mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-10-01 01:36:09 -04:00
8e4feb7e2a
* add Azure Terraform module * add maa-patching command to cli * refactor release process * factor out image fetching to own action * add CI * generate * fix some unnecessary changes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use `constellation maa-patch` in ci * insecure flag when using debug image Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * only update maa url if existing Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * make node group zone optional on aws and gcp Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * [remove] register updated workflow Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * Revert "[remove] register updated workflow" This reverts commit e70b9515b7eabbcbe0d41fa1296c48750cd02ace. * create MAA Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * make maa-patching only run on azure Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add comment Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * require node group zone for GCP and AWS * remove unnecessary bazel action * stamp version to correct file * refer to `maa-patch` command in docs * run Azure test in weekly e2e * comment / naming improvements * remove sa_account resource * disable spellcheck ot use "URL" * `create_maa` variable * don't write maa url to config Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * default to nightly image * use input ref and stream * fix command check * don't set region in weekly e2e call * patch maa if url is not empty Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * remove `create_maa` variable * remove binaries Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * remove undefined input * replace invalid attestation URL error message Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * fix punctuation Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * skip hidden commands in clidocgen Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * enable spellcheck before code block * move spellcheck trigger out of info block Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix workflow dependencies * let image default to CLI version --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
70 lines
2.3 KiB
HCL
70 lines
2.3 KiB
HCL
locals {
|
|
region = substr(var.zone, 0, length(var.zone) - 1)
|
|
}
|
|
|
|
module "aws_iam" {
|
|
source = "../infrastructure/iam/aws"
|
|
name_prefix = var.name_prefix
|
|
region = local.region
|
|
}
|
|
|
|
|
|
resource "null_resource" "ensure_yq" {
|
|
provisioner "local-exec" {
|
|
command = <<EOT
|
|
../common/install-yq.sh
|
|
EOT
|
|
}
|
|
triggers = {
|
|
always_run = timestamp()
|
|
}
|
|
}
|
|
|
|
module "fetch_image" {
|
|
source = "../common/fetch-image"
|
|
csp = "aws"
|
|
attestation_variant = var.enable_snp ? "aws-sev-snp" : "aws-nitro-tpm"
|
|
region = local.region
|
|
image = var.image
|
|
depends_on = [module.aws_iam, null_resource.ensure_yq]
|
|
}
|
|
|
|
|
|
module "aws" {
|
|
source = "../infrastructure/aws"
|
|
name = var.name
|
|
node_groups = var.node_groups
|
|
iam_instance_profile_worker_nodes = module.aws_iam.worker_nodes_instance_profile
|
|
iam_instance_profile_control_plane = module.aws_iam.control_plane_instance_profile
|
|
ami = module.fetch_image.image
|
|
region = local.region
|
|
zone = var.zone
|
|
debug = var.debug
|
|
enable_snp = var.enable_snp
|
|
custom_endpoint = var.custom_endpoint
|
|
}
|
|
|
|
module "constellation" {
|
|
source = "../constellation-cluster"
|
|
csp = "aws"
|
|
debug = var.debug
|
|
name = var.name
|
|
image = var.image
|
|
microservice_version = var.microservice_version
|
|
kubernetes_version = var.kubernetes_version
|
|
uid = module.aws.uid
|
|
clusterEndpoint = module.aws.out_of_cluster_endpoint
|
|
inClusterEndpoint = module.aws.in_cluster_endpoint
|
|
initSecretHash = module.aws.initSecret
|
|
ipCidrNode = module.aws.ip_cidr_nodes
|
|
apiServerCertSANs = module.aws.api_server_cert_sans
|
|
node_groups = var.node_groups
|
|
aws_config = {
|
|
region = local.region
|
|
zone = var.zone
|
|
iam_instance_profile_worker_nodes = module.aws_iam.worker_nodes_instance_profile
|
|
iam_instance_profile_control_plane = module.aws_iam.control_plane_instance_profile
|
|
}
|
|
depends_on = [module.aws, null_resource.ensure_yq]
|
|
}
|