Skip to content

Improve initdata#25

Open
esposem wants to merge 26 commits intoconfidential-devhub:mainfrom
esposem:initdata
Open

Improve initdata#25
esposem wants to merge 26 commits intoconfidential-devhub:mainfrom
esposem:initdata

Conversation

@esposem
Copy link

@esposem esposem commented Feb 19, 2026 •
edited
Loading

Fix some bug and most importantly provide a initdata-reference yaml file that prints the initdata and the PCR8 to add to the reference values.

This is rebased on top of #24 (actual PR is the last 4 commits)

esposem added 26 commits February 19, 2026 13:45
@esposem
init: move runtimeclass setup in a separate function
ee6cc26 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
apply: get rid of getTrusteeNamespace in favor of cfg.GetTrusteeNames…
a463e88 
…pace
@esposem
init: skip CA cert upload if the Trustee URL is not defined, just gen…
8125a42 
…erate the files

Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
Use right default Trustee namespace
02e5854 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
fix tests for default Trustee namespace
e695d2a
@esposem
init/apply: add certDir to customize where certificates are stored/lo…
22546a5 
…aded when needed by sidecar

Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
add a test for certdir
89c8d08 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
apply: introduce cert-dir that overrides the --cert-dir of init
f5ddbcf 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
add a test for override certdir
e922e3f 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
apply: add enableinitdata and trusteeurl, to add the initdata annotation
81f8f37 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
fix tests with initdata.Generate()
46818d8
@esposem
init: trustee-url is now optional, only needed for initdata
9a29f88 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
fix test missing trustee server
9176659
@esposem
init: rename skip-trustee-deploy with trustee-deploy. Same effect but…
1131c7e 
… flag is defaulted to the opposite
@esposem
fix tests for trustee-deploy
97d14f4
@esposem
apply: rename skip-apply with apply. Same effect but flag is defaulte…
592efce 
…d to the opposite
@esposem
fix tests for apply
295f200
@esposem
apply: change the sidecar certs URI to be in the kbs://default Truste…
40e7a29 
…e ns

Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
init: add trustee-ca-certs flag to provide trustee CA, when not deployed
fb917b7 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
initdata: fix cert formatting in initdata.toml
0393ce2 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
initdata: fix cert formatting for extra_root_certificate
38b16bd 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
add initdata test
1a2c25c 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
initdata: introduce GenerateWithArtifacts to also get the pcr8 and ra…
c87f0bc 
…w data

Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
apply: generate *-initdata-reference.yaml file with initdata info
b8cb94f 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
add initdata test
14994f7 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
@esposem
extend dump_initdata to provide the *-initdata-reference.yaml too
817c548 
Signed-off-by: Emanuele Giuseppe Esposito <eesposit@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@esposem