Hybrid-Confidential-Cloud: Democratize Secure AI With GPUs and Confidential Containers
Zvonko Kaiser, NVIDIA
Abstract
Secure AI workloads require verifiable trust regardless of where GPUs operate—on-premises, private clouds, or public CSPs. CNCF Confidential Containers facilitate infrastructure-agnostic, lift-and-shift deployments of GPU workloads, delivering confidentiality seamlessly without needing modifications. This is accomplished by layering trust-oriented elements over Kubernetes for compute, networking, storage, and the control plane. Hardware-backed confidential VMs ensure runtime integrity for GPU workloads, identity-based overlay networks, and a confidential storage layer safeguards highly valuable data against replay attacks. A confidential control plane overlays K8S default control plane, offering mechanisms for multi-tenancy, key lifecycle management, and maintenance of trust boundaries. This architecture supports trusted, portable AI infrastructure at scale, enabling secure AI deployments across any IaaS—on-premises, private cloud, or CSP—facilitating true hybrid secure AI at scale.
