From 1f5a78e61309e20eb5d22f12eadbfd5dc3c0223d Mon Sep 17 00:00:00 2001
From: Malte Poll <1780588+malt3@users.noreply.github.com>
Date: Mon, 18 Mar 2024 09:34:29 +0100
Subject: [PATCH] docs: add Contrast runtime

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 1401581264..ce7010edf6 100644
--- a/README.md
+++ b/README.md
@@ -104,6 +104,13 @@ After the last step, we know that the policy has not been tampered with and, thu
 Contrast provides an Initializer that handles the remote attestation on the workload side transparently and
 fetches the workload certificate. The Initializer runs as an init container before your workload is started.
 
+### The Contrast runtime
+
+Contrast depends on a Kubernetes [runtime class](https://kubernetes.io/docs/concepts/containers/runtime-class/), which is installed
+by the `node-installer` daemonset.
+This runtime consists of a containerd runtime plugin, a virtual machine manager (cloud-hypervisor), and a podvm image (IGVM and rootfs).
+The installer takes care of provisioning every node in the cluster so it provides this runtime class.
+
 ## Installation
 
 Download the latest CLI from our release and put it into your PATH: