From 0165919f4de452beb3fd02ae94b73af85b9a4448 Mon Sep 17 00:00:00 2001 From: Malte Poll <1780588+malt3@users.noreply.github.com> Date: Mon, 18 Mar 2024 09:34:29 +0100 Subject: [PATCH] docs: add Contrast runtime --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 140158126..ce7010edf 100644 --- a/README.md +++ b/README.md @@ -104,6 +104,13 @@ After the last step, we know that the policy has not been tampered with and, thu Contrast provides an Initializer that handles the remote attestation on the workload side transparently and fetches the workload certificate. The Initializer runs as an init container before your workload is started. +### The Contrast runtime + +Contrast depends on a Kubernetes [runtime class](https://kubernetes.io/docs/concepts/containers/runtime-class/), which is installed +by the `node-installer` daemonset. +This runtime consists of a containerd runtime plugin, a virtual machine manager (cloud-hypervisor), and a podvm image (IGVM and rootfs). +The installer takes care of provisioning every node in the cluster so it provides this runtime class. + ## Installation Download the latest CLI from our release and put it into your PATH: