Overview | Confidential Containers

Confidential Containers encapsulates pods inside of confidential virtual machines, allowing Cloud Native workloads to leverage confidential computing hardware with minimal modification.
Confidential Containers extends the guarantees of confidential computing to complex workloads. With Confidential Containers, sensitive workloads can be run on untrusted hosts and be protected from compromised or malicious users, software, and administrators.
Confidential Containers provides an end-to-end framework for deploying workloads, attesting them, and provisioning secrets.
On bare metal Confidential Containers supports the following platforms:
NVIDIA Multi-Passthrough requires assigning all GPUs on a host to one pod. NVIDIA Protected PCIe additionally requires listing the NVIDIA NVLink switches in the pod.
Confidential Containers can also be deployed in a cloud environment using the cloud-api-adaptor. The following platforms are supported.
Confidential Containers provides an attestation and key-management engine, called Trustee which is able to attest the following platforms:
Trustee can be used with Confidential Containers or to attest standalone confidential guests. See Attestation section for more information.