Let’s say you must run your sensitive workload in a third-party infrastructure as part of your business needs, and you want to leverage a confidential computing (CC) environment to protect your intellectual property (IP) in the workload. …

In this blog, I will share my experience debugging an issue related to Tekton CI/CD pipelines. I faced this issue while working on the confidential containers project using the Kata/remote-hypervisor approach. Before delving further, let me provide a quick primer on Tekton pipelines. …

While developing the Kata/remote-hypervisor (aka peer-pods) approach, I encountered an issue where the Kubernetes pod IP was unreachable from the worker node. In this blog, I describe the Kubernetes network troubleshooting journey, believing it’ll be helpful to my readers. Kata remote hypervisor (peer-pods) approach enables the creation of Kata VMs…

Protect your IP — Large Language Models (LLMs) have garnered significant attention, partly due to ChatGPT and most notably due to their remarkable capabilities in natural language processing (NLP) applications, such as text generation, question answering, etc. There are excellent materials available on the internet to understand LLMs. In this blog, I’ll focus on…

Unleashing newer possibilities — Combining different Kubernetes features creatively have the potential to provide solutions to some very tricky problems. In this blog, I’ll share how you can combine the power of weighted canary deployment and multiple container runtimes in Kubernetes and solve some tricky issues. Although ingress controllers in Kubernetes already provide traffic-splitting…

Simplifying Adoption through Standardisation — Introduction Confidential computing is becoming increasingly important for organisations that handle sensitive data. With the rising adoption of Kubernetes, standardising confidential computing at the pod layer for container workloads will benefit users. The Cloud Native Computing Foundation’s (CNCF) Confidential Containers (CoCo) project aims to address this need by providing a standardised…

Introduction In recent years, the computing landscape has significantly shifted towards addressing growing data privacy and security concerns. Confidential computing, a paradigm that aims to protect sensitive data during processing, has emerged as a powerful solution. …

Flexibility without Compromise — As more organizations adopt Kubernetes, security has become a major concern. Kubernetes has many built-in security features, but ensuring security policies are properly enforced across a large and complex cluster can be challenging. At the same time, Kubernetes also needs to provide the flexibility required for developers to work efficiently…

In the first part of this series, we learnt about sandboxed (virtualised) containers and how it provides an added layer of security to container workloads by running the pod in a virtual machine (VM). We also examined how sandboxed containers, implemented in Kata containers, provide the foundation for confidential containers…