Skip to content

Commit 622a778

Browse files
committed
webhooks: update sgx device node paths
Signed-off-by: Mikko Ylinen <[email protected]>
1 parent 4429fb4 commit 622a778

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

pkg/webhooks/sgx/sgx.go

+2-2
Original file line numberDiff line numberDiff line change
@@ -153,13 +153,13 @@ func (s *Mutator) Default(ctx context.Context, obj runtime.Object) error {
153153
// Quote Generation Modes:
154154
//
155155
// in-process: A container has its own quote provider library library: In this mode,
156-
// the container needs a handle to /dev/sgx/provision (sgx.intel.com/provision resource).
156+
// the container needs a handle to /dev/sgx_provision (sgx.intel.com/provision resource).
157157
// out-of-process: A container uses Intel aesmd. In this mode, the container must talk to
158158
// aesmd over /var/run/aesmd/aesm.sock. aesmd can run either as a side-car or a DaemonSet
159159
//
160160
// Mode selection: The mode selection is done by setting sgx.intel.com/quote-provider annotation
161161
// to a value that specifies the container name. If the annotation matches the container requesting
162-
// SGX EPC resources, the webhook adds both /dev/sgx/provision and /dev/sgx/enclave resource requests.
162+
// SGX EPC resources, the webhook adds both /dev/sgx_provision and /dev/sgx_enclave resource requests.
163163
// Without sgx.intel.com/quote-provider annotation set, the container is not able to generate quotes
164164
// for its enclaves. When pods set sgx.intel.com/quote-provider: "aesmd", Intel aesmd specific volume
165165
// mounts are added. In both DaemonSet and sidecar deployment scenarios for aesmd, its container name

0 commit comments

Comments
 (0)