Trust Model for Confidential Containers
Definitions, references, and scope
Category: docs
Cloud API Adaptor Troubleshooting
Generic troubleshooting steps after installation of Cloud API Adaptor
Categories:
Key Broker Service (KBS)
This service facilitates remote attestation and secret delivery
Categories:
Personas
Description and discussion of relevant agents/actors in the context of Confidential Containers
Categories:
Attestation Service (AS)
This service verifies TEE evidence
Categories:
Reference Value Provider Service (RVPS)
This service manages reference values used to verify TEE evidence
Categories:
Threat Vectors/Profiles
TODO An (inexhaustive) list of threat vectors against Confidential Containers
Categories:
KBS Client Tool
Simple tool to test or configure Key Broker Service and Attestation Service
Categories:
Kata Containers
Documentation for Kata Containers pertaining to Confidential Containers
Categories:
Trustee
Trusted Components for Attestation and Secret Management
Categories:
Guest Components
Confidential Container Tools and Components
Categories:
Cloud API Adaptor
Documentation for Cloud API Adaptor a.k.a Peer Pods
Categories:
Kata Confidential Containers
Documentation about Kata Containers in the context of Confidential Computing
Categories:
API Server Rest
Documentation for CoCo Restful API Server
Categories:
Attestation Agent
Documentation for Attestation Agent
Categories:
AWS
Documentation for peerpods on AWS
Categories:
Azure
Cloud API Adaptor (CAA) on Azure
Categories:
Confidential Data Hub
Documentation for Confidential Data Hub
Categories:
IBM Cloud
Documentation for peerpods on IBM Cloud
Categories:
image-rs
Documentation for image-rs
Categories:
KBS backed by AKV
This documentation describes how to mount secrets stored in Azure Key Vault into a KBS deployment
Categories:
ocicrypt-rs
Documentation for ocicrypt-rs
Categories:
Trust Model
Documentation on the Confidential Containers trust model