Skip to content

Commit

Permalink
Update draft-salowey-wimse-arch.md
Browse files Browse the repository at this point in the history
  • Loading branch information
yaroslavros authored Mar 21, 2024
1 parent 9cca021 commit bd38b57
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion draft-salowey-wimse-arch.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ Typically a workload obtains its identity early in its lifecycle. This identity

Identity bootstrapping often utilizes identity information provisioned through mechanisms specific to hosting platforms and orchestration services. This initial bootstrapping information is used obtain specific identity credentials for a workload. This process may use attestation and the presentation of additional evidence to ensure the worload receives correct identity credentials. An example of the bootstrapping process follows.

{{arch-fig}} provides an example of software layering at a host running workloads. During startup, workloads bootstrap their identity with the help of an agent. The agent may be assocaited with one or more workloads to help ensure that workloads are provisioned with the correct identity. The agent provides credentials, attestations, evidence and other information to a service which validates this information and provides the agent with correct identity credentials for the workloads it is associated with.
{{arch-fig}} provides an example of software layering at a host running workloads. During startup, workloads bootstrap their identity with the help of an agent. The agent may be associated with one or more workloads to help ensure that workloads are provisioned with the correct identity. The agent provides credentials, attestation evidence and other information to a server, which validates this information and provides the agent with correct identity credentials for the workloads it is associated with.

~~~aasvg
+-----------------+
Expand Down

0 comments on commit bd38b57

Please sign in to comment.