Skip to content

Commit

Permalink
DOC: Update kbs/config/kubernetes/README.md
Browse files Browse the repository at this point in the history
This commit updates the documentation to include instructions
for KBS deployment on s390x.

Signed-off-by: Hyounggyu Choi <[email protected]>
  • Loading branch information
BbolroC authored and Xynnn007 committed Jul 2, 2024
1 parent 5f12e27 commit d5d03d9
Showing 1 changed file with 30 additions and 1 deletion.
31 changes: 30 additions & 1 deletion kbs/config/kubernetes/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ We will see how to deploy KBS (with builtin Attestation Service) on a Kubernetes
Create a secret that you want to be served using this instance of KBS:

```bash
echo "This is my super secert" > overlays/key.bin
echo "This is my super secret" > overlays/$(uname -m)/key.bin
```

If you have more than one secret, copy them over to the `config/kubernetes/overlays` directory and add those to the `overlays/kustomization.yaml` file after as shown below:
Expand Down Expand Up @@ -91,6 +91,29 @@ Deploy KBS by running the following command:
./deploy-kbs.sh
```

For IBM Secure Execution (s390x), an environment variable `IBM_SE_CREDS_DIR` should be exported as follows:

```
$ export IBM_SE_CREDS_DIR=/path/to/your/directory
$ tree $IBM_SE_CREDS_DIR
/path/to/your/directory
├── certs
│   ├── DigiCertCA.crt
│   └── ibm-z-host-key-signing-gen2.crt
├── crls
│   └── ibm-z-host-key-gen2.crl
├── hdr
│   └── hdr.bin
├── hkds
│   └── HKD-3931-0275D38.crt
└── rsa
├── encrypt_key.pem
└── encrypt_key.pub
5 directories, 7 files
```

Please check out the [documentation](https://github.com/confidential-containers/trustee/tree/main/attestation-service/verifier/src/se) for details.

## Check deployment

Run the following command to check if the KBS is deployed successfully:
Expand All @@ -114,3 +137,9 @@ $ kubectl -n coco-tenant get service
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
kbs ClusterIP 10.0.210.190 <none> 8080/TCP 4s
```

## Delete KBS

```
$ kubectl delete -k ${DEPLOYMENT_DIR}/$(uname -m)
```

0 comments on commit d5d03d9

Please sign in to comment.