XML

Word

Printable

Epic Name:
Trusted Image Source CoreOS
Work Type:
Strategic Product Work
Blocked:
True
Ready:
False
Color Status:
Red
Epic Status:
Done
Feature Link:
OCPSTRAT-859 - Support custom RHCOS image location for Azure (Phase II)
Parent Link:
OCPSTRAT-859Support custom RHCOS image location for Azure (Phase II)
Hierarchy Progress Bar:

0% To Do, 0% In Progress, 100% Done
Release Note Text:
Undefined
Status Summary:

Hide

Awaiting feedback on the scope of work and linking of other existing epics for the other teams involved in this deliverable (e.g. RHCOS and the release teams).

March 19 2024 - We've decided to limit the scope of this epic to the ARO use-case but document the feature so it can also be used by customers with self-managed installs. Using marketplace images by default in the Installation process is out of the scope for 4.16. QE has already validated the work via ~~CORS-2722~~. We are only missing docs.

Show
Awaiting feedback on the scope of work and linking of other existing epics for the other teams involved in this deliverable (e.g. RHCOS and the release teams). March 19 2024 - We've decided to limit the scope of this epic to the ARO use-case but document the feature so it can also be used by customers with self-managed installs. Using marketplace images by default in the Installation process is out of the scope for 4.16. QE has already validated the work via CORS-2722 . We are only missing docs.
Target Version:

openshift-4.16

Epic Goal

As a customer, I need to make sure that the CoreOS image I leverage are coming from a trusted source.

Why is this important?

As an ARO service, to make sure that the service is secure and gets the certification needed
As an OCP customer, I want to ensure that my images come from a trusted source

As a managed Service, we need to be able to trust the source of the image and a public blob is not considered a trusted source for the image(s)

CoreOS Image is pushed into Azure patner portal and the azure partner portal is used as a source for the install

CI - CI is running, tests are automated and merged.
Release Enablement <link to Feature Enablement Presentation>
DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
DEV - Downstream build attached to advisory: <link to errata>
QE - Test plans in Polarion: <link or reference to Polarion>
QE - Automated tests merged: <link or reference to automated tests>
DOC - Downstream documentation merged: <link to meaningful PR>

is related to

OCPPLAN-7711 Merge ARO installer patches into OCP

split to

CORS-2722 Azure: Support Marketplace images for all nodes

links to

Azure: CoreOS images coming from a trusted source scope doc