Provisioning PKS deploys Kubernetes clusters on-demand on vSphere or GCP Container Service for Cloud-Native Apps Rapidly deliver and operationalize next generation apps End User Experience • Installation Public Cloud Public Cloud (on GCP) Certified for every K8s release Container Service for Cloud-Native Apps Rapidly deliver and operationalize next generation apps Ÿ Containers: Package applications

Where we go? • To keep the production practice • To explore more potential intersections between Cloud-Native and Confidential Computing • To submit KEPs to upstream for related changes Special Thanks

Container Security ©2019 VMware, Inc. 12 VMware Enterprise PKS對於NIST容器安全指南有完整的實作 White Paper: CLOUD-NATIVE STACK SECURITY: How VMware Enterprise PKS Secures Containers and Kubernetes, Feb, 2019 https://assets