The policy is measured into a PCR on the Confidential VM's vTPM (which can be matched in The crucial element launch plan to the KMS Along with the anticipated policy hash for that deployment) and enforced by a hardened container runtime hosted inside of Every instance. The runtime displays instructions in the Kubernetes Management plane, and make