The coverage is measured into a PCR on the Confidential VM's vTPM (that is matched in The crucial element launch plan about the KMS Along with the predicted plan hash for that deployment) and enforced by a hardened container runtime hosted inside Every single occasion. The runtime monitors instructions from the Kubernetes Management aircraft, and