-
Bug
-
Resolution: Not a Bug
-
Normal
-
None
-
4.18
-
Quality / Stability / Reliability
-
False
-
-
None
-
None
-
None
-
None
-
None
-
None
-
OCP Node Sprint 274 (blue)
-
1
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
Applying ClusterImagePolicy makes duplicate entry into the policy.json
Version-Release number of selected component (if applicable):
4.18
How reproducible:
100%
Steps to Reproduce:
1. After enabling techpreview featureset, create clusterimagepolicy:
apiVersion: config.openshift.io/v1alpha1
kind: ClusterImagePolicy
metadata:
name: p1
spec:
scopes:
- quay.io/rhn_support_dpateriy
policy:
rootOfTrust:
policyType: PublicKey
publicKey:
keyData: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFTkRTTVNaMHN2eXNTdjNadFRtbnQvT2Yvay81NgpSTGZSa0gvTEo4RTN1WlRFem0vUDh2RW11Y2greVRKWldQeUZIYTFnWUdKaG9lNGtVZjZnd2hxSWhnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==
signedIdentity:
matchPolicy: MatchRepoDigestOrExact
2. The policy.json on the node has duplicate entries:
"quay.io/rhn_support_dpateriy": [
{
"type": "sigstoreSigned",
"keyData": "LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFTkRTTVNaMHN2eXNTdjNadFRtbnQvT2Yvay81NgpSTGZSa0gvTEo4RTN1WlRFem0vUDh2RW11Y2greVRKWldQeUZIYTFnWUdKaG9lNGtVZjZnd2hxSWhnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==",
"signedIdentity": {
"type": "matchRepoDigestOrExact"
}
}
]
},
"quay.io/rhn_support_dpateriy": [
{
"type": "sigstoreSigned",
"keyData": "LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFTkRTTVNaMHN2eXNTdjNadFRtbnQvT2Yvay81NgpSTGZSa0gvTEo4RTN1WlRFem0vUDh2RW11Y2greVRKWldQeUZIYTFnWUdKaG9lNGtVZjZnd2hxSWhnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==",
"signedIdentity": {
"type": "matchRepoDigestOrExact"
}
}
]
},
Actual results:
The /etc/containers/policy.json has duplicate entries.
Expected results:
It should only have a single entry
Additional info:
