A method for accessing shared sensitive information in a managed container environment, the method comprising: accessing, by each worker node (308, 310) in a plurality of worker nodes, shared sensitive application data located in a secure enclave within the plurality of worker nodes using a data encryption key (220, 324, 326); and protecting, by each worker node in the plurality of worker nodes, the data encryption key of each respective worker node using a sealing key that is unique to the secure enclave on a respective worker node; generating (402, 702) a first worker node with a first key orchestration agent in a cluster of an open source container orchestration framework; generating, by the first key orchestration agent of the first worker node, the data encryption key; generating (422, 706), by the first worker node, a first sealing key unique to the secure enclave on the first worker node, for protecting the data encryption key, by retrieving the first sealing key (222, 322, SK-A) from the secure enclave; sealing, using the first sealing key, the data encryption key; performing, by the first key orchestration agent of the first worker node, local attestation with a container (224, 316) on the first worker node; sharing the data encryption key, by the first key orchestration agent, with the container on the first worker node; performing, by the first worker node, remote attestation with a second worker node in the cluster in response to creation of the second worker node in the cluster; providing, by the first worker node, a copy of the data encryption key (324, 334) to the second worker node upon successful performance of the remote attestation; retrieving, by the second worker node, a second sealing key (332, SK-B) from a secure enclave on the second worker node; sealing, using the second sealing key, the data encryption key; performing, by the second worker node, local attestation with a container on the second worker node; sharing the data encryption key with the container on the second worker node; decrypting, using the data encryption shared with the container of the second worker node, data corresponding to a workload of another container on the first worker node to perform one or more operations on the data; encrypting, using the data encryption key shared with the container of the second worker node, the data after performing the set of operations. accessing, by each worker node (308, 310) in a plurality of worker nodes, shared sensitive application data located in a secure enclave within the plurality of worker nodes using a data encryption key (220, 324, 326); and protecting, by each worker node in the plurality of worker nodes, the data encryption key of each respective worker node using a sealing key that is unique to the secure enclave on a respective worker node; generating (402, 702) a first worker node with a first key orchestration agent in a cluster of an open source container orchestration framework; generating, by the first key orchestration agent of the first worker node, the data encryption key; generating (422, 706), by the first worker node, a first sealing key unique to the secure enclave on the first worker node, for protecting the data encryption key, by retrieving the first sealing key (222, 322, SK-A) from the secure enclave; sealing, using the first sealing key, the data encryption key; performing, by the first key orchestration agent of the first worker node, local attestation with a container (224, 316) on the first worker node; sharing the data encryption key, by the first key orchestration agent, with the container on the first worker node; performing, by the first worker node, remote attestation with a second worker node in the cluster in response to creation of the second worker node in the cluster; providing, by the first worker node, a copy of the data encryption key (324, 334) to the second worker node upon successful performance of the remote attestation; retrieving, by the second worker node, a second sealing key (332, SK-B) from a secure enclave on the second worker node; sealing, using the second sealing key, the data encryption key; performing, by the second worker node, local attestation with a container on the second worker node; sharing the data encryption key with the container on the second worker node; decrypting, using the data encryption shared with the container of the second worker node, data corresponding to a workload of another container on the first worker node to perform one or more operations on the data; encrypting, using the data encryption key shared with the container of the second worker node, the data after performing the set of operations.