Description

I wanted to deploy remote attestation for Intel TDX. It failed because this ends up trying to pull non existing QGS and PCCS images from the RedHat registry.

Steps to reproduce

1. Follow steps at https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.11/html-single/deploying_confidential_containers/index#deploying-remote-attestation-for-tdx_metal-cc

Expected result

Steps 2.6.6 and 2.6.7 succeed.

Actual result

Steps 2.6.6 and 2.6.7 fail.

Impact

User cannot deploy remote Intel TDX attestation.

Env

OSC 1.11.1

Additional helpful info

The images mentioned in the`devel` branch of the OSC repo aren't safe references since they are not yet released :

• https://raw.githubusercontent.com/openshift/sandboxed-containers-operator/refs/heads/devel/scripts/install-helpers/baremetal-coco/intel-dcap/qgs.yaml
• https://raw.githubusercontent.com/openshift/sandboxed-containers-operator/refs/heads/devel/scripts/install-helpers/baremetal-coco/intel-dcap/pccs.yaml.in

An official release tag should be used instead :

• https://raw.githubusercontent.com/openshift/sandboxed-containers-operator/refs/tags/v1.11.1/scripts/install-helpers/baremetal-coco/intel-dcap/qgs.yaml
• https://raw.githubusercontent.com/openshift/sandboxed-containers-operator/refs/tags/v1.11.1/scripts/install-helpers/baremetal-coco/intel-dcap/pccs.yaml.in