Skip to content

Trusted Launch support in Karpenter/NAP #1634

@wdarko1

Description

@wdarko1

Description: Trusted Launch enables administrators to deploy AKS nodes, which contain the underlying virtual machines, with verified and signed bootloaders, OS kernels, and drivers.

Request:
This workstream would allow support for Trusted Launch, which is made of two experiences:

  • vTPM
  • Secure Boot

From a user standpoint I should be able to enter a field in the AKSNodeClass CRD that enables either of the two Trusted Launch Features:

spec:
  security:
    trustedLaunch:
      vTPM: true
      secureBoot: true

Metadata

Metadata

Assignees

Labels

area/securityIssues or PRs related to security

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions