Lessons learned: scaling confidential clusters on OpenStack
summary
Open-source confidential cloud built on AMD SEV 7713p with Ubuntu 24.04 kernel 6.6, libvirt 8, QEMU 6.2 and OpenStack Yoga; uses OVMF UEFI, svtpm, Barbican (HashiCorp Vault backend), Cinder CSI and measured-boot via an emulated vTPM because SEV lacks runtime measurements. Constellation provides confidential Kubernetes on immutable, integrity-protected node images; cluster provisioning works and runs. Missing pieces: horizontal autoscaling and VM identity injection; SEV-SNP paraviser / secure service module promise full attestation excluding the hypervisor.
AI-written summary · about
chapters (7)
- 0:00Introduction to Stackit
- 1:24Project goals
- 3:14Hypervisor requirements
- 7:20Guest attestation
- 11:54Implementing secure nodes
- 13:23Cloud native features
- 15:35Conclusion and resources
related talks
41mConfidential Computing, from host to workload
15mRealizing Confidential VMs Ensuring Privacy of AI Features
23mDemystifying Confidential Computing: An update for enthusiasts & professionals
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
46mConfidential Cloud: Safeguarding Sensitive Data in K8s
40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive Workloads
23mAMD SEV & Azure Local: When Confidential VMs Go Local- 40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive...