constellation/internal
Nils Hanke 04c4cff9f6
AB#2436: Initial support for create/terminate AWS NitroTPM instances
* Add .DS_Store to .gitignore

* Add AWS to config / supported instance types

* Move AWS terraform skeleton to cli/internal/terraform

* Move currently unused IAM to hack/terraform/aws

* Print supported AWS instance types when AWS dev flag is set

* Block everything aTLS related (e.g. init, verify) until AWS attestation is available

* Create/Terminate AWS dev cluster when dev flag is set

* Restrict Nitro instances to NitroTPM supported specifically

* Pin zone for subnets

This is not great for HA, but for now we need to avoid the two subnets
ending up in different zones, causing the load balancer to not be able
to connect to the targets.

Should be replaced later with a better implementation that just uses
multiple subnets within the same region dynamically
based on # of nodes or similar.

* Add AWS/GCP to Terraform TestLoader unit test

* Add uid tag and create log group

Co-authored-by: Daniel Weiße <dw@edgeless.systems>
Co-authored-by: Malte Poll <mp@edgeless.systems>
2022-10-21 12:24:18 +02:00
..
atls Fix typo 2022-09-29 16:37:52 +02:00
attestation Move PCR indices for owner ID and cluster ID 2022-10-21 11:04:25 +02:00
azureshared add license headers 2022-09-05 09:17:25 +02:00
cloud AB#2479 Implement AWS cloud logging (#232) 2022-10-17 09:05:45 +02:00
config AB#2436: Initial support for create/terminate AWS NitroTPM instances 2022-10-21 12:24:18 +02:00
constants Remove all traces of CoreOS from the codebase 2022-10-21 11:04:25 +02:00
crds add license headers 2022-09-05 09:17:25 +02:00
crypto Upgrade go module to v2 2022-09-22 09:10:19 +02:00
deploy Refactor Helm deployments (#341) 2022-10-21 12:01:28 +02:00
file Use terraform in CLI to create QEMU cluster (#172) 2022-09-26 15:52:31 +02:00
gcpshared add license headers 2022-09-05 09:17:25 +02:00
grpc AB#2262 Automatic recovery (#158) 2022-09-26 09:57:40 +02:00
kubernetes add license headers 2022-09-05 09:17:25 +02:00
license Make wording around license less verbose 2022-09-27 11:24:01 +02:00
logger add license headers 2022-09-05 09:17:25 +02:00
nodestate Upgrade go module to v2 2022-09-22 09:10:19 +02:00
oid AB#2386: TrustedLaunch support for azure attestation 2022-09-05 12:03:48 +02:00
retry add license headers 2022-09-05 09:17:25 +02:00
role Add role.FromString and more tolerance 2022-10-13 15:29:29 +02:00
sigstore Improve measurements verification with Rekor (#206) 2022-10-11 13:57:52 +02:00
versions AB#2365 Upgrade k8s base deployments (add full support for k8s 1.25) (#277) 2022-10-17 08:58:13 +02:00
watcher Update module github.com/fsnotify/fsnotify to v1.6.0 (#325) 2022-10-20 10:16:20 +02:00