Sponsored Keynote: Bringing Confidential Computing to Kubernetes
Talkat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 10:16· Exhibit Hall AB - San Diego Convention Center, Ground Level·
summary
Kubernetes can now allocate hardware-backed trusted execution to containers using the Open Enclave SDK and an SGX device plugin that advertises per-node encrypted memory (demo shows a node with 2 MB available and pods requesting a 64 MB encrypted-memory limit). The demo wires enclave creation into pod lifecycle so containers create verifiable TEEs using Intel SGX; code runs with chip-level encryption, and Azure supports trying this today. The Confidential Computing Consortium and Intel SGX SDK are cited as ecosystem pieces.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:22Protecting data
- 0:42Security considerations
- 1:57Confidential computing
- 3:16Confidential Computing Consortium
- 3:44Using Confidential Computing with Kubernetes
- 4:15Conclusion
related talks
40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive Workloads
30mK8s meets confidential computing - the different ways of scaling sensitive workloads- 40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive...
11mLightning Talk: Computing Confidentially in the Clouds
38mCloud native Confidential: Isolating Kubernetes Pods with Confidential Computing
29mConfidential Containers: The Next Era of Cloud Data Security
16mIntroduction to confidential computing
38mConfidential Containers Explained