Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-20653

Enterprise contract failures for acm submariner addon

XMLWordPrintable

    • Critical
    • None

      Description of problem:

      Please address EC failures.  Some of them are

      [Violation] hermetic_build_task.build_task_hermetic
        ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
        Reason: Build task was not invoked with the hermetic parameter set
        Title: Build task called with hermetic param set
        Description: Verify the build task in the PipelineRun attestation was invoked with the proper parameters to make the build
        process hermetic. To exclude this rule add "hermetic_build_task.build_task_hermetic" to the `exclude` section of the policy
        configuration.
        Solution: Make sure the task that builds the image has a parameter named 'HERMETIC' and it's set to 'true'.

      [Violation] labels.disallowed_inherited_labels
        ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
        Reason: The "com.redhat.component" label should not be inherited from the parent image
        Term: com.redhat.component
        Title: Disallowed inherited labels
        Description: Check that certain labels on the image have different values than the labels from the parent image. If the label is
        inherited from the parent image but not redefined for the image, it will contain an incorrect value for the image. Use the rule
        data `disallowed_inherited_labels` key to set the list of labels to check, or the `fbc_disallowed_inherited_labels` key for fbc
        images. To exclude this rule add "labels.disallowed_inherited_labels:com.redhat.component" to the `exclude` section of the
        policy configuration.
        Solution: Update the image build process to overwrite the inherited labels.

      [Violation] labels.disallowed_inherited_labels
        ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/submariner-addon-acm-214@sha256:1b3c330e25b215c282d181e3e0a9f1226beb118cefe9fd2939d89410d9c32773
        Reason: The "description" label should not be inherited from the parent image
        Term: description
        Title: Disallowed inherited labels
        Description: Check that certain labels on the image have different values than the labels from the parent image. If the label is
        inherited from the parent image but not redefined for the image, it will contain an incorrect value for the image. Use the rule
        data `disallowed_inherited_labels` key to set the list of labels to check, or the `fbc_disallowed_inherited_labels` key for fbc
        images. To exclude this rule add "labels.disallowed_inherited_labels:description" to the `exclude` section of the policy
        configuration.
        Solution: Update the image build process to overwrite the inherited labels.

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Actual results:

      Expected results:

      Additional info:

              dfarrell07 Daniel Farrell
              gparvin-redhat Gus Parvin
              Prachi Yadav Prachi Yadav
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: