rename runtime: kata-cc-isolation -> contrast-cc-isolation

README.md

@@ -89,7 +89,7 @@ The Contrast CLI provides the tooling for automatically translating Kubernetes d
 The trust chain goes as follows:
 
 1. The Contrast CLI generates a policy and attaches it to the pod definition.
-2. Kubernetes schedules the pod on a node with kata-cc-isolation runtime.
+2. Kubernetes schedules the pod on a node with contrast-cc-isolation runtime.
 3. Containerd takes the node, starts the Kata Shim and creates the pod sandbox.
 4. The Kata runtime starts a CVM with the policy's digest as `HOSTDATA`.
 5. The Kata runtime sets the policy using the `SetPolicy` method.
@@ -180,13 +180,13 @@ helm template release-name chart-name > resources/all.yml
 ```
 
 To specify that a workload (pod, deployment, etc.) should be deployed as confidential containers,
-add `runtimeClassName: kata-cc-isolation` to the pod spec (pod definition or template).
+add `runtimeClassName: contrast-cc-isolation` to the pod spec (pod definition or template).
 In addition, add the Contrast Initializer as `initContainers` to these workloads and configure the
 workload to use the certificates written to the `tls-certs` volumeMount.
 
 ```yaml
 spec: # v1.PodSpec
-  runtimeClassName: kata-cc-isolation
+  runtimeClassName: contrast-cc-isolation
   initContainers:
   - name: initializer
     image: "ghcr.io/edgelesssys/contrast/initializer:latest"

cli/cmd/generate.go

@@ -168,7 +168,7 @@ func findGenerateTargets(args []string, logger *slog.Logger) ([]string, error) {
 		}
 	}
 
-	paths = filterNonCoCoRuntime("kata-cc-isolation", paths, logger)
+	paths = filterNonCoCoRuntime("contrast-cc-isolation", paths, logger)
 
 	if len(paths) == 0 {
 		return nil, fmt.Errorf("no .yml/.yaml files found")

deployments/emojivoto-sm-egress/coordinator.yml

@@ -15,7 +15,7 @@ spec:
       annotations:
         contrast.edgeless.systems/pod-role: coordinator
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       containers:
         - name: coordinator
           image: "ghcr.io/edgelesssys/contrast/coordinator:latest"

deployments/emojivoto-sm-egress/emoji.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: emoji-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/emojivoto-sm-egress/voting.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: voting-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/emojivoto-sm-egress/web.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: web-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/emojivoto/coordinator.yml

@@ -15,7 +15,7 @@ spec:
       annotations:
         contrast.edgeless.systems/pod-role: coordinator
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       containers:
         - name: coordinator
           image: "ghcr.io/edgelesssys/contrast/coordinator:latest"

deployments/emojivoto/emoji.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: emoji-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/emojivoto/voting.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: voting-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/emojivoto/web.yml

@@ -25,7 +25,7 @@ spec:
         app.kubernetes.io/name: web-svc
         version: v11
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/openssl/coordinator.yml

@@ -15,7 +15,7 @@ spec:
       annotations:
         contrast.edgeless.systems/pod-role: coordinator
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       containers:
         - name: coordinator
           image: "ghcr.io/edgelesssys/contrast/coordinator:latest"

deployments/openssl/openssl-backend.yml

@@ -13,7 +13,7 @@ spec:
       labels:
         app.kubernetes.io/name: openssl-backend
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/openssl/openssl-client.yml

@@ -13,7 +13,7 @@ spec:
       labels:
         app.kubernetes.io/name: openssl-client
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/openssl/openssl-frontend.yml

@@ -13,7 +13,7 @@ spec:
       labels:
         app.kubernetes.io/name: openssl-frontend
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

deployments/simple/coordinator.yml

@@ -15,7 +15,7 @@ spec:
       annotations:
         contrast.edgeless.systems/pod-role: coordinator
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       containers:
         - name: coordinator
           image: "ghcr.io/edgelesssys/contrast/coordinator:latest"

deployments/simple/initializer.yml

@@ -13,7 +13,7 @@ spec:
       labels:
         app.kubernetes.io/name: workload
     spec:
-      runtimeClassName: kata-cc-isolation
+      runtimeClassName: contrast-cc-isolation
       initContainers:
         - name: initializer
           image: "ghcr.io/edgelesssys/contrast/initializer:latest"

dev-docs/user-manual.md

@@ -43,7 +43,7 @@ The Contrast CLI provides the tooling for automatically translating Kubernetes d
 The trust chain goes as follows:
 
 1. The Contrast CLI generates a policy and attaches it to the pod definition.
-2. Kubernetes schedules the pod on a node with kata-cc-isolation runtime.
+2. Kubernetes schedules the pod on a node with contrast-cc-isolation runtime.
 3. Containerd takes the node, starts the Kata Shim and creates the pod sandbox.
 4. The Kata runtime starts a CVM with the policy's digest as `HOSTDATA`.
 5. The Kata runtime sets the policy using the `SetPolicy` method.

e2e/internal/kuberesource/parts.go

@@ -73,7 +73,7 @@ func Coordinator(namespace string) *CoordinatorConfig {
 				WithLabels(map[string]string{"app.kubernetes.io/name": "coordinator"}).
 				WithAnnotations(map[string]string{"contrast.edgeless.systems/pod-role": "coordinator"}).
 				WithSpec(PodSpec().
-					WithRuntimeClassName("kata-cc-isolation").
+					WithRuntimeClassName("contrast-cc-isolation").
 					WithContainers(
 						Container().
 							WithName("coordinator").

e2e/internal/kuberesource/sets.go

@@ -21,7 +21,7 @@ func Simple() ([]any, error) {
 			WithTemplate(PodTemplateSpec().
 				WithLabels(map[string]string{"app.kubernetes.io/name": "workload"}).
 				WithSpec(PodSpec().
-					WithRuntimeClassName("kata-cc-isolation").
+					WithRuntimeClassName("contrast-cc-isolation").
 					WithContainers(
 						Container().
 							WithName("workload").