Content

Confidential Kubernetes

Run your containerized applications in a fully encrypted, self-managed cluster, shielded even in memory.

Basics

Understand the basic architecture of Confidential Kubernetes, learn about key features and versions.

Getting started

Install and configure your first Confidential Kubernetes cluster.

How-tos

Learn how to recover and troubleshoot Confidential Kubernetes.

Troubleshooting

Resolve common issues to keep your Confidential Kubernetes deployment running steadily.

FAQ

Quickly find answers to frequently asked questions about Confidential Kubernetes.

Release notes

Discover what's new in Confidential Kubernetes, including added features, bug fixes and deprecation notices.

Latest updates

• announcement

  Separation of Compute and Licensing (SKU Split) for Windows Server, RHEL, and Confidential Kubernetes

  Nov 3, 2025

  Starting from December 1, 2025, STACKIT will introduce an updated billing structure for Windows Server, Red Hat Enterprise Linux (RHEL), and Confidential Kubernetes.

  Previously, these services were billed as a combined product (Compute + License). Going forward, compute resources and operating system or service licenses will be billed separately, providing greater transparency and traceability across all workloads.

  This change applies to both new and existing instances of the mentioned products. The respective pricing and SKU details are reflected in the updated service certificates.

  Further information can be found in the updated Service Certificates for

  • STACKIT Windows Server Service Certificate
  • STACKIT Red Hat Enterprise Linux
  • STACKIT Confidential Kubernetes

  Our Help Center is always at your disposal if you have any questions.

• announcement

  STACKIT Confidential Kubernetes product is now available

  Mar 14, 2024

  We are happy to announce that STACKIT Confidential Kubernetes product is now available.

  STACKIT Confidential Kubernetes combines the advantages of the popular orchestration tool Kubernetes with the high security standards of confidential computing. The solution is based on the Kubernetes Engine Constellation by Edgeless Systems. It allows users to deploy and operate self-managed Kubernetes clusters with extensive security features without much effort. The highlight: clusters are completely isolated from the underlying cloud infrastructure and third-party access. They are completely encrypted throughout, including the storage at runtime. These properties are verifiable to third parties.

  For more information, see the product page or use our tutorials to get started.

Confidential Kubernetes Release notes