-
Story
-
Resolution: Done
-
High
-
None
-
None
Please review the values, policies, and secrets for Trustee: 7.13. Configuring Trustee values, policies, and secrets for accuracy.
Change the section heading to align with the instructions:
7.13.3. Configuring PCCS for TDX Create TDX configmap
If you use Intel Trust Domain Extensions (TDX), you must configure Trustee to use the Provisioning Certificate Caching Service (PCCS).
The PCCS retrieves the Provisioning Certification Key (PCK) certificates and caches them in a local database.
Updated example tdx-config.yaml:
Procedure
Create a tdx-config.yaml manifest file according to the following example:
apiVersion: v1 data: sgx_default_qcnl.conf: | { "collateral_service": "https://api.trustedservices.intel.com/sgx/certification/v4/" } kind: ConfigMap metadata: name: tdx-config namespace: trustee-operator-system
Consolidated the required changes in this doc - https://docs.google.com/document/d/1j1LvxHkJIisNSX57JkWoTwSGtKNLvKPbDiRkitswkXA/edit?tab=t.0