Support Nitro Enclaves

[bwagner5]

Tell us about your request

Support AWS Nitro Enclaves - https://aws.amazon.com/ec2/nitro/nitro-enclaves/

Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?

Use Nitro Enclaves w/ Karpenter

Are you currently working around this issue?

No

Additional Context

No response

Attachments

No response

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

[sftim]

I think this use case would be effectively served through a combination of:

• Dynamic resource allocation
• Karpenter node management

I can see how its important; however, getting the design right (or even good enough to not have frustrations) will take some work.

[mlschindler]

My org is very interested in seeing this come to fruition. One of the issues we run into with Nitro Enclaves is random page size allocations; we are supposed to be able to guarantee any arbitrary Huge Page size, but AWS doesn't respect it properly on node provision. We have multiple open tickets with them and I can link findings back here when it becomes appropriate.

[james-callahan]

For what it's worth, for our nitro enclave usage the main thing missing is the custom resource support, i.e. kubernetes-sigs/karpenter#751

[sergiy-slobodyan]

Converted to a discussion for now. Please see the reasoning in this reply

#8165 (comment)