A new Confidential Space image (260800) is available. Support for Confidential Space on H100 GPU (a3-highgpu-1g machine family) with Intel Trust Authority (ITA) attestation is generally available.

A new Confidential Space image (260701) is available.

Confidential Space image 260600 is available. This image provides support for graceful shutdown of container workloads on power button events.

Confidential Space image 260500 is available. This image introduces support for Intel Trust Authority (ITA) as an independent attestation verifier service for your workloads. This lets you verify the identity, the hardware state, and the software state of the Confidential Space environment directly using Intel's attestation service.

When running a Confidential Space workload with an NVIDIA H100 GPU attached, you might see the following error message:

failed to get launchspec, make sure you're running inside
a GCE VM: GPU Driver installation is not supported.

This is a known issue with the Confidential Space image. To work around the issue, restart the Confidential VM.

A Confidential Space image (260400) is available. Support for Confidential Space on H100 GPU (a3-highgpu-1g machine family) is generally available.

A new Confidential Space image (260300) is available.

A new Confidential Space image (260200) is available.

A new Confidential Space image (260100) is available.

A new Confidential Space image (251200) is available.

New Confidential Space images (251000 and 251001) are available.

A new Confidential Space image (250800) is available.

Confidential Space now allows adding specific Linux capabilities, including CAP_SYS_ADMIN, and provides a namespaced read or write cgroup.

Feature

Support for Confidential Space on Intel CPUs (C3 machine family) with Intel TDX is now generally available.

Announcement

New Confidential Space images (250300 and 250301) are now available.

AWS token support for Confidential Space is now generally available.

You can now integrate Confidential Space with AWS resources. For more information, see Integrate AWS resources.

Update go-sev-guest to v.0.12.1.

Announcement

A new Confidential Space image (250101) is now available.

Change

Update the verifier API version to include a new principal tag token type.

Added retry logic when pulling the workload image and calling the Confidential Computing API.

Change

Changed the default OOM score for the workload container.

Announcement

A new Confidential Space image (250100) is now available.

Change

Updated default TPM Dictionary Lockout parameters. This change should significantly reduce the chance for users to get into the TPM lockout state.

Feature

Improved the logging and monitoring experience. Added CPU metric monitoring to the image.

A new Confidential Space image (241000) is now available. This image version adds IPv6 ingress traffic support.

The following Confidential Space images were also previously released:

• September 2, 2024 (240900):
  • Added tmpfs mount support for Confidential Space workloads
  • Added configurable /dev/shm size for Confidential Space workloads
  • Added retry capability to the container signature fetch.
  • Minor bug fixes.
• August 5, 2024 (240800):
  • Moved to COS-113 as the base image.
  • Patched OpenSSH vulnerability CVE-2024-6387 in the debug image.

A new Confidential Space image (240700) is now available. This image provides the following fixes:

• Fixed a bug that caused attestation token refreshing to fail.

A new Confidential Space image (240500) is now available. This image provides the following fixes:

• Fixed an issue where default service account credentials would expire after 1 hour, causing Failed to fetch signatures from the target repo errors.
• Fixed a concurrent TPM access issue.

A new Confidential Space image (240402) is now available. This image provides support for automatically resizing the boot disk stateful partition. See disk and memory limits for more information.

Data collaborators can now check if memory monitoring is enabled on a Confidential VM running a Confidential Space workload.

Announcement

A new Confidential Space image (240200) is now available. This image provides support for data collaborators to add memory monitoring as part of their attestation assertions.

A workload operator can now enable memory monitoring on the Confidential VM running the workload. This must be permitted by the workload author.

Announcement

A new Confidential Space image (231201) is now available. This image provides support for Confidential VM memory monitoring.

A new Confidential Space image (231200) is now available. This image provides support for custom attestation tokens.

Feature

You can now use custom attestation tokens to authenticate a workload to relying parties outside of Google Cloud. External relying parties can use authentication to help establish trust and exchange sensitive data securely.

You can now use the Split-Trust Encryption Tool (STET) with Confidential Space.

Support for VPC Service Controls is released to General Availability.

You can now protect Confidential Space using VPC Service Controls perimeters. For more information, see VPC Service Controls supported products.

Support for VPC Service Controls is released to Preview.

You can now protect Confidential Space using VPC Service Controls perimeters. For more information, see VPC Service Controls supported products.

A new Confidential Space image (231001) is now available. This image provides support for signing container images.

A new Confidential Space image (230901) is now available. This image provides improved logging capabilities and increases the file descriptor limits.

A new Confidential Space image (230600) is now available. This image provides support for opening ports for inbound network traffic to your workload.

Ports can now be opened for ingress network traffic when using Confidential Space image version 230600 and above.