[Feature Request] Confidential VM sizes with Intel TDX
- Dominant language
- TypeScript
- Stars
- 2.1k
- Forks
- 395
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 13
Description
Confidential VMs on AKS have two options for Trusted Execution Environment (TEE) from both AMD and Intel. These TEEs allow you to create Confidential VM environments with excellent price-to-performance ratios, all without requiring any code changes.
- For AMD-based Confidential VMs, the technology used is [AMD SEV-SNP](https://www.amd.com/system/files/TechDocs/SEV-SNP-strengthening-vm-isolation-with-integrity-protection-and-more.pdf), which was introduced with 3rd Gen AMD EPYC™ processors.
- Intel-based Confidential VMs utilize [Intel TDX](https://cdrdv2-public.intel.com/690419/TDX-Whitepaper-February2022.pdf), a technology introduced with 5th Gen Intel® Xeon® processors.
Known issue: Creating nodepools with Confidential VM sizes that utilize Intel TDX results in the following error:
```
The VM size 'Standard_DC2es_v6' is not supported for creation of VMs and Virtual Machine Scale Set with '' security type.
```
Intel TDX VM sizes include:
Contributor guide
Assessment
This issue has not been assessed yet.