Description

OCP 4.19.4 on Azure

OSC 1.9

Trustee 0.4.0 quay.io/redhat-user-workloads/ose-osc-tenant/trustee-fbc-4-19:trustee-fbc-4-19-on-push-7mtwc-build-image-index configured per https://osc.pages.redhat.com/documentation/next/deploying/operators/trustee/configuring 

quay.io/confidential-containers/kbs-client:v0.13.0 works

kbs-client --url http://$nodeIP:$nodePort get-resource --path default/kbsres1/key1 

returns correct value and trustee-deployment logs shows transaction

pod with this image failed with no contact to trustee-deployment log

ghcr.io/confidential-containers/test-container-image-rs:cosign-signed

fails with 

 rpc status: Status { code: INTERNAL, message: "[CDH] [ERROR]: Get Resource failed", details: [], special_fields: SpecialFields { unknown_fields: UnknownFields { fields: None }, cached_size: CachedSize { size: 0 } } }

events.log