mirror of
https://github.com/edgelesssys/constellation.git
synced 2024-12-29 09:26:17 -05:00
8f21972aec
* variant: move into internal/attestation * attesation: move aws attesation into subfolder nitrotpm * config: add aws-sev-snp variant * cli: add tf option to enable AWS SNP For now the implementations in aws/nitrotpm and aws/snp are identical. They both contain the aws/nitrotpm impl. A separate commit will add the actual attestation logic.
65 lines
1.5 KiB
Go
65 lines
1.5 KiB
Go
//go:build e2e
|
|
|
|
/*
|
|
Copyright (c) Edgeless Systems GmbH
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-only
|
|
*/
|
|
|
|
package upgrade
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
"github.com/edgelesssys/constellation/v2/internal/api/versionsapi"
|
|
"github.com/edgelesssys/constellation/v2/internal/attestation/measurements"
|
|
"github.com/edgelesssys/constellation/v2/internal/attestation/variant"
|
|
"github.com/edgelesssys/constellation/v2/internal/cloud/cloudprovider"
|
|
"github.com/edgelesssys/constellation/v2/internal/imagefetcher"
|
|
)
|
|
|
|
type upgradeInfo struct {
|
|
measurements measurements.M
|
|
shortPath string
|
|
imageRef string
|
|
}
|
|
|
|
func fetchUpgradeInfo(ctx context.Context, csp cloudprovider.Provider,
|
|
attestationVariant variant.Variant, toImage, region string,
|
|
) (upgradeInfo, error) {
|
|
info := upgradeInfo{
|
|
measurements: make(measurements.M),
|
|
shortPath: toImage,
|
|
}
|
|
|
|
ver, err := versionsapi.NewVersionFromShortPath(toImage, versionsapi.VersionKindImage)
|
|
if err != nil {
|
|
return upgradeInfo{}, err
|
|
}
|
|
|
|
measurementsURL, _, err := versionsapi.MeasurementURL(ver)
|
|
if err != nil {
|
|
return upgradeInfo{}, err
|
|
}
|
|
|
|
fetchedMeasurements := measurements.M{}
|
|
if err := fetchedMeasurements.FetchNoVerify(
|
|
ctx, http.DefaultClient,
|
|
measurementsURL,
|
|
ver, csp, attestationVariant,
|
|
); err != nil {
|
|
return upgradeInfo{}, err
|
|
}
|
|
info.measurements = fetchedMeasurements
|
|
|
|
fetcher := imagefetcher.New()
|
|
imageRef, err := fetcher.FetchReference(ctx, csp, attestationVariant, toImage, region)
|
|
if err != nil {
|
|
return upgradeInfo{}, err
|
|
}
|
|
info.imageRef = imageRef
|
|
|
|
return info, nil
|
|
}
|