Confidential Containers in action: decoding the peer pod approach - Akash Gautam

This talk covers CNCF's confidential containers project, which integrates confidential computing into cloud-native workloads. The speaker explains how the project creates a hardware vendor-agnostic software stack to establish a trusted execution environment for cloud-native applications, emphasizing the "peer pod" approach that allows for TEE deployment on major cloud providers. The session includes a detailed discussion of the architecture for both bare-metal and cloud infrastructures, workflows, and operations such as attestation and key management essential for running confidential applications. The presentation concludes with a demonstration of confidential containers leveraging this innovative approach. Akash Gautam, the speaker, is a cloud-native consultant at Kubermatic with extensive experience in the field.