aws / aws/containers-roadmap

[EKS] [request]: TPM support for windows server 2016/2019/2022 EKS images

Open
#2,307 2 comments 1 reaction 0 assignees View on GitHub
EKS Proposed Windows
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
What do you want us to build?
Currently only windows server 2016/2019/2022 base images are available with TPM support. We are looking TPM support for both EKS and ECS windows server variants as well.

https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/enable-nitrotpm-prerequisites.html

**Which service(s) is this request for?**
EKS and ECS

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
We are trying to enable secure boot for all of our windows workloads in AWS cloud but currently we have enabled TPM for only windows server 2016/2019/2022 base AMIs. Looking forward to enable it for both EKS and ECS variants as well

**Are you currently working around this issue?**
Currently we are not able to enable secure boot i.e Nitro TPM provided by AWS.

**Additional context**
Anything else we should know?

**Attachments**
If you think you might have additional information that you'd like to include via an attachment, please do - we'll take a look. (Remember to remove any personally-identifiable information.)

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the EKS and ECS Windows image offerings and the linked AWS NitroTPM prerequisites. The request is complete when EKS and ECS Windows variants support Nitro TPM and secure boot, but the issue names no repository files, tests, or implementation entry point.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure, operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.