--- title: "Build a zero trust AI pipeline with OpenShift and RHEL CVMs" url: https://daily.dev/posts/build-a-zero-trust-ai-pipeline-with-openshift-and-rhel-cvms-6mhnornct source_url: https://developers.redhat.com/articles/2026/05/13/build-zero-trust-ai-pipeline-openshift-rhel-cvms type: article source: "Red Hat Developer" published: 2026-05-13T13:29:47.001Z updated: 2026-05-13T13:30:33.584Z tags: ["openshift", "red-hat"] reading_time: 18 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Build a zero trust AI pipeline with OpenShift and RHEL CVMs **[Red Hat Developer](https://daily.dev/sources/rhdev)** · 18 min read · 0 upvotes · 0 comments ## Summary A hands-on walkthrough of building a zero trust AI pipeline for healthcare using Red Hat OpenShift confidential containers (CoCo) and RHEL confidential virtual machines (CVMs). The scenario centers on deploying a PHI de-identification NLP model (obi/deid_roberta_i2b2) while enforcing strict security policies via hardware attestation. The architecture separates a trusted on-premises cluster (running Red Hat build of Trustee, OpenShift Pipelines, and GitOps/Argo CD) from an untrusted cloud deployment cluster on Azure Red Hat OpenShift. Three automated pipelines handle the full lifecycle: a standard build pipeline, a CoCo-fy pipeline that hardens containers with sealed secrets and mTLS sidecars, and a CVM pipeline that deploys AMD SEV-SNP-backed instances on Azure and AWS. Secrets are only released after hardware attestation succeeds, and developers like Janine need no changes to their existing workflow. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Fine-tune AI pipelines in Red Hat OpenShift AI 3.3](https://daily.dev/posts/fine-tune-ai-pipelines-in-red-hat-openshift-ai-3-3-kdpwnunnd) · Red Hat Developer · 0 upvotes · 0 comments - [Confidential VMs: The core of confidential containers](https://daily.dev/posts/confidential-vms-the-core-of-confidential-containers-vgofz2v4w) · Red Hat Developer · 2 upvotes · 0 comments - [An overview of confidential containers on OpenShift bare metal](https://daily.dev/posts/an-overview-of-confidential-containers-on-openshift-bare-metal-jesfcemnn) · Red Hat Developer · 0 upvotes · 1 comments - [Red Hat ships AI platform for hybrid cloud deployments](https://daily.dev/posts/red-hat-ships-ai-platform-for-hybrid-cloud-deployments-wkafxoetq) · InfoWorld · 0 upvotes · 0 comments - [Building a Zero-Trust Architecture for Confidential AI Factories](https://daily.dev/posts/building-a-zero-trust-architecture-for-confidential-ai-factories-snfbnxpu6) · NVIDIA Developer · 0 upvotes · 0 comments --- Tags: [#openshift](https://daily.dev/tags/openshift), [#red-hat](https://daily.dev/tags/red-hat) [View this post on daily.dev](https://daily.dev/posts/build-a-zero-trust-ai-pipeline-with-openshift-and-rhel-cvms-6mhnornct)