KubeCon + CloudNativeCon India 2026

GitOps has revolutionized the way we manage cloud-native infrastructure but what happens when your workloads need to be confidential, attested, and cryptographically verifiable?

This session explores a new frontier in GitOps: deploying and managing confidential container workloads with Argo CD, Sigstore, and Confidential Computing hardware (e.g., Intel TDX, AMD SEV, IBM Secure Execution). You’ll learn how to enforce cryptographic integrity, verify runtime isolation, and prevent unauthorized workloads using policy-driven rollouts and attestation checks.
We’ll showcase how to:
• Automate confidential workload verification in Argo CD pipelines
• Use Sigstore/Cosign for keyless signing and provenance attestation
• Gate deployments based on SLSA levels or TEE runtime evidence
• Visualize runtime trust using OpenTelemetry and Prometheus