insecure flag when using debug image

Signed-off-by: Moritz Sanft <[email protected]>
edgelesssys · Nov 10, 2023 · a83078d · a83078d
1 parent 771a137
commit a83078d
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 1 deletion.
diff --git a/terraform/aws-constellation/main.tf b/terraform/aws-constellation/main.tf
@@ -47,6 +47,7 @@ module "aws" {
 module "constellation" {
   source               = "../constellation-cluster"
   csp                  = "aws"
+  debug                = var.debug
   name                 = var.name
   image                = var.image
   microservice_version = var.microservice_version

diff --git a/terraform/azure-constellation/main.tf b/terraform/azure-constellation/main.tf
@@ -38,6 +38,7 @@ module "azure" {
 module "constellation" {
   source               = "../constellation-cluster"
   csp                  = "azure"
+  debug                = var.debug
   name                 = var.name
   image                = var.image
   microservice_version = var.microservice_version

diff --git a/terraform/constellation-cluster/main.tf b/terraform/constellation-cluster/main.tf
@@ -148,7 +148,7 @@ resource "null_resource" "config" {
         ./yq eval '.microserviceVersion = "${var.microservice_version}"' -i constellation-conf.yaml
       fi
       ${local.yq_node_groups}
-      ./constellation config fetch-measurements
+      ./constellation config fetch-measurements ${var.debug == true ? "--insecure" : ""}
     EOT
   }
 

diff --git a/terraform/constellation-cluster/variables.tf b/terraform/constellation-cluster/variables.tf
@@ -123,3 +123,9 @@ variable "microservice_version" {
   type        = string
   description = "Microservice version."
 }
+
+variable "debug" {
+  type        = bool
+  default     = false
+  description = "DON'T USE IN PRODUCTION: Enable debug mode and allow the use of debug images."
+}
diff --git a/terraform/gcp-constellation/main.tf b/terraform/gcp-constellation/main.tf
@@ -60,6 +60,7 @@ resource "null_resource" "sa_account_file" {
 module "constellation" {
   source               = "../constellation-cluster"
   csp                  = "gcp"
+  debug                = var.debug
   name                 = var.name
   image                = var.image
   microservice_version = var.microservice_version