ci: add malicious join test

[msanft]

Context

We want an e2e-test that verifies that a malicious / unattested node cannot join a Constellation cluster.

Proposed change(s)

• Create a test that sends a join request to an existing cluster while using a stub attestation issuer and thus not having a valid attestation document. This test is deployed into a cluster as a Kubernetes job. The outputs of these jobs are parsed afterwards to verify a correct completion of the test. While this might be quite hacky, it was the easiest way to deploy the test and access all the related resources, without adding too much complexity to the core of the test.
• Currently, the test only uses the "stub" issuer. Potential extensions could use more sophisticated issuers that trigger more fine-grained checks in our attestation logic, e.g. VCEK matching report, etc.

Additional info

• e2e test azure

Checklist

• Add labels (e.g., for changelog category)
• Is PR title adequate for changelog?
• Link to Milestone

[github-actions]

Coverage report

Package	Old	New	Trend
e2e/malicious-join	0.00%	[no test files]	🚨

[3u13r]

I'm thinking about 2 possible (future) extensions of this test:

1. Try to join via every join-pod and not via the svc.
2. Make the requests from a local test and not from inside the cluster. This would also allow to simply use our normal test pattern with require.NoError() and assert.Equal().

[msanft]

1. Try to join via every join-pod and not via the svc.

Can be implemented in a future extension as discussed in-person.

2. Make the requests from a local test and not from inside the cluster. This would also allow to simply use our normal test pattern with require.NoError() and assert.Equal().

Obsolete as discussed in-person.

[netlify]

✅ Deploy Preview for constellation-docs canceled.

Name	Link
🔨 Latest commit	9088f73
🔍 Latest deploy log	https://app.netlify.com/sites/constellation-docs/deploys/6504649ba7b09d0008d7dfa3

[3u13r]

Please fix the tidy check. Started another e2e run: https://github.com/edgelesssys/constellation/actions/runs/6109204057

[msanft]

e2e run

[msanft]

https://github.com/edgelesssys/constellation/actions/runs/6182501369 one last e2e test

[katexochen]

lgtm. Maybe @malt3 could take a quick look over the bazel stuff, as I'm not entirely sure with it.

[malt3]

I mostly looked at the bazel part. LGTM.