Providers on Confidential Containers

Alibaba Cloud (ACK)

Mon, 01 Jan 0001 00:00:00 +0000

This documentation will walk you through setting up CAA (a.k.a. Peer Pods) on Alibaba Cloud Container Service for Kubernetes (ACK) and Alibaba Cloud Elastic Compute Service (ECS). It explains how to deploy:

One worker for ACK Managed Cluster
CAA on that Kubernetes cluster
An Nginx pod backed by CAA pod VM on ECS

Note: Run the following commands from the following directory - src/cloud-api-adaptor

Note: Now Confidential Computing instances are available in some regions.

AWS (EKS)

Mon, 01 Jan 0001 00:00:00 +0000

This documentation will walk you through setting up CAA (a.k.a. Peer Pods) on AWS Elastic Kubernetes Service (EKS). It explains how to deploy:

A single worker node Kubernetes cluster using Elastic Kubernetes Service (EKS)
CAA on that Kubernetes cluster
A Nginx pod backed by CAA pod VM

Before you begin

Complete the common prerequisites, including the AWS-specific tools. Then return here to prepare AWS.

EKS Preparation

Set AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY (or AWS_PROFILE) and AWS_REGION for AWS CLI access

Note: As an alternative to static credentials, you can use IRSA (IAM Roles for Service Accounts) on EKS. With IRSA, the CAA pods authenticate via OIDC — no static AWS keys are stored in Kubernetes secrets. You still need AWS_REGION and temporary credentials for the cluster setup steps below.

Azure Kubernetes Service (AKS)

Mon, 01 Jan 0001 00:00:00 +0000

This documentation will walk you through setting up Cloud API Adaptor (CAA) (a.k.a. Peer Pods) on Azure Kubernetes Service (AKS).

It explains how to deploy:

A single worker node Kubernetes cluster using Azure Kubernetes Service (AKS),
CAA on that Kubernetes cluster,
A sample application deployed using CAA to verify that everything is working as expected.

Confidential Containers also supports using Azure Key Vault as a resource backend for Trustee. More info

Google Cloud Platform (GCP)

Mon, 01 Jan 0001 00:00:00 +0000

This documentation will walk you through setting up Cloud API Adaptor (CAA) (a.k.a. Peer Pods) on Google Kubernetes Engine (GKE).

It explains how to deploy:

A single worker node Kubernetes cluster using Google Kubernetes Engine (GKE),
CAA on that Kubernetes cluster,
A sample application deployed using CAA to verify that everything is working as expected.

Before you begin

Complete the common prerequisites, including the Google Cloud CLI.

Google Cloud Project: