Issues

• [Bug]: RVPS never receives SNP firmware reference values, firmware-refvals-eso ExternalSecret not created

  bug
  validatedpatterns/coco-pattern#158 · Filter by author gurvinder opened on Sep 23, 2026

• [Bug]: trustee chart hardcodes SNP verifier to OfflineStore — no online AMD KDS option

  bug
  validatedpatterns/coco-pattern#157 · Filter by author gurvinder opened on Sep 23, 2026

• [Bug]: Offline SNP VCEK override (values-snp-vcek.yaml) is never loaded by the baremetal clustergroup

  bug
  validatedpatterns/coco-pattern#156 · Filter by author gurvinder opened on Sep 23, 2026

• [Bug]: KBS/Trustee pod crashes with EMFILE ("Too many open files") on large-core nodes

  bug
  validatedpatterns/coco-pattern#155 · Filter by author gurvinder opened on Sep 23, 2026
  1

• [Bug]: Wrong CatalogSource for lvm storage operator

  bug
  validatedpatterns/coco-pattern#154 · Filter by author yuvalturg opened on Sep 22, 2026

• [Bug]: sealed secret implementation is 1/2 baked

  bug
  validatedpatterns/coco-pattern#153 · Filter by author butler54 opened on Sep 18, 2026

• [Docs]: Document signed image behaviour when using oc-mirror with coco

  documentation
  validatedpatterns/coco-pattern#152 · Filter by author butler54 opened on Sep 14, 2026

• [Feature]: Establish a global level debug flag.

  enhancement
  validatedpatterns/coco-pattern#151 · Filter by author butler54 opened on Sep 8, 2026

• [Feature]: support vault integration

  enhancement
  validatedpatterns/coco-pattern#145 · Filter by author butler54 opened on Sep 3, 2026

• feat: automate Azure SNP platform-constant collection via snpguest --openhcl

  validatedpatterns/coco-pattern#133 · Filter by author butler54 opened on Aug 31, 2026

• chore: move collect-firmware-refvals.sh back to container-based veritas once coco-tools ships a newer release

  validatedpatterns/coco-pattern#132 · Filter by author butler54 opened on Aug 31, 2026

• docs: document RHDP wrapper deployment path and configurable secrets locations

  validatedpatterns/coco-pattern#131 · Filter by author butler54 opened on Aug 30, 2026

• chore: modernize podvm SSH-debug key to support Ed25519 alongside RSA

  validatedpatterns/coco-pattern#129 · Filter by author butler54 opened on Aug 30, 2026

• Trustee chart assumes if TDX is enabled it's also offline

  validatedpatterns/coco-pattern#126 · Filter by author butler54 opened on Aug 28, 2026

• Track flipping default securityPolicyFlavour from "insecure" once guest-components#1398 / image-rs#9 land

  validatedpatterns/coco-pattern#125 · Filter by author butler54 opened on Aug 28, 2026

• pck-cert-tool / pcsclient.py require interactive Intel PCS API key entry — blocks full airgap deployment automation

  validatedpatterns/coco-pattern#124 · Filter by author butler54 opened on Aug 28, 2026

• Intel TDX DCAP Operator CSV doesn't declare SCC for QGS DaemonSet — permanent ClusterRoleBinding workaround in charts/all/intel-dcap

  validatedpatterns/coco-pattern#123 · Filter by author butler54 opened on Aug 28, 2026

• kata-cc guest emptyDir volumes are not writable by non-root containers — permanent privileged-SCC workaround in kbs-access-curl

  validatedpatterns/coco-pattern#122 · Filter by author butler54 opened on Aug 28, 2026

• fix: simplify configuration for baremetal hub and spoke

  validatedpatterns/coco-pattern#121 · Filter by author butler54 opened on Aug 28, 2026

• docs: Provide robust documentation updates

  validatedpatterns/coco-pattern#120 · Filter by author butler54 opened on Aug 28, 2026
  1

• feat: allow arbitrary number of initdata payloads to be defined

  validatedpatterns/coco-pattern#119 · Filter by author butler54 opened on Aug 28, 2026

• fix: pattern.sh and scripts/ should be self explanatory, non-overlapping, and setup with disconnected in mind

  validatedpatterns/coco-pattern#118 · Filter by author butler54 opened on Aug 28, 2026

• feat: demonstrate storage attached to BM pods via block including encryption.

  validatedpatterns/coco-pattern#117 · Filter by author butler54 opened on Aug 28, 2026

• feat: Demonstrate alternative vault integration patterns

  validatedpatterns/coco-pattern#116 · Filter by author butler54 opened on Aug 28, 2026

• feat: Demonstrate policies which provide selected access to resources

  validatedpatterns/coco-pattern#115 · Filter by author butler54 opened on Aug 28, 2026