constellation/bootstrapper/internal/kubernetes
Otto Bittner 7c5556864b AB#2333: Add AMD SNP-based attestation
Currently only available on Azure CVMs.

* Get the public attestation key from the TPM.
* Get the snp report from the TPM.
* Get the VCEK and ASK certificate from the metadata api.
* Verify VCEK using hardcoded root key (ARK)
* Verify SNP report using VCEK
* Verify HCLAkPub using SNP report by comparing
AK with runtimeData
* Extend unittest

Co-authored-by: Thomas Tendyck <51411342+thomasten@users.noreply.github.com>
Co-authored-by: Daniel Weiße <dw@edgeless.systems>
2022-08-29 16:29:33 +02:00
..
k8sapi AB#2333: Add AMD SNP-based attestation 2022-08-29 16:29:33 +02:00
cloud_provider.go Move cloud metadata packages and kubernetes resources marshaling to internal 2022-08-29 16:07:55 +02:00
k8sutil.go Move cloud metadata packages and kubernetes resources marshaling to internal 2022-08-29 16:07:55 +02:00
kubeconfig_test.go Rename coordinator to bootstrapper and rename roles 2022-07-14 17:25:18 +02:00
kubeconfig.go Rename coordinator to bootstrapper and rename roles 2022-07-14 17:25:18 +02:00
kubernetes_test.go move nodestate and role 2022-08-29 16:07:55 +02:00
kubernetes.go move util 2022-08-29 16:07:55 +02:00