Update the trustee and kubevirt image

They contains the latest trustee and attester which are compatible.

Signed-off-by: Alice Frosi <[email protected]>

Author: alicefr

Makefile

@@ -25,7 +25,7 @@ OPERATOR_IMAGE=$(REGISTRY)/trusted-cluster-operator:$(TAG)
 COMPUTE_PCRS_IMAGE=$(REGISTRY)/compute-pcrs:$(TAG)
 REG_SERVER_IMAGE=$(REGISTRY)/registration-server:$(TAG)
 ATTESTATION_KEY_REGISTER_IMAGE=$(REGISTRY)/attestation-key-register:$(TAG)
-TRUSTEE_IMAGE ?= quay.io/trusted-execution-clusters/key-broker-service:latest
+TRUSTEE_IMAGE ?= quay.io/trusted-execution-clusters/key-broker-service:20260106
 # tagged as 42.20250705.3.0
 APPROVED_IMAGE ?= quay.io/fedora/fedora-coreos@sha256:8f11c87187dfe83145001e9571948f9ab466e9f4a8b1e092a4798e5db1030dc3
 

examples/vm-coreos-ign.yaml

@@ -89,5 +89,5 @@ spec:
       volumes:
       - name: containerdisk
         containerDisk:
-          image: "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:202615"
+          image: "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:20260106"
           imagePullPolicy: Always

scripts/pre-pull-images.sh

@@ -7,7 +7,8 @@ IMAGES=(
 	"quay.io/kubevirt/virt-api:${KV_VERSION}"
 	"quay.io/kubevirt/virt-controller:${KV_VERSION}"
 	"quay.io/kubevirt/virt-operator:${KV_VERSION}"
-	"quay.io/trusted-execution-clusters/key-broker-service:latest"
+	"quay.io/trusted-execution-clusters/key-broker-service:20260106"
+	"quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:20260106"
 )
 
 for IMAGE in "${IMAGES[@]}"; do

test_utils/src/lib.rs

@@ -312,13 +312,13 @@ impl TestContext {
                 "-pcrs-compute-image",
                 "localhost:5000/trusted-execution-clusters/compute-pcrs:latest",
                 "-trustee-image",
-                "quay.io/trusted-execution-clusters/key-broker-service:tpm-verifier-built-in-as-20250711",
+                "quay.io/trusted-execution-clusters/key-broker-service:20260106",
                 "-register-server-image",
                 "localhost:5000/trusted-execution-clusters/registration-server:latest",
                 "-attestation-key-register-image",
                 "localhost:5000/trusted-execution-clusters/attestation-key-register:latest",
                 "-approved-image",
-                "quay.io/trusted-execution-clusters/fedora-coreos@sha256:e71dad00aa0e3d70540e726a0c66407e3004d96e045ab6c253186e327a2419e5",
+                "quay.io/fedora/fedora-coreos@sha256:8f11c87187dfe83145001e9571948f9ab466e9f4a8b1e092a4798e5db1030dc3"
             ])
             .output()
             .await?;

tests/attestation.rs

@@ -54,7 +54,7 @@ impl SingleAttestationContext {
             "http://register-server.{}.svc.cluster.local:8000/ignition-clevis-pin-trustee",
             namespace
         );
-        let image = "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:202615";
+        let image = "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:20260106";
 
         test_ctx.info(format!("Creating VM: {}", vm_name));
         virt::create_kubevirt_vm(
@@ -127,7 +127,7 @@ async fn test_parallel_vm_attestation() -> anyhow::Result<()> {
         "http://register-server.{}.svc.cluster.local:8000/ignition-clevis-pin-trustee",
         namespace
     );
-    let image = "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:202615";
+    let image = "quay.io/trusted-execution-clusters/fedora-coreos-kubevirt:20260106";
 
     // Launch both VMs in parallel
     let vm1_name = "test-coreos-vm1";