Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-3106

[Compute] Build nova-operator correctly for OCP with FIPS enabled

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Done-Errata
    • Icon: Major Major
    • rhos-18.0.0
    • None
    • nova-operator
    • None
    • [Compute] Build nova-operator correctly for OCP with FIPS enabled
    • False
    • Hide

      None

      Show
      None
    • False
    • OSPRH-787FIPS Support in OSO 18.0
    • Committed
    • No Docs Impact
    • To Do
    • OSPRH-787 - FIPS Support in OSO 18.0
    • nova-operator-container-1.0.0-14
    • Committed
    • Committed
    • 0% To Do, 0% In Progress, 100% Done
    • Release Note Not Required
    • Hide

      this is covered by the generic fips release note

      Show
      this is covered by the generic fips release note
    • Regression Only
    • Approved

      According to scan with check-payload tool nova-operator is not build properly for OCP with FIPS enabled. Scan results:

      • upstream image
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      | OPERATOR NAME           | EXECUTABLE NAME | STATUS                       | IMAGE                                         |
      
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      |                         |                 | openssl library not present  | quay.io/openstack-k8s-operators/nova-operator |
      
      | nova-operator-container | /manager        | go binary is not CGO_ENABLED | quay.io/openstack-k8s-operators/nova-operator |
      
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      • downstream image
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
      
      | OPERATOR NAME           | EXECUTABLE NAME | STATUS                       | IMAGE                                                            |
      
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
      
      | nova-operator-container | /manager        | go binary is not CGO_ENABLED | registry.redhat.io/rhosp-dev-preview/nova-rhel9-operator:0.1.2-6 |
      
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
       

       

              smooney@redhat.com Sean Mooney
              skaplons@redhat.com Slawomir Kaplonski
              JP Jung
              Jason Grosso Jason Grosso
              rhos-dfg-compute
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: