scripts: Pre-pull extra approved images

Some integration tests might run on more approved images. Find which it
is based on the test file then pre-pull it.

Signed-off-by: Beñat Gartzia Arruabarrena <bgartzia@redhat.com>
Assisted-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: bgartzi

scripts/pre-pull-images.sh

@@ -4,15 +4,27 @@
 #
 # SPDX-License-Identifier: CC0-1.0
 
+secondary_approved_image() {
+    sed -nE 's/const COMBINE_PCRS_UPDATE_TEST_IMAGE: &str = "(.*)";/\1/p' tests/trusted_execution_cluster.rs
+}
 
 ## Special handling for the approved image because of the kind issue with
 ## loading images used by image volumes. See:
 ##   https://github.com/kubernetes-sigs/kind/issues/4099
-LOCAL_APPROVED_IMAGE=localhost:5000/approved-image:latest
-docker pull $APPROVED_IMAGE
-docker tag $APPROVED_IMAGE $LOCAL_APPROVED_IMAGE
-docker push $LOCAL_APPROVED_IMAGE
-docker exec -ti  kind-control-plane crictl pull $LOCAL_APPROVED_IMAGE
+pull_approved_image() {
+	local image=$1
+	local index=$2
+	local local_image="localhost:5000/approved-image-${index}:latest"
+	echo "Pulling approved image: $image"
+	docker pull "$image"
+	docker tag "$image" "$local_image"
+	docker push "$local_image"
+	docker exec -ti kind-control-plane crictl pull "$local_image"
+	echo "-------------------------------"
+}
+
+pull_approved_image "$APPROVED_IMAGE" 0
+pull_approved_image "$(secondary_approved_image)" 1
 
 KV_VERSION=v1.7.0
 IMAGES=(

tests/trusted_execution_cluster.rs

@@ -22,6 +22,8 @@ use trusted_cluster_operator_lib::{
 use trusted_cluster_operator_test_utils::constants::*;
 use trusted_cluster_operator_test_utils::*;
 
+const COMBINE_PCRS_UPDATE_TEST_IMAGE: &str = "quay.io/trusted-execution-clusters/fedora-coreos@sha256:372a5db90a8695fafc2869d438bacd7f0ef7fd84f63746a450bfcd4b8b64ae83";
+
 fn ak_approved(ak: Option<&AttestationKey>) -> bool {
     let is_approved = |c: &Condition| c.type_ == "Approved" && c.status == "True";
     let cs = ak.and_then(|ak| ak.status.as_ref().and_then(|s| s.conditions.as_ref()));
@@ -357,7 +359,7 @@ async fn test_approved_image_readoption() -> anyhow::Result<()> {
 named_test! {
 async fn test_combined_image_pcrs_configmap_updates() -> anyhow::Result<()> {
     let test_ctx = setup!([
-        "quay.io/trusted-execution-clusters/fedora-coreos@sha256:372a5db90a8695fafc2869d438bacd7f0ef7fd84f63746a450bfcd4b8b64ae83",
+        COMBINE_PCRS_UPDATE_TEST_IMAGE,
     ]).await?;
     let client = test_ctx.client();
     let namespace = test_ctx.namespace();