Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-08-08 23:12:18 -04:00
Code Issues Projects Releases Packages Wiki Activity

WIP

Browse source
This commit is contained in:
flxflx 2024-09-25 12:58:07 +02:00
parent 0ea55e0b0f
commit 5a5f9c7c3f
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
dev-docs/security-overview.md
View file

@ -98,4 +98,8 @@ In Constellation, a virtual private network (VPN) exists between all nodes of a
## Cluster upgrade
Whenever a cluster is [upgraded](https://docs.edgeless.systems/constellation/workflows/upgrade) to a new version of the node image, the CLI sends the corresponding measurements via the Kubernetes API server. The new measurements are stored in etcd within the cluster and replace any previous measurements. The new measurements are then used automatically by the JoinServer for the verification of new nodes.
Whenever a cluster is [upgraded](https://docs.edgeless.systems/constellation/workflows/upgrade) to a new version of the node image, the CLI sends the corresponding measurements XXX config XXX via the Kubernetes API server. The new measurements XXX config XXX are stored in etcd within the cluster and replace any previous measurements XXX config XXX. The new measurements are then used automatically by the JoinServer for the verification of new nodes.
XXX: The command automatically triggers the restarting of nodes.
Upgrading a node image potentially also upgrades