C8s: A Confidential Kubernetes Architecture. - Amean Asad; Patrick McClurg; João Andrade (CoRR, 2026)