feat: update to 1.11

Signed-off-by: Chris Butler <chris.butler@redhat.com>

Author: butler54

charts/coco-supported/baremetal/templates/intel-nfd-rules.yaml

@@ -1,13 +1,13 @@
 apiVersion: nfd.openshift.io/v1alpha1
 kind: NodeFeatureRule
 metadata:
-  name: intel-dp-devices
+  name: intel-tdx
   namespace: openshift-nfd
 spec:
   rules:
     - name: "intel.sgx"
       labels:
-        "intel.feature.node.kubernetes.io/sgx": "true"
+        "feature.node.kubernetes.io/sgx": "true"
       extendedResources:
         sgx.intel.com/epc: "@cpu.security.sgx.epc"
       matchFeatures:

charts/coco-supported/baremetal/templates/kata-nfd.yaml

@@ -0,0 +1,29 @@
+apiVersion: nfd.openshift.io/v1alpha1
+kind: NodeFeatureRule
+metadata:
+  name: osc-rules
+  namespace: openshift-nfd
+spec:
+  rules:
+    - name: "runtime.kata"
+      labels:
+        "feature.node.kubernetes.io/runtime.kata": "true"
+      matchAny:
+        - matchFeatures:
+            - feature: cpu.cpuid
+              matchExpressions:
+                SSE42: {op: Exists}
+                VMX: {op: Exists}
+            - feature: kernel.loadedmodule
+              matchExpressions:
+                kvm: {op: Exists}
+                kvm_intel: {op: Exists}
+        - matchFeatures:
+            - feature: cpu.cpuid
+              matchExpressions:
+                SSE42: {op: Exists}
+                SVM: {op: Exists}
+            - feature: kernel.loadedmodule
+              matchExpressions:
+                kvm: {op: Exists}
+                kvm_amd: {op: Exists}

charts/coco-supported/baremetal/templates/nfd-instance.yaml

@@ -5,7 +5,7 @@ metadata:
   namespace: openshift-nfd
 spec:
   operand:
-    image: registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9:v4.16
+    image: registry.redhat.io/openshift4/ose-node-feature-discovery-rhel9:v4.20
     imagePullPolicy: Always
     servicePort: 12000
   workerConfig:

charts/coco-supported/baremetal/templates/vsock-mco.yaml

@@ -1,16 +1,35 @@
+# apiVersion: machineconfiguration.openshift.io/v1
+# kind: MachineConfig
+# metadata:
+#   name: 50-enable-vsock-loopback
+#   labels:
+#     machineconfiguration.openshift.io/role: master
+# spec:
+#   config:
+#     ignition:
+#       version: 3.2.0
+#     storage:
+#       files:
+#         - contents:
+#             source: data:text/plain;charset=utf-8;base64,dnNvY2tfbG9vcGJhY2s=
+#           mode: 0644
+#           path: /etc/modules-load.d/vsock-loopback.conf
 apiVersion: machineconfiguration.openshift.io/v1
 kind: MachineConfig
 metadata:
-  name: 50-enable-vsock-loopback
   labels:
     machineconfiguration.openshift.io/role: master
+  name: 99-enable-intel-tdx
 spec:
+  kernelArguments:
+  - kvm_intel.tdx=1
+  - nohibernate
   config:
     ignition:
       version: 3.2.0
     storage:
       files:
-        - contents:
-            source: data:text/plain;charset=utf-8;base64,dnNvY2tfbG9vcGJhY2s=
+        - path: /etc/modules-load.d/vsock.conf
           mode: 0644
-          path: /etc/modules-load.d/vsock-loopback.conf
+          contents:
+            source: data:text/plain;charset=utf-8;base64,dnNvY2stbG9vcGJhY2sK

values-baremetal.yaml

@@ -31,14 +31,14 @@ clusterGroup:
       source: redhat-operators
       channel: stable
       installPlanApproval: Manual 
-      csv: sandboxed-containers-operator.v1.10.1
+      csv: sandboxed-containers-operator.v1.11.1  
     trustee:
       name: trustee-operator
       namespace: trustee-operator-system
       source: redhat-operators
       channel: stable
       installPlanApproval: Manual
-      csv: trustee-operator.v0.4.1
+      csv: trustee-operator.v1.0.0
     cert-manager:
       name: openshift-cert-manager-operator
       namespace: cert-manager-operator