From cfdef7ed5f5983e10f486a68d683c9a133d56b01 Mon Sep 17 00:00:00 2001
From: Gabriela Cervantes <gabriela.cervantes.tellez@intel.com>
Date: Mon, 20 May 2024 16:58:41 +0000
Subject: [PATCH] tests/k8s: Use custom intel DCAP configuration

This PR adds the use of custom Intel DCAP configuration when
deploying the KBS.

Signed-off-by: Gabriela Cervantes <gabriela.cervantes.tellez@intel.com>
---
 .../kubernetes/confidential_kbs.sh            | 12 ++++++++
 tests/integration/kubernetes/gha-run.sh       | 28 ++++++++++++++++---
 2 files changed, 36 insertions(+), 4 deletions(-)

diff --git a/tests/integration/kubernetes/confidential_kbs.sh b/tests/integration/kubernetes/confidential_kbs.sh
index c09a05cf59..7444a87320 100644
--- a/tests/integration/kubernetes/confidential_kbs.sh
+++ b/tests/integration/kubernetes/confidential_kbs.sh
@@ -13,6 +13,7 @@ source "${kubernetes_dir}/../../gha-run-k8s-common.sh"
 # shellcheck disable=1091
 source "${kubernetes_dir}/../../../ci/lib.sh"
 
+KATA_HYPERVISOR="${KATA_HYPERVISOR:-qemu}"
 # Where the trustee (includes kbs) sources will be cloned
 readonly COCO_TRUSTEE_DIR="/tmp/trustee"
 # Where the kbs sources will be cloned
@@ -232,6 +233,17 @@ function kbs_k8s_deploy() {
 	[ -n "$ingress" ] && _handle_ingress "$ingress"
 
 	echo "::group::Deploy the KBS"
+	if [ "${KATA_HYPERVISOR}" = "qemu-tdx" ]; then
+		cat <<- EOF > "${COCO_KBS_DIR}/config/kubernetes/custom_pccs/sgx_default_qcnl.conf"
+{
+ "pccs_url": "https://localhost:8081/sgx/certification/v4/",
+
+ // To accept insecure HTTPS certificate, set this option to false
+ "use_secure_cert": false
+}
+EOF
+		export DEPLOYMENT_DIR=custom_pccs
+	fi
 	./deploy-kbs.sh
 	popd
 
diff --git a/tests/integration/kubernetes/gha-run.sh b/tests/integration/kubernetes/gha-run.sh
index 9f8192ea66..f33a141cb2 100755
--- a/tests/integration/kubernetes/gha-run.sh
+++ b/tests/integration/kubernetes/gha-run.sh
@@ -131,7 +131,12 @@ function configure_snapshotter() {
 }
 
 function delete_coco_kbs() {
-	kbs_k8s_delete
+	if [ "${KATA_HYPERVISOR}" == "qemu-tdx" ]; then
+		echo "Skipping deleting coco kbs for ${KATA_HYPERVISOR}"
+		exit 0
+	else
+		kbs_k8s_delete
+	fi
 }
 
 # Deploy the CoCo KBS in Kubernetes
@@ -141,7 +146,12 @@ function delete_coco_kbs() {
 #	              service externally
 #
 function deploy_coco_kbs() {
-	kbs_k8s_deploy "$KBS_INGRESS"
+	if [ "${KATA_HYPERVISOR}" == "qemu-tdx" ]; then
+		echo "Skipping deploying coco kbs for ${KATA_HYPERVISOR}"
+		exit 0
+	else
+		kbs_k8s_deploy "$KBS_INGRESS"
+	fi
 }
 
 function deploy_kata() {
@@ -263,11 +273,21 @@ function deploy_kata() {
 }
 
 function install_kbs_client() {
-	kbs_install_cli
+	if [ "${KATA_HYPERVISOR}" == "qemu-tdx" ]; then
+		echo "Skipping install kbs client for ${KATA_HYPERVISOR}"
+		exit 0
+	else
+		kbs_install_cli
+	fi
 }
 
 function uninstall_kbs_client() {
-	kbs_uninstall_cli
+	if [ "${KATA_HYPERVISOR}" == "qemu-tdx" ]; then
+		echo "Skipping uninstall kbs client for ${KATA_HYPERVISOR}"
+		exit 0
+	else
+		kbs_uninstall_cli
+	fi
 }
 
 function run_tests() {