Skip to content

Commit

Permalink
[wip] remove kata-cc-isolation from docs
Browse files Browse the repository at this point in the history
  • Loading branch information
malt3 committed Apr 17, 2024
1 parent 8d19394 commit 25305cc
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion dev-docs/coco/policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ To trust the agent, we need to ensure that the agent only serves permitted reque
For Contrast, the chain of trust looks like this:

1. The CLI generates a policy and attaches it to the pod definition.
2. Kubernetes schedules the pod on a node with `kata-cc-isolation` runtime.
2. Kubernetes schedules the pod on a node with a CoCo runtime.
3. Containerd takes the node, starts the Kata Shim and creates the pod sandbox.
4. The Kata runtime starts a CVM with the policy's digest as `HOSTDATA`.
5. The Kata runtime sets the policy using the `SetPolicy` method.
Expand Down

0 comments on commit 25305cc

Please sign in to comment.