News for hackers. Stuff that matters.

A comment on Bring your own key was a lie. Parent comment

Re:Bring your own key was a lie by candiddevmike on Thursday October 13, 2022 @08:44AM (#33190222)
Do you know of anyone offering this at the moment? I wonder if you could use that for Vault authentication somehow.
[ Parent | on HN ]
Re:Bring your own key was a lie by derpsteb on Thursday October 13, 2022 @10:18AM (#33191289)
Constellation (a Kubernetes distro) [1] on Azure would give you this attestation feature. You could then run sth like HashiCorp's Vault in that cluster. You will know that all nodes of that cluster are in the state that you expect them to be through the attestation statement.

[1] https://github.com/edgelesssys/constellation

Disclaimer: I work for Edgeless Systems.

[ Parent | on HN ]