🔒 Confidential computing

[mudler]

Confidential computing refers to the protection of data while it is being processed. In other words, it aims to keep sensitive data secure from unauthorized access, even when it is being used by programs running on the same physical or virtual machine. This is done by encrypting the data while it is being processed, so that it is only accessible to authorized parties with the proper decryption key. Confidential computing can be used to protect data in various scenarios, such as in the cloud, on-premises, or in hybrid environments.

Confidential computing can be break down to several areas, this Epic is a tracker for all the areas involved to keep track of the integration state in Kairos.

Depends on #347

⛓️ Supply chain security:

• SLSA #431
• 🌱 Use grype for scanning SBOM and images #1056
• 🌱 Attach and sign SBOM to images #1055
• 🌱 SBOM #51
• 🤖 Attach trivy scan reports #1019
• 📖 Use kyverno to gate upgrades in Kubernetes #564
• SLSA compliant base images #92

🏗️ Workload isolation:

• 🌱 Run enclave-cc on Kairos #1114
• ✨ Integrate MarbleRun #1257
• Gramine
• ego

Generic:

• FIDO onboarding