chore(deps): update docker/dockerfile docker tag to v1.10

.github/workflows/e2e_libvirt.yaml

@@ -10,6 +10,9 @@ on:
       podvm_image:
         required: true
         type: string
+      caa_image:
+        required: true
+        type: string
       install_directory_artifact:
         description: The archive name of the install directory
         default: ''
@@ -48,6 +51,9 @@ jobs:
       - name: Read properties from versions.yaml
         run: |
           sudo snap install yq
+          echo "KBS_REPO=$(yq -e '.git.kbs.url' versions.yaml)" >> "$GITHUB_ENV"
+          echo "KBS_VERSION=$(yq -e '.git.kbs.reference' versions.yaml)" >> "$GITHUB_ENV"
+          echo "RUST_VERSION=$(yq -e '.tools.rust' versions.yaml)" >> "$GITHUB_ENV"
           go_version="$(yq '.tools.golang' versions.yaml)"
           [ -n "$go_version" ]
           echo "GO_VERSION=${go_version}" >> "$GITHUB_ENV"
@@ -79,13 +85,34 @@ jobs:
       - name: Config Libvirt
         run: |
           ./libvirt/config_libvirt.sh
+          echo "CAA_IMAGE=\"${{ inputs.caa_image }}\"" >> libvirt.properties
           # For debugging
           cat libvirt.properties
 
+      - name: Install rust toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+          toolchain: ${{ env.RUST_VERSION }}
+          override: true
+          profile: minimal
+
+      - name: Checkout kbs Repository and build kbs-client
+        run: |
+          git clone "${KBS_REPO}" test/trustee
+          pushd test/trustee
+          git checkout "${KBS_VERSION}"
+          pushd kbs
+          make CLI_FEATURES=sample_only cli
+          popd
+          # For debugging
+          ls ./target/release
+          popd
+
       - name: run tests
         id: runTests
         run: |
           export CLOUD_PROVIDER=libvirt
+          export DEPLOY_KBS=true
           export TEST_PROVISION="yes"
           export TEST_TEARDOWN="no"
           export TEST_PROVISION_FILE="$PWD/libvirt.properties"
@@ -106,6 +133,9 @@ jobs:
           echo "::group::cloud-api-adaptor logs"
           kubectl logs -l app=cloud-api-adaptor -n confidential-containers-system
           echo "::endgroup::"
+          echo "::group::peerpodconfig-ctrl-caa-daemon logs"
+          kubectl logs ds/peerpodconfig-ctrl-caa-daemon -n confidential-containers-system
+          echo "::endgroup::"
 
           for pod in $(kubectl get pods -o name 2>/dev/null); do
             echo "::group::Describe $pod"

.github/workflows/e2e_run_all.yaml

@@ -125,7 +125,6 @@ jobs:
           providers=(${{ env.PROVIDERS }})
           # If there aren't providers then something is wrong
           [[ ${#providers[@]} -gt 0 ]] || exit 1
-
           for provider in ${providers[@]}; do
             img="${E2E_IMG_REGISTRY}/cloud-api-adaptor"
             tag="${E2E_IMG_RELEASE_TAG}"
@@ -142,7 +141,8 @@ jobs:
             popd
           done
 
-      - uses: actions/upload-artifact@v3
+      - name: Upload install directory for next test runs
+        uses: actions/upload-artifact@v3
         with:
           name: install_directory
           path: src/cloud-api-adaptor/install/
@@ -167,6 +167,7 @@ jobs:
           - amd64
     uses: ./.github/workflows/e2e_libvirt.yaml
     with:
+      caa_image: ${{ inputs.registry }}/cloud-api-adaptor:${{ inputs.caa_image_tag }}-dev
       podvm_image: ${{ inputs.registry }}/podvm-${{ matrix.provider }}-${{ matrix.os }}-${{ matrix.arch }}:${{ inputs.podvm_image_tag }}
       install_directory_artifact: install_directory
-      git_ref: ${{ inputs.git_ref }}
+      git_ref: ${{ inputs.git_ref }}

.github/workflows/freeze-window.yaml

@@ -0,0 +1,16 @@
+name: Freeze window
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+jobs:
+  helloWorld:
+    runs-on: ubuntu-latest
+    steps:
+    - name: Blocking PRs
+      run: |
+        echo "We are in a freeze-window, this PR should not be merged."
+        echo "If you believe we are not, please contact the maintainers "
+        echo "and ask to disable this workflow."
+        exit 1

.github/workflows/podvm_binaries.yaml

@@ -71,7 +71,7 @@ jobs:
         password: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Build and push
-      run: make podvm-binaries
+      run: AA_KBC=cc_kbc make podvm-binaries
       env:
           PUSH: true
           REGISTRY: ${{ inputs.registry }}

.tekton/build-args.env

@@ -0,0 +1,2 @@
+YQ_VERSION=v4.35.1
+GOPATH=/usr/local/go/