Ready for release v0.2.0

Signed-off-by: Volkan Özçelik <[email protected]>

app/keeper/cmd/main.go

@@ -21,6 +21,8 @@ import (
 const appName = "SPIKE Keeper"
 
 func main() {
+	log.Log().Info(appName, "msg", appName, "version", config.KeeperVersion)
+
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
 
@@ -33,9 +35,8 @@ func main() {
 	trust.Authenticate(spiffeid)
 
 	log.Log().Info(appName,
-		"msg", fmt.Sprintf("Starting service: %s v%s",
+		"msg", fmt.Sprintf("Started service: %s v%s",
 			appName, config.KeeperVersion))
-
 	if err := net.Serve(
 		source, handle.InitializeRoutes,
 		auth.CanTalkToKeeper,

app/nexus/cmd/main.go

@@ -7,6 +7,7 @@ package main
 import (
 	"context"
 	"errors"
+	"fmt"
 	"time"
 
 	"github.com/spiffe/spike/app/nexus/internal/env"
@@ -24,6 +25,8 @@ import (
 const appName = "SPIKE Nexus"
 
 func main() {
+	log.Log().Info(appName, "msg", appName, "version", config.NexusVersion)
+
 	ctx, cancel := context.WithCancel(context.Background())
 	defer cancel()
 
@@ -53,9 +56,9 @@ func main() {
 	defer ticker.Stop()
 	go poll.Tick(ctx, source, ticker)
 
-	log.Log().Info(appName, "msg",
-		"Starting service.", "version", config.NexusVersion)
-
+	log.Log().Info(appName,
+		"msg", fmt.Sprintf("Started service: %s v%s",
+			appName, config.NexusVersion))
 	if err := net.Serve(
 		source, handle.InitializeRoutes,
 		auth.CanTalkToNexus,

docs/quickstart.md

@@ -111,6 +111,14 @@ cd $WORKSPACE/spike
 Once SPIRE Server is running, start the SPIRE Agent:
 
 ```bash
+# The below script will ask for your password to give privileges to SPIRE Agent.
+#
+# This will allow SPIRE agent to introspect the system and get information
+# about the running processes (path information, user information, SHA256 of the
+# binary, etc.). This is part of the SPIRE Agent's workload attestation process.
+# Without this, SPIRE Agent will have limited access to the system and may not
+# be able to fully attest the workloads.
+
 ./hack/spire-agent-starter.sh
 ```
 
@@ -130,6 +138,9 @@ window.
 Start the workloads:
 
 ```bash
+# Optional: Increase the log level to debug:
+export SPIKE_SYSTEM_LOG_LEVEL=debug
+
 cd $WORKSPACE/spike
 ./nexus  # Nexus
 ./keeper # Keeper

hack/register-leonardo.sh

@@ -7,7 +7,9 @@
 PILOT_PATH="$(pwd)/spike"
 PILOT_SHA=$(sha256sum "$PILOT_PATH" | cut -d' ' -f1)
 
+echo "Copying SPIKE pilot to /usr/local/bin/spike..."
 sudo cp "$PILOT_PATH" /usr/local/bin/spike
+echo "Copied SPIKE pilot to /usr/local/bin/spike."
 
 PILOT_PATH="$(pwd)/spike"
 PILOT_SHA=$(sha256sum "$PILOT_PATH" | cut -d' ' -f1)

internal/config/config.go

@@ -9,13 +9,9 @@ import (
 	"path/filepath"
 )
 
-const NexusVersion = "0.1.0"
-const PilotVersion = "0.1.0"
-const KeeperVersion = "0.1.0"
-
-const NexusIssuer = "spike-nexus"
-const NexusAdminSubject = "spike-admin"
-const NexusAdminTokenId = "spike-admin-jwt"
+const NexusVersion = "0.2.0"
+const PilotVersion = "0.2.0"
+const KeeperVersion = "0.2.0"
 
 // SpikeNexusDataFolder returns the path to the directory where Nexus stores
 // its encrypted backup for its secrets and other data.

internal/log/log.go

@@ -5,6 +5,7 @@
 package log
 
 import (
+	"fmt"
 	"log"
 	"log/slog"
 	"os"
@@ -32,6 +33,8 @@ func Log() *slog.Logger {
 		Level: env.LogLevel(),
 	}
 
+	fmt.Println("loglevel: ", opts.Level)
+
 	handler := slog.NewJSONHandler(os.Stdout, opts)
 
 	logger = slog.New(handler)