- + @@ -17,9 +17,9 @@ Constellation is a Kubernetes engine that aims to provide the best possible data ## Goals -From a security perspective, Constellation is designed to keep all data always encrypted and to prevent access from the infrastructure layer (i.e., remove the infrastructure from the TCB). This includes access from datacenter employees, privileged cloud admins, and attackers coming through the infrastructure (e.g., malicious co-tenants escalating their privileges). +From a security perspective, Constellation is designed to keep all data always encrypted and to prevent access from the infrastructure layer (i.e., remove the infrastructure from the TCB). This includes access from datacenter employees, privileged cloud admins, and attackers coming through the infrastructure (e.g., malicious co-tenants escalating their privileges). -From a DevOps perspective, Constellation is designed to work just like what you would expect from a modern K8s engine. +From a DevOps perspective, Constellation is designed to work just like what you would expect from a modern K8s engine. ## Use cases @@ -46,7 +46,7 @@ Encrypting your K8s is good for: ### 🚀 Performance and scale -* High availability with multi-master architecture and stacked etcd topology +* High availability with multi-master architecture and stacked etcd topology * Dynamic cluster autoscaling with verification and secure bootstrapping of new nodes * Competitive performance ([see K-Bench comparison with AKS and GKE][performance]) @@ -85,14 +85,14 @@ You may want to start with one of the following sections. ## Contributing -Refer to [`CONTRIBUTING.md`](CONTRIBUTING.md) on how to contribute. The most important points: +Refer to [`CONTRIBUTING.md`](CONTRIBUTING.md) on how to contribute. The most important points: * Pull requests are welcome! You need to agree to our [Contributor License Agreement][cla-assistant]. * Please follow the [Code of Conduct](/CODE_OF_CONDUCT.md). * ⚠️ To report a security issue, please write to security@edgeless.systems. ## License -The Constellation source code is licensed under the [GNU Affero General Public License v3.0](https://www.gnu.org/licenses/agpl-3.0.en.html). Edgeless Systems provides pre-built and signed binaries and images for Constellation. You may use these free of charge to create and run services for internal consumption. You can find more information in the [license] section of the docs. +The Constellation source code is licensed under the [GNU Affero General Public License v3.0](LICENSE). Edgeless Systems provides pre-built and signed binaries and images for Constellation. You may use these free of charge to create and run services for internal consumption. You can find more information in the [license] section of the docs. [architecture]: https://docs.edgeless.systems/constellation/architecture/overview diff --git a/docs/docs/overview/license.md b/docs/docs/overview/license.md index 498aefcaa..d5b6d980d 100644 --- a/docs/docs/overview/license.md +++ b/docs/docs/overview/license.md @@ -2,19 +2,19 @@ ## Source code -Constellation's source code is available on [GitHub](https://github.com/edgelesssys/constellation) under the permissive [GNU Affero General Public License (AGPL)](https://www.gnu.org/licenses/agpl-3.0.en.html). +Constellation's source code is available on [GitHub](https://github.com/edgelesssys/constellation) under the [GNU Affero General Public License v3.0](https://github.com/edgelesssys/constellation/blob/main/LICENSE). ## Binaries Edgeless Systems provides ready-to-use and [signed](../architecture/attestation.md#chain-of-trust) binaries of Constellation. This includes the CLI and the [node images](../architecture/images.md). -These binaries may be used free of charge within the bounds of Constellation's [**Community License**](#community-license). An [**Enterprise License**](#enterprise-license) can be purchased from Edgeless Systems. +These binaries may be used free of charge within the bounds of Constellation's [**Community License**](#community-license). An [**Enterprise License**](#enterprise-license) can be purchased from Edgeless Systems. The Constellation CLI displays relevant license information when you initialize your cluster. You are responsible for staying within the bounds of your respective license. Constellation doesn't enforce any limits so as not to endanger your cluster's availability. ### Community License -You are free to use the Constellation binaries provided by Edgeless Systems to create services for internal consumption. You must not use the Constellation binaries to provide hosted services of any type to third parties. Edgeless Systems gives no warranties and offers no support. +You are free to use the Constellation binaries provided by Edgeless Systems to create services for internal consumption. You must not use the Constellation binaries to provide hosted services of any type to third parties. Edgeless Systems gives no warranties and offers no support. These terms may be different for future releases. diff --git a/docs/versioned_docs/version-1.5/overview/license.md b/docs/versioned_docs/version-1.5/overview/license.md index 498aefcaa..d5b6d980d 100644 --- a/docs/versioned_docs/version-1.5/overview/license.md +++ b/docs/versioned_docs/version-1.5/overview/license.md @@ -2,19 +2,19 @@ ## Source code -Constellation's source code is available on [GitHub](https://github.com/edgelesssys/constellation) under the permissive [GNU Affero General Public License (AGPL)](https://www.gnu.org/licenses/agpl-3.0.en.html). +Constellation's source code is available on [GitHub](https://github.com/edgelesssys/constellation) under the [GNU Affero General Public License v3.0](https://github.com/edgelesssys/constellation/blob/main/LICENSE). ## Binaries Edgeless Systems provides ready-to-use and [signed](../architecture/attestation.md#chain-of-trust) binaries of Constellation. This includes the CLI and the [node images](../architecture/images.md). -These binaries may be used free of charge within the bounds of Constellation's [**Community License**](#community-license). An [**Enterprise License**](#enterprise-license) can be purchased from Edgeless Systems. +These binaries may be used free of charge within the bounds of Constellation's [**Community License**](#community-license). An [**Enterprise License**](#enterprise-license) can be purchased from Edgeless Systems. The Constellation CLI displays relevant license information when you initialize your cluster. You are responsible for staying within the bounds of your respective license. Constellation doesn't enforce any limits so as not to endanger your cluster's availability. ### Community License -You are free to use the Constellation binaries provided by Edgeless Systems to create services for internal consumption. You must not use the Constellation binaries to provide hosted services of any type to third parties. Edgeless Systems gives no warranties and offers no support. +You are free to use the Constellation binaries provided by Edgeless Systems to create services for internal consumption. You must not use the Constellation binaries to provide hosted services of any type to third parties. Edgeless Systems gives no warranties and offers no support. These terms may be different for future releases. diff --git a/hack/check-licenses.sh b/hack/check-licenses.sh index ebd34cdf4..d1329df30 100755 --- a/hack/check-licenses.sh +++ b/hack/check-licenses.sh @@ -35,7 +35,7 @@ while read line; do AGPL-3.0) case $pkg in - github.com/edgelesssys/constellation/*) + github.com/edgelesssys/constellation) ;; *) not_allowed @@ -45,8 +45,6 @@ while read line; do Unknown) case $pkg in - github.com/edgelesssys/constellation/*) - ;; *) not_allowed ;;