Understanding Attestation in Confidential Computing: Images and Boot

This is the first part of our series on attestation in Constellation and it covers the topic of Constellation’s node images. Kubernetes runs your workloads by placing containers into pods to run on nodes. A node is usually a virtual machine, and in the case of Constellation it is a confidential virtual machine. This video explains in detail the part of Constellation that builds the foundation of our image so that you can have an understanding on how its nodes are designed to be fully verifiable, from the hardware to Kubernetes layer.

Subscribe!📤