Skip to content

Commit 69577af

Browse files
fangge1212fangge1212
committed
aws: Add cpuOptions to install-config.yaml
This will allow configuring confidential computing on AWS platform, only AMD SEV-SNP is supported for now. Signed-off-by: Fangge Jin <[email protected]>
1 parent cb21f12 commit 69577af

File tree

1 file changed

+112
-0
lines changed

1 file changed

+112
-0
lines changed

‎data/data/install.openshift.io_installconfigs.yaml‎

Lines changed: 112 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,34 @@ spec:
171171
AMIID is the AMI that should be used to boot the ec2 instance.
172172
If set, the AMI should belong to the same region as the cluster.
173173
type: string
174+
cpuOptions:
175+
description: |-
176+
CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
177+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
178+
More info:
179+
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
180+
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
181+
minProperties: 1
182+
properties:
183+
confidentialCompute:
184+
description: |-
185+
ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
186+
and, if so, which confidential computing technology to use.
187+
Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
188+
When set to Disabled, confidential computing will be disabled for the instance.
189+
When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
190+
In this case, ensure the following conditions are met:
191+
1) The selected instance type supports AMD SEV-SNP.
192+
2) The selected AWS region supports AMD SEV-SNP.
193+
3) The selected AMI supports AMD SEV-SNP.
194+
More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
195+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
196+
which is subject to change without notice. The current default is Disabled.
197+
enum:
198+
- Disabled
199+
- AMDEncryptedVirtualizationNestedPaging
200+
type: string
201+
type: object
174202
iamProfile:
175203
description: |-
176204
IAMProfile is the name of the IAM instance profile to use for the machine.
@@ -1611,6 +1639,34 @@ spec:
16111639
AMIID is the AMI that should be used to boot the ec2 instance.
16121640
If set, the AMI should belong to the same region as the cluster.
16131641
type: string
1642+
cpuOptions:
1643+
description: |-
1644+
CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
1645+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
1646+
More info:
1647+
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
1648+
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
1649+
minProperties: 1
1650+
properties:
1651+
confidentialCompute:
1652+
description: |-
1653+
ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
1654+
and, if so, which confidential computing technology to use.
1655+
Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
1656+
When set to Disabled, confidential computing will be disabled for the instance.
1657+
When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
1658+
In this case, ensure the following conditions are met:
1659+
1) The selected instance type supports AMD SEV-SNP.
1660+
2) The selected AWS region supports AMD SEV-SNP.
1661+
3) The selected AMI supports AMD SEV-SNP.
1662+
More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
1663+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
1664+
which is subject to change without notice. The current default is Disabled.
1665+
enum:
1666+
- Disabled
1667+
- AMDEncryptedVirtualizationNestedPaging
1668+
type: string
1669+
type: object
16141670
iamProfile:
16151671
description: |-
16161672
IAMProfile is the name of the IAM instance profile to use for the machine.
@@ -2991,6 +3047,34 @@ spec:
29913047
AMIID is the AMI that should be used to boot the ec2 instance.
29923048
If set, the AMI should belong to the same region as the cluster.
29933049
type: string
3050+
cpuOptions:
3051+
description: |-
3052+
CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
3053+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
3054+
More info:
3055+
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
3056+
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
3057+
minProperties: 1
3058+
properties:
3059+
confidentialCompute:
3060+
description: |-
3061+
ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
3062+
and, if so, which confidential computing technology to use.
3063+
Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
3064+
When set to Disabled, confidential computing will be disabled for the instance.
3065+
When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
3066+
In this case, ensure the following conditions are met:
3067+
1) The selected instance type supports AMD SEV-SNP.
3068+
2) The selected AWS region supports AMD SEV-SNP.
3069+
3) The selected AMI supports AMD SEV-SNP.
3070+
More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
3071+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
3072+
which is subject to change without notice. The current default is Disabled.
3073+
enum:
3074+
- Disabled
3075+
- AMDEncryptedVirtualizationNestedPaging
3076+
type: string
3077+
type: object
29943078
iamProfile:
29953079
description: |-
29963080
IAMProfile is the name of the IAM instance profile to use for the machine.
@@ -4563,6 +4647,34 @@ spec:
45634647
AMIID is the AMI that should be used to boot the ec2 instance.
45644648
If set, the AMI should belong to the same region as the cluster.
45654649
type: string
4650+
cpuOptions:
4651+
description: |-
4652+
CPUOptions defines CPU-related settings for the instance, including the confidential computing policy.
4653+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default.
4654+
More info:
4655+
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CpuOptionsRequest.html,
4656+
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/cpu-options-supported-instances-values.html
4657+
minProperties: 1
4658+
properties:
4659+
confidentialCompute:
4660+
description: |-
4661+
ConfidentialCompute specifies whether confidential computing should be enabled for the instance,
4662+
and, if so, which confidential computing technology to use.
4663+
Valid values are: Disabled, AMDEncryptedVirtualizationNestedPaging and omitted.
4664+
When set to Disabled, confidential computing will be disabled for the instance.
4665+
When set to AMDEncryptedVirtualizationNestedPaging, AMD SEV-SNP will be used as the confidential computing technology for the instance.
4666+
In this case, ensure the following conditions are met:
4667+
1) The selected instance type supports AMD SEV-SNP.
4668+
2) The selected AWS region supports AMD SEV-SNP.
4669+
3) The selected AMI supports AMD SEV-SNP.
4670+
More details can be checked at https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sev-snp.html
4671+
When omitted, this means no opinion and the AWS platform is left to choose a reasonable default,
4672+
which is subject to change without notice. The current default is Disabled.
4673+
enum:
4674+
- Disabled
4675+
- AMDEncryptedVirtualizationNestedPaging
4676+
type: string
4677+
type: object
45664678
iamProfile:
45674679
description: |-
45684680
IAMProfile is the name of the IAM instance profile to use for the machine.

0 commit comments

Comments
 (0)