feat: add NVIDIA GPU attestation via NRAS remote verifier

- Add kbs.gpu.enabled value (default false) for GPU attestation support
- Configure NRAS remote verifier when GPU enabled (kbs-config-map)
- Add default_gpu.rego policy for NRAS x-nvidia-* claims
- Add GPU-aware resource policy requiring both cpu0 and gpu0 affirming
- Existing GPU rules in default_cpu.rego handle CPU-class + GPU evidence

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: butler54

templates/attestation-policy.yaml

@@ -69,4 +69,62 @@ data:
       input.init_data in query_reference_value("init_data")
     }
     hardware := 2 if { input["snp"] }
-    configuration := 2 if { input["snp"] }
+    configuration := 2 if { input["snp"] }
+    {{- if .Values.kbs.gpu.enabled }}
+
+    ##### GPU Attestation (NVIDIA H100/H200) — CPU-class evidence with GPU data
+    hardware := 2 if {
+      input["snp"]
+      input["gpu"]
+    }
+
+    executables := 3 if {
+      input["snp"]
+      input["gpu"]
+      input.init_data in query_reference_value("init_data")
+    }
+
+    configuration := 2 if {
+      input["snp"]
+      input["gpu"]
+    }
+    {{- end }}
+{{- if .Values.kbs.gpu.enabled }}
+  default_gpu.rego: |
+    package policy
+
+    import rego.v1
+
+    default hardware := 97
+    default executables := 33
+    default configuration := 36
+
+    trust_claims := {
+      "executables": executables,
+      "hardware": hardware,
+      "configuration": configuration,
+    }
+
+    hardware := 2 if {
+      input.nvidia
+      input.nvidia["x-nvidia-gpu-attestation-report-cert-chain"]["x-nvidia-cert-status"] == "valid"
+      input.nvidia["x-nvidia-gpu-attestation-report-parsed"]
+      input.nvidia["x-nvidia-gpu-attestation-report-signature-verified"]
+      input.nvidia["x-nvidia-gpu-arch-check"]
+    }
+
+    configuration := 2 if {
+      input.nvidia.secboot
+      input.nvidia.dbgstat == "disabled"
+    }
+
+    executables := 3 if {
+      input.nvidia["x-nvidia-gpu-driver-rim-fetched"]
+      input.nvidia["x-nvidia-gpu-driver-rim-schema-validated"]
+      input.nvidia["x-nvidia-gpu-driver-rim-signature-verified"]
+      input.nvidia["x-nvidia-gpu-vbios-rim-fetched"]
+      input.nvidia["x-nvidia-gpu-vbios-rim-schema-validated"]
+      input.nvidia["x-nvidia-gpu-vbios-rim-signature-verified"]
+      input.nvidia.measres == "success"
+    }
+{{- end }}

templates/kbs-config-map.yaml

@@ -52,6 +52,11 @@ data:
     [attestation_service.rvps_config.storage]
     type = "LocalJson"
     file_path = "/opt/confidential-containers/rvps/reference-values/reference-values.json"
+    {{- if .Values.kbs.gpu.enabled }}
+
+    [attestation_service.verifier_config.nvidia_verifier]
+    type = "Remote"
+    {{- end }}
 
     [[plugins]]
     name = "resource"

templates/resource-policy.yaml

@@ -15,4 +15,11 @@ data:
 
     allow if {
       input["submods"]["cpu0"]["ear.status"] == "affirming"
-    }
+    }
+    {{- if .Values.kbs.gpu.enabled }}
+
+    allow if {
+      input["submods"]["cpu0"]["ear.status"] == "affirming"
+      input["submods"]["gpu0"]["ear.status"] == "affirming"
+    }
+    {{- end }}

values.yaml

@@ -48,6 +48,10 @@ kbs:
   # exist in the trustee-operator-system namespace.
   extraSecrets: []
 
+  # NVIDIA GPU confidential computing configuration
+  gpu:
+    enabled: false
+
   # Intel TDX (Trust Domain Extensions) configuration
   tdx:
     # Enable TDX attestation support