Skip to content

Commit 8b9a6cf

Browse files
committed
temporary hack to enable intel tdx
waiting pr on the trustee side Signed-off-by: Beraldo Leal <bleal@redhat.com>
1 parent 1c7f703 commit 8b9a6cf

File tree

2 files changed

+15
-3
lines changed

2 files changed

+15
-3
lines changed

overrides/values-trustee.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,11 @@ secretStore:
1212
kind: ClusterSecretStore
1313

1414
kbs:
15+
# Enable Intel TDX attestation support
16+
tdx:
17+
enabled: true
18+
collateralService: "https://api.trustedservices.intel.com/sgx/certification/v4/"
19+
1520
secretResources:
1621
- name: "kbsres1"
1722
key: "secret/data/hub/kbsres1"

values-coco-dev.yaml

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -306,10 +306,17 @@ clusterGroup:
306306
name: trustee
307307
namespace: trustee-operator-system
308308
project: hub
309-
chart: trustee
310-
chartVersion: 0.1.*
309+
# TEMPORARY: Using Git branch with TDX config until PR merges
310+
# Git repo with TDX attestation support
311+
repoURL: https://github.com/beraldoleal/trustee-chart.git
312+
targetRevision: tdx-fix-2
313+
path: .
314+
# TO REVERT after PR merge: Remove repoURL/targetRevision/path and uncomment:
315+
# chart: trustee
316+
# chartVersion: 0.1.*
317+
# Values file in same Git repo (no need for $patternref with Git source)
311318
extraValueFiles:
312-
- '$patternref/overrides/values-trustee.yaml'
319+
- values-coco.yaml
313320
sandbox:
314321
name: sandbox
315322
namespace: openshift-sandboxed-containers-operator

0 commit comments

Comments
 (0)