Common Cluster Deployment Guide

Common Cluster deployment is for deploying both Foundational Security and Secure Key Caching components in a common Kubernetes cluster. The worker nodes may be separate with TXT/BTG/SUEFI enabled on a specific worker node and SGX on a separate worker node or all Intel Security hardware features enabled on a single worker node.

This guide goes over the deployment steps to enable Common Cluster for Foundational Security and Secure Key Caching

Pre-requisites

Binary Deployment

Binary deployment would enable all components of Foundational Security and Secure Key Caching to be deployed as binary systemd services in a VM and Host for Agent systemd services. Refer the following links for the pre-requisites and requirements

All Hardware, OS , Network, RPM's requirements are given the table below

Use case	Details
Foundational & Workload Security	Quick Start Guide
Secure Key Caching	Quick Start Guide

All Build steps and pre-requisites are given in the table below

Use case	Details
Foundational & Workload Security	Quick Start Guide
Secure Key Caching	Quick Start Guide

Containerized Deployment

Containerized deployment would enable all components of Foundational Security and Secure Key Caching to be deployed as containers in a Kubernetes cluster. Refer the following links for the pre-requisites and requirements

All Hardware, OS , Network, RPM's requirements are given the table below

Use case	Details
Foundational & Workload Security	Quick Start Guide
Secure Key Caching	Quick Start Guide

All Build steps and pre-requisites are given in the table below

Use case	Details
Foundational & Workload Security	Quick Start Guide
Secure Key Caching	Quick Start Guide