Secure workload deployment

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:

• to obtain, at a primary device, a public key corresponding to a secondary device, wherein the public key is obtained from a processor-based orchestrator, via a secure communication channel, in a distributed computing environment;
• to initiate, by the primary device, an attestation process at the secondary device based at least in part on the public key, wherein the attestation process obtains information corresponding to a configuration of the secondary device;
• and
• to cause the secondary device to execute a first workload from among a plurality of workloads based at least in part on a result of the attestation process.

An apparatus comprising:

• at least one processing device comprising a processor coupled to a memory;
• the at least one processing device being configured:
• to obtain, at a primary device, a public key corresponding to a secondary device, wherein the public key is obtained from a processor-based orchestrator, via a secure communication channel, in a distributed computing environment;
• to initiate, by the primary device, an attestation process at the secondary device based at least in part on the public key, wherein the attestation process obtains information corresponding to a configuration of the secondary device;
• and
• to cause the secondary device to execute a first workload from among a plurality of workloads based at least in part on a result of the attestation process.