Affected by GO-2023-1583 and 3 other vulnerabilities

GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

GO-2025-4076: Constellation has insecure LUKS2 persistent storage partitions which may be opened and used in github.com/edgelesssys/constellation

helm

package

v2.2.0 Latest Latest Go to latest Published: Nov 8, 2022 License: AGPL-3.0 Imports: 16 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Client struct {
	*action.Install
}

Client is used to install microservice during cluster initialization. It is a wrapper for a helm install action.

func New(log *logger.Logger) (*Client, error)

New creates a new client with the given logger.

func (h *Client) InstallCilium(ctx context.Context, kubectl k8sapi.Client, release helm.Release, in k8sapi.SetupPodNetworkInput) error

InstallCilium sets up the cilium pod network.

func (h *Client) InstallConstellationServices(ctx context.Context, release helm.Release, extraVals map[string]any) error

InstallConstellationServices installs the constellation-services chart. In the future this chart should bundle all microservices.