AWS: adopt changes to CCM / CNM for AWS Malte Poll 2022-03-25 10:53:28 +01:00
  • 78d2358b9c k8s: Use cloud provider ip as kubelet node-ip (if available) Malte Poll 2022-03-25 10:51:59 +01:00
  • f5eddf8af0 Cloud providers: Add CloudNodeManager Malte Poll 2022-03-25 10:49:18 +01:00
  • 2158377f9f Cloud providers: Extend CCM with ExtraArgs / ConfigMaps / Secrets / Volumes / VolumeMounts and provide CloudServiceAccountURI Malte Poll 2022-03-25 10:42:27 +01:00
  • bf726ebd87 k8s resource marshaler tests Malte Poll 2022-03-25 10:19:29 +01:00
  • 2ab846dd1a Extend k8s resource marshaling to slices Malte Poll 2022-03-25 10:19:03 +01:00
  • 009e186b69 CoreOS dm-verity: do not compress GCP images twice Malte Poll 2022-03-25 16:41:39 +01:00
  • 6f695892bf move updatePeers directly to the VPN and omit the store layer (#4) Benedict Schlüter 2022-03-25 16:05:17 +01:00
  • 6bbb783af8 misc lint Thomas Tendyck 2022-03-25 12:50:16 +01:00
  • cece88b6a0 lint debugd Thomas Tendyck 2022-03-25 12:50:07 +01:00
  • 2503d6e132 remove unused helpers in storewrapper Thomas Tendyck 2022-03-25 12:49:39 +01:00
  • b1818ba089 fix stuttering StoreValueUnsetError Thomas Tendyck 2022-03-25 12:49:22 +01:00
  • 5660f813f0 Remove kekID from cryptmapper Daniel Weiße 2022-03-24 15:21:19 +01:00
  • 7626765d87 Rework mount folder structure Daniel Weiße 2022-03-24 15:17:57 +01:00
  • f8e9c70337 Rework kms folder structure Daniel Weiße 2022-03-24 15:16:20 +01:00
  • 1f856878e8 PCR notes (#13) Daniel Weiße 2022-03-25 09:11:21 +01:00
  • 5a85a7adfc coordinator-integrationtest: remove unnecessary port-binding (#2) Benedict Schlüter 2022-03-24 21:12:17 +01:00
  • 0dfeb04fb3 use manual workflow input Leonard Cohnen 2022-03-24 10:32:51 +01:00
  • 1f843d4593 AB#1770 (semi)automatic PCR updates (#7) Daniel Weiße 2022-03-23 14:10:58 +01:00
  • 752571bbf8 Upgrade go-cryptsetup to latest version Daniel Weiße 2022-03-23 11:00:07 +01:00
  • 656ad704d2 remove unused CI secrets Leonard Cohnen 2022-03-23 11:21:32 +01:00
  • 559133f40d fix call-aws-enclave Leonard Cohnen 2022-03-23 10:02:01 +01:00