initserver

Apr 5, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Mar 11, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Feb 29, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Feb 15, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 30, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 3, 2024 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Dec 28, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Dec 27, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Dec 19, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Nov 15, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Oct 10, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Sep 14, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Aug 16, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Aug 14, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jul 20, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jul 10, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jun 5, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Apr 4, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

May 2, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Apr 3, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Mar 7, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Mar 8, 2023 GO-2024-2727

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 24, 2023 GO-2023-1622 +1 more

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Feb 22, 2023 GO-2023-1622 +1 more

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Feb 16, 2023 GO-2023-1622 +1 more

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 27, 2023 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 23, 2023 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 10, 2023 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Jan 10, 2023 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Dec 12, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Dec 12, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Changes in this version

+ type MetadataAPI interface

+ InitSecretHash func(ctx context.Context) ([]byte, error)

Nov 8, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Nov 17, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Nov 14, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Nov 8, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Oct 10, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Oct 7, 2022 GO-2023-1583 +2 more

  GO-2023-1583: User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation

  GO-2023-1622: Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation

  GO-2024-2727: Constellation has pods exposed to peers in VPC in github.com/edgelesssys/constellation

Changes in this version

+ type ClusterInitializer interface

+ InitCluster func(ctx context.Context, cloudServiceAccountURI string, k8sVersion string, ...) ([]byte, error)

+ type IssuerWrapper struct

+ func NewIssuerWrapper(issuer atls.Issuer, vmType vmtype.VMType, idkeydigest []byte) IssuerWrapper

+ func (i *IssuerWrapper) IDKeyDigest() []byte

+ func (i *IssuerWrapper) VMType() vmtype.VMType

+ type Server struct

+ func New(lock locker, kube ClusterInitializer, issuerWrapper IssuerWrapper, ...) *Server

+ func (s *Server) Init(ctx context.Context, req *initproto.InitRequest) (*initproto.InitResponse, error)

+ func (s *Server) Serve(ip, port string, cleaner cleaner) error

+ func (s *Server) Stop()