Tracking KubeVirt provider support

[tarumizu]

This issue tracks the development progress. We have listed the development items below to add support for the KubeVirt provider. Each development item are submitted as a PR. If you have any suggestions or tasks related to adding support for the KubeVirt provider, please feel free to comment.

Motivation

By supporting KubeVirt, we expect to enable secure container execution in more areas. We are eager to work on the necessary tasks to achieve this goal, particularly focusing on Arm CCA. We welcome any insights or collaboration from others who are also exploring this area.

Development Item

We are planning to incrementally add support for the KubeVirt provider. The KubeVirt community is actively working on confidential computing support (SEV-SNP, TDX)[1], though both are currently registered as Alpha feature gates[2]. Our approach is to begin with non-CVM support and gradually integrate CVM support as development progresses.

[1] https://kubevirt.io/user-guide/cluster_admin/confidential_computing/
[2] https://github.com/kubevirt/kubevirt/blob/v1.8.2/pkg/virt-config/featuregate/active.go#L250-L251

Implementation

• Adding initial support for KubeVirt
  • Add support for a new built-in provider by following the addnewprovider.md
• Integrate CVM support (such as SNP, TDX and SEV)
  • These items will be considered once the dependent features in KubeVirt are completed.

Testing

• E2E tests for the KubeVirt provider

Documentation

• How to build a Pod VM image