Skip to content

feat: osc 1.13 / trustee 1.2 pattern update#101

Merged
butler54 merged 1 commit into
validatedpatterns:mainfrom
butler54:pr/osc-1.13-trustee-1.2
Jul 21, 2026
Merged

feat: osc 1.13 / trustee 1.2 pattern update#101
butler54 merged 1 commit into
validatedpatterns:mainfrom
butler54:pr/osc-1.13-trustee-1.2

Conversation

@butler54

Copy link
Copy Markdown
Collaborator

Summary

Update coco-pattern for OSC 1.13 / Trustee 1.2 operator support.

  • Operator CSV pins: sandboxed-containers v1.13.0, trustee v1.2.0
  • Chart versions: trustee 0.9., sandboxed-policies 0.3.
  • Azure values: kbs-access split to curl/sealed, azure-spoke updated
  • RHDP wrapper: clusterGroupName azure, values-simple rename, --tee snp
  • collect-firmware-refvals.sh: coco-tools 0.5.1, --image-tag flag
  • JWK signing key generation, PCCS override removal, admin auth cleanup
  • Initdata docs: authenticated_registry_credentials_uri is baremetal-only

Depends on:

  • validatedpatterns/trustee-chart v0.9.0 (merged)
  • validatedpatterns/sandboxed-policies-chart v0.3.0 (merged)

Test Plan

  • Baremetal TDX (APAC lab node-02, OCP 4.21.20) — all trust claims affirming
  • Azure SEV-SNP peer-pods (eastasia) — attestation passing, workloads running

operator pins:
- sandboxed-containers-operator csv v1.13.0
- trustee-operator csv v1.2.0
- trustee chartVersion 0.9.*, sandboxed-policies chartVersion 0.3.*

azure values alignment:
- kbs-access split to kbs-access-curl + kbs-access-sealed
- values-azure-spoke.yaml updated to match

rhdp wrapper fixes:
- clusterGroupName validation: simple -> azure
- rhdp-cluster-define.py: values-simple -> values-azure
- collect-firmware-refvals.sh: --tee snp, --image-tag, coco-tools 0.5.1

additional:
- jwk signing key generation for sealed secrets
- pccs collateralService override removed
- dead admin auth keypair cleanup
- initdata template docs for azure peer-pods credential behavior

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@butler54
butler54 requested a review from a team July 21, 2026 05:13
@butler54
butler54 merged commit 391662b into validatedpatterns:main Jul 21, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant