Skip to content

docs: Add reference values flow#44

Merged
alicefr merged 1 commit into
trusted-execution-clusters:mainfrom
Jakob-Naucke:rv-design
Oct 28, 2025
Merged

docs: Add reference values flow#44
alicefr merged 1 commit into
trusted-execution-clusters:mainfrom
Jakob-Naucke:rv-design

Conversation

@Jakob-Naucke
Copy link
Copy Markdown
Contributor

Design proposal (partially implemented but open to comments on anything)

Comment thread docs/design/reference-values.md Outdated
Comment thread docs/design/reference-values.md
Comment thread docs/design/reference-values.md
{
"version": "0.1.0",
"name": "tpm_pcr4",
"expiration": "2026-10-02T13:00:13Z",
Copy link
Copy Markdown
Contributor

@alicefr alicefr Oct 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the expiration on the entire list or on each single value?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's on the Trustee RVPS resource of the particular name tpm_pcr4. As of now, each time the reference values update, we accumulate all and set them to expire in 365 days. This could be refined and then it may (read: did not test) be possible to have multiple reference values with the same name (after all, it's not a dictionary key) but different expiration times.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it would make more sense to me that having a generic expiration time, but it is for sure a more advanced topic

Signed-off-by: Jakob Naucke <jnaucke@redhat.com>
@alicefr
Copy link
Copy Markdown
Contributor

alicefr commented Oct 28, 2025

/lgtm

@alicefr alicefr merged commit 2c66e2d into trusted-execution-clusters:main Oct 28, 2025
7 checks passed
@Jakob-Naucke Jakob-Naucke deleted the rv-design branch October 28, 2025 11:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants