Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-24059

Enterprise contract failures for hypershift-addon-operator-mce-28

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • MCE 2.8.4
    • MCE 2.8.4
    • HyperShift
    • Product / Portfolio Work
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • Workload Mgmt Train 32 - 1
    • Critical
    • None

      Description of problem:

      Here are a couple:

      [Violation] tasks.required_untrusted_task_found
        ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/hypershift-addon-operator-mce-28@sha256:bcabaec5e2d255d3601ba102c255cf4a4166f940576b2cf143ef0adb16a8b3a1
        Reason: Required task "sast-shell-check-oci-ta" is required and present but not from a trusted task
        Term: sast-shell-check-oci-ta
        Title: All required tasks are from trusted tasks
        Description: Ensure that the all required tasks are resolved from trusted tasks. To exclude this rule add
        "tasks.required_untrusted_task_found:sast-shell-check-oci-ta" to the `exclude` section of the policy configuration.
        Solution: Make sure all required tasks in the build pipeline are resolved from trusted tasks.

      [Violation] tasks.required_untrusted_task_found
        ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/hypershift-addon-operator-mce-28@sha256:bcabaec5e2d255d3601ba102c255cf4a4166f940576b2cf143ef0adb16a8b3a1
        Reason: Required task "sast-unicode-check-oci-ta" is required and present but not from a trusted task
        Term: sast-unicode-check-oci-ta
        Title: All required tasks are from trusted tasks
        Description: Ensure that the all required tasks are resolved from trusted tasks. To exclude this rule add
        "tasks.required_untrusted_task_found:sast-unicode-check-oci-ta" to the `exclude` section of the policy configuration.
        Solution: Make sure all required tasks in the build pipeline are resolved from trusted tasks.

       

      See logs for a couple more: https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rhtap-releng-tenant/applications/release-mce-28/pipelineruns/managed-k8x7g 

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1.  
      2.  
      3. ...

      Actual results:

      Expected results:

      Additional info:

              rokejungrh Roke Jung
              gparvin-redhat Gus Parvin
              David Huynh David Huynh
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: