/* Package constants contains the constants used by Constellation. Constants should never be overwritable by command line flags or configuration files. */ package constants import "time" const ( // // Constellation. // // ConstellationNameLength is the maximum length of a Constellation's name. ConstellationNameLength = 37 // ConstellationMasterSecretStoreName is the name for the Constellation secrets in Kubernetes. ConstellationMasterSecretStoreName = "constellation-mastersecret" // ConstellationMasterSecretKey is the name of the key for master secret in the master secret store secret. ConstellationMasterSecretKey = "mastersecret" // // Ports. // ActivationServicePort = 9090 ActivationServiceNodePort = 30090 VerifyServicePortHTTP = 8080 VerifyServicePortGRPC = 9090 VerifyServiceNodePortHTTP = 30080 VerifyServiceNodePortGRPC = 30081 // KMSPort is the port the KMS server listens on. KMSPort = 9000 // KMSATLSPort is the port the KMS aTLS server listens on. KMSATLSPort = 9001 // KMSNodePort is the aTLS port exposed as a NodePort. KMSNodePort = 30091 CoordinatorPort = 9000 EnclaveSSHPort = 2222 SSHPort = 22 WireguardPort = 51820 NVMEOverTCPPort = 8009 // Default NodePort Range // https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport NodePortFrom = 30000 NodePortTo = 32767 KubernetesPort = 6443 // // Filenames. // StateFilename = "constellation-state.json" ClusterIDsFileName = "constellation-id.json" ConfigFilename = "constellation-conf.yaml" DebugdConfigFilename = "cdbg-conf.yaml" AdminConfFilename = "constellation-admin.conf" MasterSecretFilename = "constellation-mastersecret.base64" WGQuickConfigFilename = "wg0.conf" CoreOSAdminConfFilename = "/etc/kubernetes/admin.conf" KubeadmCertificateDir = "/etc/kubernetes/pki" // // Filenames for Constellation's micro services. // // ServiceBasePath is the base path for the mounted micro services files. ServiceBasePath = "/var/config" // MeasurementsFilename is the filename of CC measurements. MeasurementsFilename = "measurements" // IDFilename is the filename of Constellation's IDs. IDFilename = "id" // // Cryptographic constants. // StateDiskKeyLength = 32 // DerivedKeyLengthDefault is the default length in bytes for KMS derived keys. DerivedKeyLengthDefault = 32 // MasterSecretLengthDefault is the default length in bytes for CLI generated master secrets. MasterSecretLengthDefault = 32 // MasterSecretLengthMin is the minimal length in bytes for user provided master secrets. MasterSecretLengthMin = 16 // // CLI. // MinControllerCount = 1 MinWorkerCount = 1 // // Kubernetes. // // KubernetesVersion installed by kubeadm. KubernetesVersion = "stable-1.23" KubernetesJoinTokenTTL = 15 * time.Minute // // VPN. // // WireguardAdminMTU is the MTU designated for the admin's WireGuard interface. // WireGuard doesn't support Path MTU Discovery. Thus, its default MTU can be too high on some networks. WireguardAdminMTU = 1300 ) // VersionInfo is the version of a binary. Left as a separate variable to allow override during build. var VersionInfo = "0.0.0"