Confidential Computing with Kubernetes*

Edgeless Systems and Intel have combined forces to leverage the Intel® Trusted Domain Extensions (TDX) capabilities to shield your entire Kubernetes cluster from the underlying cloud infrastructure. Benny Fuhry and Moritz Eckert show how Constellation encrypts data within the cluster, including runtime in-memory data, and the novel remote attestation capabilities of TDX that enables Kubernetes Node attestation to make the entire cluster verifiable.