Kubernetes deployments that schedule sensitive workloads onto confidential compute nodes with attestation gates.