Constellation is the first always-encrypted Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.