Update Intel device plugin version

[pawelpros]

- Description of the problem which is fixed/What is the use case

Updated Intel Device Plugin version and corresponding SGX Device Plugin

- What I did

Updated yamls

- How to verify it

Run deployment with enabled TDX

- Description for the changelog

Updated Intel Device Plugin version to 0.35.0 and corresponding SGX Device Plugin

[coderabbitai]

Walkthrough

The changes update Intel operator and device plugin configurations: the Intel Device Plugins Operator subscription channel moves from alpha to stable with a version bump to v0.35.0, and the SGX device plugin image is updated to a new digest.

Changes

Cohort / File(s)	Summary
Intel Operator Configuration scripts/install-helpers/baremetal-coco/intel-dpo/install_operator.yaml, scripts/install-helpers/baremetal-coco/intel-dpo/sgx_device_plugin.yaml	Updates to Intel operator subscription channel (alpha → stable) and starting CSV version (v0.32.1 → v0.35.0); SGX device plugin image digest updated to latest version.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~4 minutes

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @pawelpros. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Tip

We noticed you've done this a few times! Consider joining the org to skip this step and gain /lgtm and other bot rights. We recommend asking approvers on your previous PRs to sponsor you.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@scripts/install-helpers/baremetal-coco/intel-dpo/install_operator.yaml`:
- Line 23: You updated startingCSV to intel-device-plugins-operator.v0.35.0 but
must verify compatibility and address known breaking changes: review operator
code and any downstream overlays for controller-runtime v0.23 API changes
(webhook/client calls), update or refactor usages accordingly; migrate or remove
DCAP-specific flows referenced by deploy_intel_dcap() and any
-dcap-infra-resources arguments (plan to remove DCAP calls and replace with
supported alternatives); ensure DSA VFIO deployments include the kernel cmdline
flag vfio-pci.disable_denylist=1 in target images/boot configs; run integration
tests and CI to validate the operator and overlays before finalizing the
upgrade.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 9813071f-31c8-441d-8f16-a2ef6b544d7f

📥 Commits

Reviewing files that changed from the base of the PR and between 4926fb9 and 6660a34.

📒 Files selected for processing (2)

• scripts/install-helpers/baremetal-coco/intel-dpo/install_operator.yaml
• scripts/install-helpers/baremetal-coco/intel-dpo/sgx_device_plugin.yaml