⚡ Lightning Talk: Kata Confidential Containers Meet Persistent Storage: Overcoming CSI Driver Challenges
Lightningat KubeCon + CloudNativeCon China 2025 · on Tuesday, 2025-06-10· at 16:54· Level 16 | Grand Ballroom I·
summary
Kata confidential containers run with file system sharing disabled so host-mounted Persistent Volumes become ephemeral inside the VM; the team implements a concrete solution for AKS by creating the volume on the host, sending its metadata into the VM, and having the Kata agent mount it inside the guest so containers see a persistent filesystem. Implementation supports Azure File CSI driver, uses Kata runtime passes volume metadata and results in volumes mounted inside confidential VM, but trusting the host to pass mounts reduces strict confidentiality.
AI-written summary · about
related talks
25mSecuring Untrusted Workloads with Kata Containers on Kubernetes - David Angot & Alex Price
38mKata Containers will impact you. Yes, you!
06mKeynote: Introducing Kata Containers
35mKata Containers: Getting Involved with the Kata Community - Anne Bertucio & Samuel Ortiz
39mMore Than Secure: Containerd + KataContainers as Kubernetes Runtime
22mKata Containers: Security and Containers Without Compromise
05mWielding the Power & Potential of Kubernetes for Mere Mortals...
08mGold Sponsor Lightning Talk: The Future of Container Storage: CSI and Cloud Foundry