Moritz Sanft a5021c52d3 joinservice: cache certificates for Azure SEV-SNP attestation (#2336) ... * add ASK caching in joinservice Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use cached ASK in Azure SEV-SNP attestation Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * update test charts Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix linter Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix typ Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * make caching mechanism less provider-specific Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * update buildfiles Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add `omitempty` flag Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> * frontload certificate getter Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> * rename frontloaded function Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * pass cached certificates to constructor Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix race condition Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix marshalling of empty certs Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix validator usage Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * [wip] add certcache tests Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add certcache tests Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix validator test Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * remove unused fields in validator Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix certificate precedence Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use separate context Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * linter fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * linter fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * Remove unnecessary comment Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * use background context Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * Use error format directive Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * `azure` -> `Azure` Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * improve error messages Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add x509 -> PEM util function Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use crypto util functions Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix certificate replacement logic Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * only require ASK from certcache Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix comment typo Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>		2023-09-29 14:29:50 +02:00
..
api	rename armcomputev4 -> armcomputev5	2023-09-27 15:06:55 +02:00
atls	attestation: add awsSEVSNP as new variant (#1900)	2023-06-09 15:41:02 +02:00
attestation	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
cloud	join: join over lb if available (#2348)	2023-09-25 10:23:35 +02:00
compatibility	helm: fix upgrade command unintentionally skipping all service upgrades (#1992)	2023-06-30 16:46:05 +02:00
config	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
constants	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
containerimage	cli: use Bazel container images	2023-04-18 15:35:15 +02:00
crypto	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
cryptsetup	disk-mapper: set LUKS2 token to allow reusing unintialized state disks (#2083)	2023-07-18 16:20:03 +02:00
file	todo responsibilities and cleanup (#1837)	2023-06-01 12:33:06 +02:00
grpc	cdbg: make endpoint deployment failure more transparent (#1883)	2023-06-12 13:45:34 +02:00
imagefetcher	api: add functions to transparently handle signatures upon API interaction (#2142)	2023-08-01 16:48:13 +02:00
installer	go: remove redefinitions of builtins	2023-03-20 08:41:01 -04:00
kms	bazel: set integration go build tag	2023-08-17 10:46:45 +02:00
kubernetes	cli: refactor kubernetes package (#2232)	2023-08-21 16:15:32 +02:00
license	bazel: set integration go build tag	2023-08-17 10:46:45 +02:00
logger	deps: update grpc-middleware to v2 (#2286)	2023-08-29 14:07:19 +02:00
nodestate	bazel: add build files for go (#1186)	2023-03-09 15:23:42 +01:00
osimage	image: allow toggling secure boot in image upload	2023-09-27 17:58:19 +02:00
retry	bazel: add build files for go (#1186)	2023-03-09 15:23:42 +01:00
role	terraform: azure node groups (#1955)	2023-06-22 16:53:40 +02:00
semver	cli: parse image and k8s versions as semver (#2235)	2023-08-23 14:37:53 +02:00
sigstore	api: refine signature types	2023-09-04 11:20:13 +02:00
staticupload	staticupload: correctly set invalidation timeout	2023-09-04 11:20:13 +02:00
versions	ci: collect cluster metrics to OpenSearch (#2347)	2023-09-27 16:17:31 +02:00