The Red Hat Ecosystem Catalog is the official source for discovering and learning more about the Red Hat Ecosystem of both Red Hat and certified third-party products and services.
We’re the world’s leading provider of enterprise open source solutions—including Linux, cloud, container, and Kubernetes. We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.
Zero-touch Intel TDX DCAP platform registration and QGS deployment in OpenShift, enabling confidential computing workloads to generate remote attestation quotes.
Intel TDX worker nodes require PCK certificates tied to each node's CPU to generate remote attestation quotes. Intel TDX DCAP Operator automates this through a PCK Certificate Registrar that handles platform registration with Intel PCS, and a TDX Quote Generation Service (QGS) that runs on every SGX-capable node.
The operator manages both through a single custom resource and supports three modes: Online, Offline, and External.
Automatic registration (including TCB-Recovery) and certificate provisioning via Intel PCS.
For air-gapped environments; platform data is collected automatically but certificates are provisioned manually.
Certificates are managed externally; the operator only deploys the QGS DaemonSet.
Red Hat certified products are tested to meet Red Hat’s criteria and supported as defined in the Red Hat Collaborative Support Process.
Partner validated products are tested by Red Hat Partners and supported as defined in the Red Hat Third Party Component Policy.
Please open an issue on the GitHub issue tracker for this project.
When reporting a problem, include the Kubernetes/OpenShift version, operator version,
and any relevant logs or error messages to help with diagnosis.
Red Hat OpenShift 4.19, 4.20, 4.21, 4.22
Red Hat OpenShift 4.12, 4.14, 4.16, 4.17, 4.18, 4.19, 4.20, 4.21, 4.22