experimental support for OpenStack

[malt3]

Proposed change(s)

• use dummy attestation for OpenStack (temporary change while building OpenStack support)
• use OpenStack metadata api clients in debugd and bootstrapper
• enable constellation init for OpenStack
• add CCM image for OpenStack
• add helm charts for OpenStack
• add helm chart tests for AWS and OpenStack

Additional info

• OS image build

Checklist

• Update docs
• Add labels (e.g., for changelog category)
• Link to Milestone

[malt3]

I'm seeing two issues when trying constellation init on OpenStack:

• bootstrapper always tries to open the vtpm to check if node was already bootstrapped
• cert-manager does not get ready in time

You can use this patch for testing (it is valid for OpenStack tests but cannot go into main):

diff --git a/bootstrapper/cmd/bootstrapper/run.go b/bootstrapper/cmd/bootstrapper/run.go
index 0a6639b2..b74b91a8 100644
--- a/bootstrapper/cmd/bootstrapper/run.go
+++ b/bootstrapper/cmd/bootstrapper/run.go
@@ -46,7 +46,8 @@ func run(issuer atls.Issuer, tpm vtpm.TPMOpenFunc, fileHandler file.Handler,
 
        nodeBootstrapped, err := vtpm.IsNodeBootstrapped(tpm)
        if err != nil {
-               log.With(zap.Error(err)).Fatalf("Failed to check if node was previously bootstrapped")
+               // TODO(malt3): convert back to error
+               log.With(zap.Error(err)).Warnf("Failed to check if node was previously bootstrapped")
        }
 
        if nodeBootstrapped {
diff --git a/bootstrapper/internal/helm/helm.go b/bootstrapper/internal/helm/helm.go
index a1491c2e..3abd5039 100644
--- a/bootstrapper/internal/helm/helm.go
+++ b/bootstrapper/internal/helm/helm.go
@@ -85,7 +85,8 @@ func (h *Client) InstallCertManager(ctx context.Context, release helm.Release) e
        h.Timeout = 10 * time.Minute
 
        if err := h.install(ctx, release.Chart, release.Values); err != nil {
-               return err
+               // TODO(malt3): Remove this once cert-manager is stable.
+               h.log.With(zap.Error(err)).Warnf("failed to install cert-manager")
        }
 
        return nil

[katexochen]

reviewed up to and including d6fdd29

[3u13r]

Tested with the additional patch from the comment ✔️. Code LGTM after Paul's changes.

[katexochen]

lgtm. We should work on adding openstack e2e tests next.