glassonion1

autoactivate on

participant "main.rs : App" as App
participant "lib.rs：Enclave" as  Enclave
participant "client.rs：Client" as Client
participant "SGX SDK" as SDK
participant IPS <<Intel Service>>
participant IAS <<Intel Service>>

App -> Enclave: verify<<ECall>>

glassonion1

#[tokio::main]
async fn main() -> Result<(), Box<dyn Error + Send + Sync>> {
    let account = "xxxxx";
    let master_key = "xxxxx";

    let http_client: Arc<Box<dyn HttpClient>> = Arc::new(Box::new(reqwest::Client::new()));
    let storage_account_client =
        StorageAccountClient::new_access_key(http_client.clone(), account, master_key);

    let storage_client = storage_account_client.as_storage_client();

glassonion1

use azure_core::prelude::Range;
use azure_core::HttpClient;
use azure_storage::blob::prelude::{AsBlobClient, AsContainerClient};
use azure_storage::clients::AsStorageClient;
use azure_storage::core::clients::StorageAccountClient;
use reqwest;
use std::error::Error;
use std::sync::Arc;

#[tokio::main]

glassonion1

@startuml

object ": AccessLog" as access
access : severity = "ERROR"
access : time = "2020-12-31T20:02:05.123456Z"
access : httpRequest = Object

object ": ApplicationLog" as app1
app1 : severity = "INFO"
app1 : time = "2020-12-31T20:02:03.000456Z"

glassonion1

@startuml
skinparam componentStyle uml2

node "Redis Pod" {
[redis_exporter]
database redis
}

redis <- redis_exporter

glassonion1

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: prometheus
  namespace: stats
spec:
  replicas: 1
  selector:
    matchLabels:
      app: prometheus

glassonion1

apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRole
metadata:
  name: all-reader
rules:
- apiGroups: [""]
  resources:
  - nodes
  - nodes/proxy
  - services

glassonion1

apiVersion: v1
kind: Service
metadata:
  name: redis
spec:
  type: ClusterIP
  clusterIP: None
  ports:
  - port: 6379
    name: port-redis

glassonion1

global:
  scrape_interval:     10s
  evaluation_interval: 10s
scrape_configs:
- job_name: redis_exporter
  kubernetes_sd_configs:
  - role: endpoints
  relabel_configs:
  - source_labels:
    - __meta_kubernetes_namespace

glassonion1

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: redis
spec:
  serviceName: redis
  selector:
    matchLabels:
      redis-app: redis
  replicas: 3