Confidential Containers becomes a CNCF incubating project

The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data... The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data at rest and in transit are commonly encrypted, processing data in memory often leaves it vulnerable. Confidential Containers leverages hardware-based Trusted Execution Environments (TEEs) to encrypt data during computation. This allows organizations to run sensitive workloads on third-party infrastructure with the assurance that the infrastructure operator cannot access the data being processed. While most security solutions focus on data at rest or in transit, this project focuses on protecting data in use. The project began as an open source effort in 2021 through a collaboration between Red Hat, Intel, IBM, and other industry partners to bring confidential computing to cloud native applications. By integrating hardware security features into the Kubernetes ecosystem through the Kata Containers runtime, Confidential Containers allows organizations to run sensitive workloads on public clouds or private infrastructure with increased assurance. These advancements allow developers to deploy confidential workloads using familiar Kubernetes workflows, reducing the complexity of adopting TEEs. Confidential Containers Key Milestones and Ecosystem Development Since joining the CNCF Sandbox ,  Confidential Containers has achieved significant growth, supported by major technology organizations and cloud service providers, including Microsoft Azure, Intel, AMD, IBM, NVIDIA, Alibaba, and Red Hat.  The project’s ecosystem now reflects robust engagem

The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data... The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data at rest and in transit are commonly encrypted, processing data in memory often leaves it vulnerable. Confidential Containers leverages hardware-based Trusted Execution Environments (TEEs) to encrypt data during computation. This allows organizations to run sensitive workloads on third-party infrastructure with the assurance that the infrastructure operator cannot access the data being processed. While most security solutions focus on data at rest or in transit, this project focuses on protecting data in use. The project began as an open source effort in 2021 through a collaboration between Red Hat, Intel, IBM, and other industry partners to bring confidential computing to cloud native applications. By integrating hardware security features into the Kubernetes ecosystem through the Kata Containers runtime, Confidential Containers allows organizations to run sensitive workloads on public clouds or private infrastructure with increased assurance. These advancements allow developers to deploy confidential workloads using familiar Kubernetes workflows, reducing the complexity of adopting TEEs. Confidential Containers Key Milestones and Ecosystem Development Since joining the CNCF Sandbox ,  Confidential Containers has achieved significant growth, supported by major technology organizations and cloud service providers, including Microsoft Azure, Intel, AMD, IBM, NVIDIA, Alibaba, and Red Hat.  The project’s ecosystem now reflects robust engagement, with over 1,000 combined GitHub stars across foundational core organization repositories, over 1,200 merged pull requests across 26 repository groups, and more than 1,500 historical and active tracking issues. This activity is driven by a vibrant community of over 150 active contributors from hardware vendors, hyperscale cloud providers, and security researchers, all supported by more than 15 cumulative engineering lifecycle releases. Confidential Containers continues to mature through seamless integration with Kubernetes and infrastructure automation via tools like Kyverno . It is also being integrated into KServe for supporting confidential AI use cases.   “The Confidential Containers community has successfully transformed TEE-backed security from a niche research interest into a robust, production-ready foundation for sensitive Kubernetes workloads. By joining CNCF, we secure the neutral, open governance required to set the industry standard for privacy-preserving infrastructure.” — Ariel Adam , Maintainer, Confidential Containers “Our community has effectively abstracted the complexity of heterogeneous hardware-level isolation into standard, accessible Kubernetes patterns, ensuring security scales with the stack. Confidential Container’s transition to incubation allows us to align ‘data-in-use’ protection with the broader cloud native ecosystem, similar to how we’ve standardized critical infrastructure before. We are now delivering the secure, native capability required to deploy use cases such as confidential AI inference at production scale.” — Mikko Ylinen , Maintainer, Confidential Containers The CNCF TOC provides technical leadership to the cloud native community. It defines and maintains the foundation’s technical vision, approves new projects, and stewards them across maturity levels. The TOC also aligns projects within the overall ecosystem, sets cross-cutting standards and best practices, and works with end users to ensure long-term sustainability. As part of its charter, the TOC evaluates and supports projects as they meet the requirements for incubation and continue progressing toward graduation. “Confidential Containers has demonstrated clear maturity in integrating TEE-backed isolation within standard Kubernetes workflows, earning its place as an incubating project. This transition validates the community’s effort to standardize data-in-use protection, ensuring that security is baked into the infrastructure rather than bolted on as an afterthought.” — Faseela K, TOC Sponsor “Achieving incubation is the direct result of the project’s robust development history, evidenced by its successful integration across heterogeneous TEE environments. By abstracting complex hardware security into standard Kubernetes patterns, the project allows developers to treat confidential computing as a native capability of their application stack. We’ve done this before with critical infrastructure standards, and this approach will now serve as the secure backbone for the next era of high-intensity, distributed AI inference.” — Kevin Wang, TOC Sponsor Confidential Containers Main Components Confidential Containers is composed of several components: Confidential Containers Pods: Enables deployment of unmodified containers across TEEs by abstracting complex hardware security into standard Kubernetes Pod resources. Trustee: A specialized, scalable attestation service that verifies the integrity of TEE-enabled nodes and workloads before granting secrets or keys. Helm Charts & Controllers: Provides lifecycle management, automating the provisioning and orchestration of confidential workloads across heterogeneous TEE environments. Hardware Abstraction Layer: Seamlessly integrates with multiple TEE technologies, including Intel® TDX and AMD SEV-SNP, allowing users to run sensitive applications without being locked into a single cloud provider’s hardware

The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data... The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data at rest and in transit are commonly encrypted, processing data in memory often leaves it vulnerable. Confidential Containers leverages hardware-based Trusted Execution Environments (TEEs) to encrypt data during computation. This allows organizations to run sensitive workloads on third-party infrastructure with the assurance that the infrastructure operator cannot access the data being processed. While most security solutions focus on data at rest or in transit, this project focuses on protecting data in use. The project began as an open source effort in 2021 through a collaboration between Red Hat, Intel, IBM, and other industry partners to bring confidential computing to cloud native applications. By integrating hardware security features into the Kubernetes ecosystem through the Kata Containers runtime, Confidential Containers allows organizations to run sensitive workloads on public clouds or private infrastructure with increased assurance. These advancements allow developers to deploy confidential workloads using familiar Kubernetes workflows, reducing the complexity of adopting TEEs. Confidential Containers Key Milestones and Ecosystem Development Since joining the CNCF Sandbox ,  Confidential Containers has achieved significant growth, supported by major technology organizations and cloud service providers, including Microsoft Azure, Intel, AMD, IBM, NVIDIA, Alibaba, and Red Hat.  The project’s ecosystem now reflects robust engagement, with over 1,000 combined GitHub stars across foundational core organization repositories, over 1,200 merged pull requests across 26 repository groups, and more than 1,500 historical and active tracking issues. This activity is driven by a vibrant community of over 150 active contributors from hardware vendors, hyperscale cloud providers, and security researchers, all supported by more than 15 cumulative engineering lifecycle releases. Confidential Containers continues to mature through seamless integration with Kubernetes and infrastructure automation via tools like Kyverno . It is also being integrated into KServe for supporting confidential AI use cases.   “The Confidential Containers community has successfully transformed TEE-backed security from a niche research interest into a robust, production-ready foundation for sensitive Kubernetes workloads. By joining CNCF, we secure the neutral, open governance required to set the industry standard for privacy-preserving infrastructure.” — Ariel Adam , Maintainer, Confidential Containers “Our community has effectively abstracted the complexity of heterogeneous hardware-level isolation into standard, accessible Kubernetes patterns, ensuring security scales with the stack. Confidential Container’s transition to incubation allows us to align ‘data-in-use’ protection with the broader cloud native ecosystem, similar to how we’ve standardized critical infrastructure before. We are now delivering the secure, native capability required to deploy use cases such as confidential AI inference at production scale.” — Mikko Ylinen , Maintainer, Confidential Containers The CNCF TOC provides technical leadership to the cloud native community. It defines and maintains the foundation’s technical vision, approves new projects, and stewards them across maturity levels. The TOC also aligns projects within the overall ecosystem, sets cross-cutting standards and best practices, and works with end users to ensure long-term sustainability. As part of its charter, the TOC evaluates and supports projects as they meet the requirements for incubation and continue progressing toward graduation. “Confidential Containers has demonstrated clear maturity in integrating TEE-backed isolation within standard Kubernetes workflows, earning its place as an incubating project. This transition validates the community’s effort to standardize data-in-use protection, ensuring that security is baked into the infrastructure rather than bolted on as an afterthought.” — Faseela K, TOC Sponsor “Achieving incubation is the direct result of the project’s robust development history, evidenced by its successful integration across heterogeneous TEE environments. By abstracting complex hardware security into standard Kubernetes patterns, the project allows developers to treat confidential computing as a native capability of their application stack. We’ve done this before with critical infrastructure standards, and this approach will now serve as the secure backbone for the next era of high-intensity, distributed AI inference.” — Kevin Wang, TOC Sponsor Confidential Containers Main Components Confidential Containers is composed of several components: Confidential Containers Pods: Enables deployment of unmodified containers across TEEs by abstracting complex hardware security into standard Kubernetes Pod resources. Trustee: A specialized, scalable attestation service that verifies the integrity of TEE-enabled nodes and workloads before granting secrets or keys. Helm Charts & Controllers: Provides lifecycle management, automating the provisioning and orchestration of confidential workloads across heterogeneous TEE environments. Hardware Abstraction Layer: Seamlessly integrates with multiple TEE technologies, including Intel® TDX and AMD SEV-SNP, allowing users to run sensitive applications without being locked into a single cloud provider’s hardware