ci: kbs: tdx: Use the hostname ip instead of localhost for the PCCS

We must ensure we use the host ip to connect to the PCCS running on the
host side, instead of using localhost (which has a different meaning
from inside the KBS pod).

The reason we're using `hostname -i` isntead of the helper functions, is
because the helper functions need the coco-kbs deployed for them to
work, and what we do is before the deployment.

Signed-off-by: Fabiano Fidêncio <fabiano.fidencio@intel.com>
This commit is contained in:
Fabiano Fidêncio 2024-06-03 16:28:38 +02:00
parent 822c641b58
commit cac525059e

View File

@ -251,7 +251,7 @@ function kbs_k8s_deploy() {
echo "Setting up custom PCCS for TDX"
cat <<- EOF > "${COCO_KBS_DIR}/config/kubernetes/custom_pccs/sgx_default_qcnl.conf"
{
"pccs_url": "https://localhost:8081/sgx/certification/v4/",
"pccs_url": "https://$(hostname -i):8081/sgx/certification/v4/",
// To accept insecure HTTPS certificate, set this option to false
"use_secure_cert": false