The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project.
About Confidential Containers
Confidential Containers addresses the need to protect data in use within cloud native environments. While data at rest and in transit are commonly encrypted, processing data in memory often leaves it vulnerable. Confidential Containers leverages hardware-based Trusted Execution Environments (TEEs) to encrypt data during computation. This allows organizations to run sensitive workloads on third-party infrastructure with the assurance that the infrastructure operator cannot access the data being processed. While most security solutions focus on data at rest or in transit, this project focuses on protecting data in use.
The project began as an open source effort in 2021 through a collaboration between Red Hat, Intel, IBM, and other industry partners to bring confidential computing to cloud native applications. By integrating hardware security features into the Kubernetes ecosystem through the Kata Containers runtime, Confidential Containers allows organizations to run sensitive workloads on public clouds or private infrastructure with increased assurance. These advancements allow developers to deploy confidential workloads using familiar Kubernetes workflows, reducing the complexity of adopting TEEs.
Confidential Containers Key Milestones and Ecosystem Development
Since joining the CNCF Sandbox, Confidential Containers has achieved significant growth, supported by major technology organizations and cloud service providers, including Microsoft Azure, Intel, AMD, IBM, NVIDIA, Alibaba, and Red Hat.
The project’s ecosystem now reflects robust engagement, with over 1,000 combined GitHub stars across foundational core organization repositories, over 1,200 merged pull requests across 26 repository groups, and more than 1,500 historical and active tracking issues. This activity is driven by a vibrant community of over 150 active contributors from hardware vendors, hyperscale cloud providers, and security researchers, all supported by more than 15 cumulative engineering lifecycle releases.
Confidential Containers continues to mature through seamless integration with Kubernetes and infrastructure automation via tools like Kyverno. It is also being integrated into KServe for supporting confidential AI use cases.
“The Confidential Containers community has successfully transformed TEE-backed security from a niche research interest into a robust, production-ready foundation for sensitive Kubernetes workloads. By joining CNCF, we secure the neutral, open governance required to set the industry standard for privacy-preserving infrastructure.” — Ariel Adam, Maintainer, Confidential Containers
“Our community has effectively abstracted the complexity of heterogeneous hardware-level isolation into standard, accessible Kubernetes patterns, ensuring security scales with the stack. Confidential Container’s transition to incubation allows us to align ‘data-in-use’ protection with the broader cloud native ecosystem, similar to how we’ve standardized critical infrastructure before. We are now delivering the secure, native capability required to deploy use cases such as confidential AI inference at production scale.” — Mikko Ylinen, Maintainer, Confidential Containers
The CNCF TOC provides technical leadership to the cloud native community. It defines and maintains the foundation’s technical vision, approves new projects, and stewards them across maturity levels. The TOC also aligns projects within the overall ecosystem, sets cross-cutting standards and best practices, and works with end users to ensure long-term sustainability. As part of its charter, the TOC evaluates and supports projects as they meet the requirements for incubation and continue progressing toward graduation.
“Confidential Containers has demonstrated clear maturity in integrating TEE-backed isolation within standard Kubernetes workflows, earning its place as an incubating project. This transition validates the community’s effort to standardize data-in-use protection, ensuring that security is baked into the infrastructure rather than bolted on as an afterthought.” — Faseela K, TOC Sponsor
“Achieving incubation is the direct result of the project’s robust development history, evidenced by its successful integration across heterogeneous TEE environments. By abstracting complex hardware security into standard Kubernetes patterns, the project allows developers to treat confidential computing as a native capability of their application stack. We’ve done this before with critical infrastructure standards, and this approach will now serve as the secure backbone for the next era of high-intensity, distributed AI inference.” — Kevin Wang, TOC Sponsor
Confidential Containers Main Components
Confidential Containers is composed of several components:
- Confidential Containers Pods: Enables deployment of unmodified containers across TEEs by abstracting complex hardware security into standard Kubernetes Pod resources.
- Trustee: A specialized, scalable attestation service that verifies the integrity of TEE-enabled nodes and workloads before granting secrets or keys.
- Helm Charts & Controllers: Provides lifecycle management, automating the provisioning and orchestration of confidential workloads across heterogeneous TEE environments.
- Hardware Abstraction Layer: Seamlessly integrates with multiple TEE technologies, including Intel® TDX and AMD SEV-SNP, allowing users to run sensitive applications without being locked into a single cloud provider’s hardware.
Confidential Containers Roadmap
The Confidential Containers project roadmap distinguishes between a short-term focus (2-6 months) and a mid-to-long-term outlook (6-18 months).
The short-term roadmap aims to deliver an end-to-end, stable, and easy-to-deploy solution, with development tracked across two GitHub projects: the release project for version-specific development and the Trustee project for ongoing implementation requirements.
In contrast, the mid- and long-term roadmap prioritizes use-case-driven development. Rather than focusing solely on specific features, this approach emphasizes delivering the real-world use cases that customers require, supported by robust CI/CD processes to ensure consistent end-to-end functionality.
To view the full project roadmap, visit: https://github.com/confidential-containers/confidential-containers/blob/main/roadmap.md
As a CNCF-hosted project, Confidential Containers is part of a neutral foundation aligned with its technical interests, as well as the larger Linux Foundation, which provides governance, marketing support, and community outreach. Confidential Containers joins incubating technologies: Backstage, Buildpacks, Chaos Mesh, Container Network Interface (CNI), Contour, Cortex, CubeFS, Emissary-Ingress, gRPC, HAMi, in-toto, Keptn, Keycloak, KubeEdge, Kubeflow, KubeVela, KubeVirt, Litmus, Longhorn, NATS, Notary, OpenFeature, OpenKruise, OpenMetrics, Operator Framework, Thanos, and Volcano. For more information on maturity requirements for each level, please visit the CNCF Graduation Criteria.
To learn more about Confidential Containers, visit confidentialcontainers.org, explore the GitHub repository, or join the community on the #confidential-containers Slack channel.