github/confidential-containers
1
0
Fork 0
mirror of https://github.com/confidential-containers/confidential-containers.git synced 2025-04-28 03:21:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Confidential Containers Community
18 Commits 1 Branch 9 Tags 4.9 MiB
Markdown 100%
9fc29c7c19
Go to file
James Magowan 9fc29c7c19 docs: Trust Model Introduction 
Add a introduction to Trust Model (Part of Issue #28).
Include references and links to prior art

Follow on Pull Requests will include sections corresponding to orthogonal ways of considering cloud native approaches relevent to the trust model
Specifically including
   - Personas
   - Lifecycle
   - Trusted Execution Boundary Location
   - Secured v unsecured TEE Base Image

Signed-off-by: James Magowan <magowan@uk.ibm.com>
2022-03-09 22:07:01 +01:00
demos Document CCv0 demo image (#19) 2021-12-23 19:46:31 +05:30
images doc: Extending Roadmap 2021-11-25 15:06:17 +01:00
.gitignore docs: Trust Model Introduction 2022-03-09 22:07:01 +01:00
ALIGNMENT.md alignment doc first pass 2021-10-18 11:46:31 -04:00
CODEOWNERS docs : Add CODEOWNERS file 2022-03-03 14:40:51 +01:00
LICENSE Initial commit 2021-10-04 18:40:23 +03:00
Overview.md Add container isolation (#5) 2021-11-10 14:30:03 +00:00
README.md Add simple asciinema.org recording 2021-12-07 16:31:08 +01:00
Roadmap.md doc: Extending Roadmap 2021-11-25 15:06:17 +01:00
ThreatsOverview.md docs: Trust Model Introduction 2022-03-09 22:07:01 +01:00
TrustModel.md docs: Trust Model Introduction 2022-03-09 22:07:01 +01:00

README.md

logo

Welcome to documentation repository for Confidential Containers

Confidential Containers is an open source community working to leverage Trusted Execution Environments to protect containers and data and to deliver cloud native confidential computing.

Our key considerations are:

  • Allow cloud native application owners to enforce application security requirements
  • Transparent deployment of unmodified containers
  • Support for multiple TEE and hardware platforms
  • A trust model which separates Cloud Service Providers (CSPs) from guest applications
  • Least privilege principles for the Kubernetes Cluster administration capabilities which impact delivering Confidential Computing for guest application or data inside the TEE.

Further Detail

asciicast

Associated Repositories