AKS now supports enclave aware containers that are programmed for the trusted execution environment (TEE) with confidential containers allowing users to run unmodified existing Docker containers on AKS . This capability on AKS is provided by Intel SGX DCSv2 confidential computing nodes in suppoted AKS and DCSv2 SKU regions.
Get started with CLI deployment with a "Hello from Enclave" sample application here.