Skip to content

adding attestation feature #162

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
yoshiisato wants to merge 52 commits into from
Closed

adding attestation feature #162

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
52 commits
Select commit Hold shift + click to select a range
90df84f
added tdx in yaml
yoshiisato Apr 9, 2025
ca5d40c
fix yaml
yoshiisato Apr 9, 2025
cfe80a6
fixed host kernel check
yoshiisato Apr 9, 2025
d80e36b
debugging bbolt
yoshiisato Apr 10, 2025
9d40de7
added proxy env var injection
yoshiisato Apr 11, 2025
0b31ab1
debugging k8s_create
yoshiisato Apr 11, 2025
7a64bb4
debugging k8s cluster creation
yoshiisato Apr 11, 2025
339b6c0
k8s cluster creation debug 2
yoshiisato Apr 11, 2025
e4c9e9e
debugging k8s cluster creation
yoshiisato Apr 11, 2025
f10f25c
debugging k8s cluster launch
yoshiisato Apr 11, 2025
595266c
fixed debug mode
yoshiisato Apr 11, 2025
cccf5f9
added new internal ip to no_proxy
yoshiisato Apr 11, 2025
4f3e137
k8s reset possibly
yoshiisato Apr 12, 2025
032612b
action workflow stalling
yoshiisato Apr 12, 2025
334bcad
stalling debug 1
yoshiisato Apr 12, 2025
72a1d17
debug on for k8s stalling
yoshiisato Apr 12, 2025
c48ca34
k8s stall, reset kubeadm
yoshiisato Apr 12, 2025
370a356
forgot -E flag
yoshiisato Apr 12, 2025
3d9be2b
added debug prints
yoshiisato Apr 13, 2025
03cc3e2
added kubeadm sudo reset
yoshiisato Apr 13, 2025
359dfa7
shell=True
yoshiisato Apr 13, 2025
4b6a789
changed print to print all occurances
yoshiisato Apr 13, 2025
ffc20d4
testing wihtout kubeadm reset
yoshiisato Apr 13, 2025
23e1d0c
changed systemd (containerd) runtime proxy config on machine
yoshiisato Apr 13, 2025
aaf8df6
forgot sudo systemctl daemon-reload
yoshiisato Apr 13, 2025
7afd047
k8s stalling fixed, reverted k8s_create
yoshiisato Apr 13, 2025
d411139
debugging knative install, fixed k8s_create
yoshiisato Apr 13, 2025
9440c4a
added debugging onto knative function
yoshiisato Apr 13, 2025
f6e29b0
added no proxy for metalLB
yoshiisato Apr 13, 2025
53704fa
changed tests.yml to allow gha on draft
yoshiisato Apr 13, 2025
9bec04e
changed proxy configs
yoshiisato Apr 13, 2025
77296ba
changed kubeadm proxy config
yoshiisato Apr 13, 2025
30a61ee
changed kubeadm proxy config 2
yoshiisato Apr 13, 2025
a2137e6
changed kubeadm proxy config 3
yoshiisato Apr 13, 2025
be1ca11
changed kubeadm proxy config 4
yoshiisato Apr 13, 2025
19c2372
docker proxy config nuke
yoshiisato Apr 13, 2025
ed0b971
restarted daemon
yoshiisato Apr 13, 2025
0614f3a
defaulted and standardized proxy config
yoshiisato Apr 14, 2025
2ebd209
defaulted and standardized proxy config 2
yoshiisato Apr 14, 2025
d465a14
defaulted and standardized proxy config 3
yoshiisato Apr 14, 2025
f965d10
defaulted and standardized proxy config 4
yoshiisato Apr 14, 2025
f5de173
defaulted and standardized proxy config 5
yoshiisato Apr 14, 2025
837a730
defaulted and standardized proxy config 6
yoshiisato Apr 14, 2025
8d1b2ff
defaulted and standardized proxy config 7 (k8s cluster again)
yoshiisato Apr 14, 2025
704a6c4
defaulted and standardized proxy config 8 (k8s cluster again)
yoshiisato Apr 14, 2025
7a09afc
defaulted and standardized proxy config 9 (k8s cluster again)
yoshiisato Apr 14, 2025
d372c87
defaulted and standardized proxy config 10 (k8s cluster again)
yoshiisato Apr 14, 2025
e9e50ae
defaulted and standardized proxy config 11 (k8s cluster again)
yoshiisato Apr 14, 2025
a4ec87a
defaulted and standardized proxy config 12 (k8s cluster again) delete…
yoshiisato Apr 14, 2025
d6fae92
defaulted and standardized proxy config 13 (k8s cluster again) added …
yoshiisato Apr 14, 2025
4e242d0
defaulted and standardized proxy config 14 (k8s cluster again) added …
yoshiisato Apr 14, 2025
3ec3a67
added verbosity to kubelet error
yoshiisato Apr 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions .github/workflows/tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,8 +46,7 @@ jobs:
matrix:
include:
- tee: snp
# Temporarily disable TDX tests, until server is available again
# - tee: tdx
- tee: tdx

runs-on: [self-hosted, "${{ matrix.tee }}"]
env:
Expand Down
2 changes: 1 addition & 1 deletion tasks/sc2.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -224,7 +224,7 @@ def deploy(ctx, debug=False, clean=False):
# Fail-fast if we are not using the expected host kernel
host_kernel_version = get_host_kernel_version()
host_kernel_expected_prefix = get_host_kernel_expected_prefix()
if not host_kernel_version.startswith(host_kernel_expected_prefix):
if not host_kernel_version.startswith("6.8.0") and host_kernel_version.endswith("intel"):

@csegarragonz csegarragonz Apr 9, 2025

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This would only work for tdx, but not for SNP. I would suggest adding another method: get_host_kernel_expected_suffix() in tasks/util/kernel.py that returns nothing for SNP, and intel for TDX. You must also change the prefix function to return the right prefix depending on the HW.

print(
f"ERROR: wrong host kernel: expected prefix {host_kernel_expected_prefix} "
f"- got {host_kernel_version}"
Expand Down