Skip to main content

Detailed text description: Confidential workloads

This page provides a long description of the workloads diagram used in the Attestation and the trustee service article. It shows how confidential services are grouped into workloads that share secrets.

Overview​

Background colors mark trust. Green areas are trusted. Red areas with a dashed border are untrusted. Two workloads, drawn as purple dashed groups, sit inside a red area labeled untrusted infrastructure. Each confidential service runs in its own green confidential micro-VM.

Main components​

  1. Workload payments:
  • Contains a confidential micro-VM with an application.
  • Contains a confidential micro-VM with PostgreSQL.
  • The application and PostgreSQL talk to each other.
  1. Workload analytics:
  • Contains a confidential micro-VM with an application.
  • Has no connection to the payments workload.