[2596182319] Upstream Reporter: Huijing Hei
Upstream issue status: Closed
Upstream description:

Google Cloud Platform supports "Confidential Compute Instances" which are run on Intel TDX hardware nodes, see https://cloud.google.com/blog/products/identity-security/rsa-google-intel-confidential-computing-more-secure.

In order to fully support this VM option, the images need to be marked as `TDX_CAPABLE`.

Check list:

• [x] Mark FCOS GCP images as `TDX_CAPABLE`.
• [x] Add a test to make sure that FCOS runs on `TDX_CAPABLE` instances in GCP.

—
Related AMD SEV-SNP issue, see:

• https://github.com/coreos/coreos-assembler/pull/3547
• https://github.com/coreos/coreos-assembler/pull/3871 & https://github.com/coreos/coreos-assembler/pull/3876