Cloud Native Copenhagen

Join us for the January 2026 edition of Cloud Native Copenhagen, kindly hosted once again by DR.

This meetup focuses on one of the most pressing challenges in modern Kubernetes platforms: how to properly secure sensitive workloads and cluster data in cloud-native environments.

Agenda
16:30 Doors open, find a seat, network, enjoy
17:00 Welcome by the Cloud Native Copenhagen
17:05 Welcome by Danmarks Radio
17:15 Talk 1 - Unlocking Confidential Computing: An Introduction to Confidential Containers in Kubernetes
18:00 Break with food and drinks
18:45 Talk 2 - Talos KMS: Getting the Russian Doll out of your Cluster
19:30 Snacks, networking
20:00 Thank you for today

Talk 1: Unlocking Confidential Computing: An Introduction to Confidential Containers in Kubernetes

Speaker: Nino Martinez Wael from TDC Erhverv

As organizations increasingly move sensitive workloads to the cloud, ensuring data confidentiality during execution has become a critical challenge. Confidential Containers (CoCo), a CNCF sandbox project, addresses this by integrating confidential computing principles into the cloud-native ecosystem. Leveraging Trusted Execution Environments (TEEs) and hardware-backed security technologies such as Intel TDX, AMD SEV-SNP, and IBM Secure Execution, CoCo enables Kubernetes users to run containerized applications in isolated, attested environments—with few modifications to existing workflows.
In this session, we’ll explore: What is Confidential Computing and why it matters? The architecture and trust model behind Confidential Containers.

Key features: attestation, pod-centric design, and integration with Kata Containers. Use cases across regulated industries, AI/ML workloads, and multi-tenant environments. A look at the ecosystem and roadmap, and how you can get started. Whether you’re a platform engineer, security architect, or cloud-native enthusiast, this talk will demystify confidential computing and show how CoCo brings stronger guarantees of data confidentiality, integrity, and code integrity to Kubernetes.

Talk 2: Talos KMS: Getting the Russian Doll out of your Cluster

Speaker: Anders Lantz from Eficode

While Talos Linux provides robust security tools, features such as disk encryption are not enabled by default. Furthermore, the commonly used encryption settings often give a false sense of safety while leaving critical data exposed to attackers. In this session, we will have a brief overview of the Talos storage layout and then dig into the encryption functionality it offers. We will then examine why standard encryption methods often just "kick the problem down the road" and demonstrate a solution to truly secure your clusters storage.