Mikko Ylinen
7f685b5d89
sgx: add QuoteVerification demo and cleanup hostNetwork dependency
...
hostNetwork usage for SGX demo pods is not absolutely necessary so it's
better to clean it up and make IAS "security" scanners happier. It was
originally used to be able to use "localhost" PCCS but this change now
adds an example how proper PCCS url can be configured using jq.
Additionally, SGX DCAP Quote Verification is added.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2023-08-31 14:23:19 +03:00
Tuomas Katila
cb04ca0deb
deployments: move from 'patchesStrategicMerge' to 'patches'
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2023-08-03 10:37:44 +03:00
Tuomas Katila
ec2930b331
deployments: move from 'bases' to 'resources'
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2023-08-03 10:37:44 +03:00
Mikko Ylinen
90aeca48c5
deployments: update SGX configuration
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2023-01-12 09:41:17 +02:00
Ed Bartosh
13780a8cdc
implement terrascan check
...
Signed-off-by: Ed Bartosh <eduard.bartosh@intel.com>
2022-03-01 15:54:28 +02:00
Mikko Ylinen
abfa3496a2
sgx: update SGX SDK/DCAP versions
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2021-02-18 09:31:28 +02:00
Mikko Ylinen
a8105befe0
demo: kustomize sgx sample deployments
...
adding kustomization to deploy sample jobs that demonstrate
1. launching of plain sample enclave application
2. SGX ECDSA quote generation "out-of-proc" using aesmd
3. SGX ECDSA quote generation "in-proc"
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2020-10-27 15:02:40 +02:00
