mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-07-25 00:05:17 -04:00
![]() When enabling node-to-node encryption, Cilium does not encrypt control-plane to control-plane traffic by default since they say that they cannot gurantee that the generated private key for a node is persisted across reboots. In Constellation we use stateful VMs which when rebooted still have the cilium_wg0 interface containing the private key. Therefore, we can enable this type of encryption. |
||
---|---|---|
.. | ||
cloudcmd | ||
cmd | ||
featureset | ||
helm | ||
kubecmd | ||
libvirt | ||
state | ||
terraform |