From 9e1a38e44db5db62fd012fecb82b95f802db35a4 Mon Sep 17 00:00:00 2001 From: david-crypto Date: Fri, 22 Nov 2024 15:00:46 +0100 Subject: [PATCH] Finalized architecture overview --- docs/docs/architecture/intro.md | 27 ++++++++++++++------------- docs/sidebars.js | 2 +- 2 files changed, 15 insertions(+), 14 deletions(-) diff --git a/docs/docs/architecture/intro.md b/docs/docs/architecture/intro.md index 93f4f4655..591517a50 100644 --- a/docs/docs/architecture/intro.md +++ b/docs/docs/architecture/intro.md @@ -1,21 +1,22 @@ # Architecture -This section of the documentation offers a comprehensive overview of Constellation's inner workings. It details the chain of trust between various components and how they work together to ensure robust protection for your workloads. The main chapters include: +This section offers a comprehensive overview of Constellation's inner workings. It details the chain of trust between various components and how they work together to ensure robust protection for your workloads. The main chapters include: -- [**Protocol overview**](./overview.md): The recommended **starting point** for exploring the architecture. This chapter gives an overview of Constellation's architecture and explains the security protocol that underpins confidentiality and strong protection for your workloads. -- [**Key components**](./components/cli.md): This chapter outlines Constellation's key components, their purposes, and how users interact with them: +- [**Protocol overview**](./overview.md): The recommended **starting point** for exploring the architecture. This chapter overviews Constellation's architecture and explains the security protocol ensuring confidentiality and strong protection for your workloads. - - The [CLI](./components/cli.md) is used to create and orchestrate your cluster. - - Constellation's [core services](./components/microservices.md) run on control planes to ensure secure protocols for cluster expansion and integrity checks. - - Constellation provides [operating system images](./components/node-images.md) for Kubernetes control-plane and worker nodes, optimized for containerized workloads and prepared for confidential VMs. +- [**Key components**](./components/cli.md): This chapter outlines Constellation's main components, their roles, and how users interact with them: -- [**Protection mechanisms**](./security/attestation.md): A deeper dive into the various concepts that deliver strong protection guarantees for your Kubernetes clusters, including: + - [The CLI](./components/cli.md): A command-line tool to efficiently create and manage your cluster. + - [Constellation's core services](./components/microservices.md): These services run on the control planes, enabling secure protocols for cluster scaling and performing integrity checks. + - [Operating system images](./components/node-images.md): Constellation offers optimized OS images for Kubernetes control-plane and worker nodes, tailored for containerized workloads and ready for confidential VMs. - - [Attestation](./security/attestation.md): The process to verify that your workloads are in a secure and protected state. - - [Encrypted networking](./security/encrypted-networking.md): This section discusses how Constellation provides strong encryption for all cluster traffic. - - [Encrypted persistent storage](./security/encrypted-storage.md): Constellation's method for keeping your data secret when persistent data storage is needed. - - [Cryptographic keys and primitives](./security/keys.md): An overview of how Constellation manages cryptographic keys and the cryptographic primitives involved in guaranteeing the protection of your workloads and data. +- [**Security concept**](./security/attestation.md): A detailed exploration of the concepts that provide strong protection for your Kubernetes clusters, including: -- [**Observability**](./observability.md): In a Kubernetes context, observability is crucial for efficiently identifying and resolving issues. This chapter covers Constellation's observability capabilities. + - [Attestation](./security/attestation.md): Describes the process of verifying that your workloads are operating in a secure and protected state. + - [Encrypted networking](./security/encrypted-networking.md): Explains how Constellation ensures strong encryption for all cluster traffic. + - [Encrypted persistent storage](./security/encrypted-storage.md): Covers Constellation's approach to securely handling data in persistent storage. + - [Cryptographic keys and primitives](./security/keys.md): Provides an overview of how Constellation manages cryptographic keys and the primitives used to protect workloads and data. -- [**Versions**](./versions.md): An overview of Constellation's versions and support policy. +- [**Observability**](./observability.md): Observability is essential for identifying and resolving issues efficiently in a Kubernetes environment. This chapter highlights Constellation's observability features and capabilities. + +- [**Versions**](./versions.md): A comprehensive overview of Constellation's versions and support policy. diff --git a/docs/sidebars.js b/docs/sidebars.js index 3153e8ee2..fab2b433d 100644 --- a/docs/sidebars.js +++ b/docs/sidebars.js @@ -264,7 +264,7 @@ const sidebars = { }, { type: "category", - label: "Protection mechanisms", + label: "Security concept", items: [ { type: "doc",