gsc
gsc copied to clipboard
Add example of AKS attestation and secret provisioning
Signed-off-by: Veena Saini [email protected]
Description of the changes
This PR provides a reference implementation to show how gramine attestation (DCAP) samples works inside AKS cluster. We have created two docker images for ra-tls-secret-prov server and ra-tls-secret-prov client. Both images are deployed as part of AKS confidential compute cluster and both quote generation and quote verification are successful inside AKS cluster.
For client deployment inside AKS cluster, we have gsc/Examples/aks-attestation/aks-secret-prov-client-deployment.yaml and for server deployment gsc/Examples/aks-attestation/aks-secret-prov-server-deployment.yaml file.
For more details, we have created a readme file.
This PR is an updated version of https://github.com/gramineproject/gsc/pull/11.
How to test this PR?
Please follow gsc/Examples/aks-attestation/README.md
@mkow @woju pls review. We had beaten this up royally over many weeks so hopefully should be a quick one for you :)