Key parts of the server (eg attestation that the running server code matches the public release) run in the CPU's secure enclave, which makes it non trivial to

Key parts of the server (eg attestation that the running server code matches the public release) run in the CPU's secure enclave, which makes it non trivial to run on your own bare metal k8s. Also, I think Azure is the only cloud provider whose kubernetes implementation supports this. I know they open sourced their implementation but I don't know how hard it is to do on your own environment.