mirror of
https://github.com/siderolabs/talos.git
synced 2025-08-22 23:21:11 +02:00
19 lines
843 B
Markdown
19 lines
843 B
Markdown
---
|
|
title: "trustd"
|
|
date: 2018-10-29T19:40:55-07:00
|
|
draft: false
|
|
menu:
|
|
docs:
|
|
parent: 'components'
|
|
---
|
|
|
|
Security is one of the highest priorities within Talos.
|
|
To run a Kubernetes cluster a certain level of trust is required to operate a cluster.
|
|
For example, orchestrating the bootstrap of a highly available control plane requires the distribution of sensitive PKI data.
|
|
|
|
To that end, we created `trustd`.
|
|
Based on the concept of a Root of Trust, `trustd` is a simple daemon responsible for establishing trust within the system.
|
|
Once trust is established, various methods become available to the trustee.
|
|
It can, for example, accept a write request from another node to place a file on disk.
|
|
|
|
Additional methods and capability will be added to the `trustd` component in support of new functionality in the rest of the Talos environment. |