Moritz Sanft a5021c52d3 joinservice: cache certificates for Azure SEV-SNP attestation (#2336) ... * add ASK caching in joinservice Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use cached ASK in Azure SEV-SNP attestation Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * update test charts Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix linter Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix typ Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * make caching mechanism less provider-specific Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * update buildfiles Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add `omitempty` flag Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> * frontload certificate getter Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> * rename frontloaded function Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * pass cached certificates to constructor Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix race condition Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix marshalling of empty certs Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix validator usage Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * [wip] add certcache tests Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add certcache tests Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix validator test Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * remove unused fields in validator Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix certificate precedence Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use separate context Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * linter fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * linter fixes Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * Remove unnecessary comment Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * use background context Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * Use error format directive Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * `azure` -> `Azure` Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com> * improve error messages Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * add x509 -> PEM util function Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * use crypto util functions Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix certificate replacement logic Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * only require ASK from certcache Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * tidy Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> * fix comment typo Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> --------- Signed-off-by: Moritz Sanft <58110325+msanft@users.noreply.github.com> Co-authored-by: Daniel Weiße <66256922+daniel-weisse@users.noreply.github.com> Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>		2023-09-29 14:29:50 +02:00
..
disktypes	config: define lists of valid disk types	2023-08-04 12:36:45 +02:00
imageversion	bazel: allow custom container_prefix (#1693)	2023-04-27 11:52:02 +02:00
instancetypes	config: validate instance type for aws SNP based on attestation variant (#1963)	2023-06-26 17:05:12 +02:00
migration	cli: store kubernetes version as strong type in config (#2287)	2023-09-19 13:50:00 +02:00
testdata	config: drop support for deprecated Azure's service principal authentication (#1906)	2023-06-14 17:50:57 +02:00
attestation_test.go	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
attestation.go	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
attestationversion_test.go	internal: fix unmarshalling attestation version numbers from JSON (#2187)	2023-08-09 15:11:14 +02:00
attestationversion.go	internal: fix unmarshalling attestation version numbers from JSON (#2187)	2023-08-09 15:11:14 +02:00
azure.go	cli: fix Azure SEV-SNP latest version logic (#2343)	2023-09-25 11:53:02 +02:00
BUILD.bazel	cli: store kubernetes version as strong type in config (#2287)	2023-09-19 13:50:00 +02:00
config_doc.go	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
config_test.go	cli: fix Azure SEV-SNP latest version logic (#2343)	2023-09-25 11:53:02 +02:00
config.go	joinservice: cache certificates for Azure SEV-SNP attestation (#2336)	2023-09-29 14:29:50 +02:00
image_enterprise.go	image: update measurements and image version (#2383)	2023-09-27 08:28:32 +02:00
image_oss.go	cli: split image into oss and enterprise (#1788)	2023-05-23 10:49:47 +02:00
validation_test.go	cli: use Semver type to represent microservice versions (#2125)	2023-07-25 14:20:25 +02:00
validation.go	cli: store kubernetes version as strong type in config (#2287)	2023-09-19 13:50:00 +02:00