Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
  • Loading branch information
m1ghtym0 and katexochen authored Mar 13, 2024
1 parent c64dc99 commit e116ba3
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,17 +12,17 @@ It currently targets the [CoCo preview on AKS](https://learn.microsoft.com/en-us

## Goal

From a security perspective, Contrast is designed to keep all data always encrypted and to prevent access from the infrastructure layer (i.e., remove the infrastructure from the TCB). This includes access from datacenter employees, privileged cloud admins, own cluster administrators, and attackers coming through the infrastructure (e.g., malicious co-tenants escalating their privileges).
Contrast is designed to keep all data always encrypted and to prevent access from the infrastructure layer, i.e., remove the infrastructure from the TCB. This includes access from datacenter employees, privileged cloud admins, own cluster administrators, and attackers coming through the infrastructure, e.g., malicious co-tenants escalating their privileges.

From a DevOps perspective, Contrast is designed to integrate fluently with the existing Kubernetes workflows. It's compatible with managed Kubernetes, can be installed as a day-2 operation and imposes only minimal changes to your deployment flow.
Contrast integrates fluently with the existing Kubernetes workflows. It's compatible with managed Kubernetes, can be installed as a day-2 operation and imposes only minimal changes to your deployment flow.

## Use Cases:

* Increasing the security of your containers
* Moving sensitive workloads from on-prem to the cloud with Confidential Computing
* Shielding the code and data even from the own cluster administrators
* Increasing the trustworthiness of your SaaS offerings
* Simplifying Regulatory Compliance
* Simplifying regulatory compliance
* Multi-party computation for data collaboration

## Features
Expand All @@ -45,7 +45,6 @@ From a DevOps perspective, Contrast is designed to integrate fluently with the e
* Pod isolation: Pods are isolated from each other.
* Namespace isolation: Contrast can be deployed independently in multiple namespaces.


### 🧩 Lightweight and easy to use

* Install in Kubernetes cluster as a day-2 operation.
Expand Down

0 comments on commit e116ba3

Please sign in to comment.