Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-2502

Release blocked due to missing labels

    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • Critical
    • None
    • None
    • None
    • None
    • None
    • None

      Releases are failing due to a change in the latest konflux tasks references ; more info here: https://redhat-internal.slack.com/archives/C04PZ7H0VA8/p1763979349965989?thread_ts=1763978038.659589&cid=C04PZ7H0VA8
      It complains about a bunch of missing labels, after the konflux task references were updated.
      The error is this: (same for every component)

      {"success": false,"components": [{"name": "network-observability-operator-zstream-sha256:a67acaded2071afa2a19fb08145ebd9c89849180b4911b04afc9e42d29624d4f-ppc64le","containerImage": "quay.io/redhat-user-workloads/ocp-network-observab-tenant/network-observability-operator-zstream@sha256:a67acaded2071afa2a19fb08145ebd9c89849180b4911b04afc9e42d29624d4f","source": {"git": {"url": "https://github.com/netobserv/network-observability-operator","revision": "c01b32e45c6df307d802b8e1646316d2faf7194d","dockerfileUrl": "Dockerfile.downstream"}},"violations": [{"msg": "The required \"distribution-scope\" label is missing. Label description: Scope of intended distribution of the image. (private/authoritative-source-only/restricted/public).","metadata": {"code": "labels.required_labels","collections": ["redhat"],"description": "Check the image for the presence of labels that are required. Use the rule data `required_labels` key to set the list of labels to check, or the `fbc_required_labels` key for fbc images. To exclude this rule add \"labels.required_labels:distribution-scope\" to the `exclude` section of the policy configuration.","solution": "Update the image build process to set the required labels.","term": "distribution-scope","title": "Required labels"}},{"msg": "The required \"release\" label is missing. Label description: Release Number for this version.","metadata": {"code": "labels.required_labels","collections": ["redhat"],"description": "Check the image for the presence of labels that are required. Use the rule data `required_labels` key to set the list of labels to check, or the `fbc_required_labels` key for fbc images. To exclude this rule add \"labels.required_labels:release\" to the `exclude` section of the policy configuration.","solution": "Update the image build process to set the required labels.","term": "release","title": "Required labels"}},{"msg": "The required \"url\" label is missing. Label description: A URL where the user can find more information about the image.","metadata": {"code": "labels.required_labels","collections": ["redhat"],"description": "Check the image for the presence of labels that are required. Use the rule data `required_labels` key to set the list of labels to check, or the `fbc_required_labels` key for fbc images. To exclude this rule add \"labels.required_labels:url\" to the `exclude` section of the policy configuration.","solution": "Update the image build process to set the required labels.","term": "url","title": "Required labels"}},{"msg": "The required \"vendor\" label is missing. Label description: Name of the vendor.","metadata": {"code": "labels.required_labels","collections": ["redhat"],"description": "Check the image for the presence of labels that are required. Use the rule data `required_labels` key to set the list of labels to check, or the `fbc_required_labels` key for fbc images. To exclude this rule add \"labels.required_labels:vendor\" to the `exclude` section of the policy configuration.","solution": "Update the image build process to set the required labels.","term": "vendor","title": "Required labels"}}],"warnings": [{"msg": "The required \"org.opencontainers.image.created\" label is missing. Label description: The creation timestamp of the image. This label must always be set by the Konflux build task for on-prem product releases. The policy must also support reproducible builds by allowing users to override the timestamp using the SOURCE_DATE_EPOCH environment variable.","metadata": {"code": "labels.required_labels","collections": ["redhat"],"description": "Check the image for the presence of labels that are required. Use the rule data `required_labels` key to set the list of labels to check, or the `fbc_required_labels` key for fbc images.","effective_on": "2026-06-07T00:00:00Z","solution": "Update the image build process to set the required labels.","term": "org.opencontainers.image.created","title": "Required labels"}}
       

      So we need to add these labels to the dockerfiles:

      • "distribution-scope": "public" (hardcoded)
      • "url": "https://catalog.redhat.com/en/search?searchType=containers" (hardcoded)
      • "vendor": "Red Hat, Inc." (hardcoded)
      • release: same as version ? In ubi9, "release" is actually the build timestamp (epoch time)
      • org.opencontainers.image.created: same as build-date

              Unassigned Unassigned
              jtakvori Joel Takvorian
              None
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: