Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-3106

[Compute] Build nova-operator correctly for OCP with FIPS enabled

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Done
    • Icon: Major Major
    • rhos-18.0.0
    • None
    • nova-operator
    • None
    • [Compute] Build nova-operator correctly for OCP with FIPS enabled
    • False
    • Hide

      None

      Show
      None
    • False
    • OSPRH-787FIPS Support in OSO 18.0
    • Committed
    • No Docs Impact
    • To Do
    • OSPRH-787 - FIPS Support in OSO 18.0
    • Committed
    • Committed
    • 0% To Do, 0% In Progress, 100% Done
    • Compute
    • Approved

      According to scan with check-payload tool nova-operator is not build properly for OCP with FIPS enabled. Scan results:

      • upstream image
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      | OPERATOR NAME           | EXECUTABLE NAME | STATUS                       | IMAGE                                         |
      
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      |                         |                 | openssl library not present  | quay.io/openstack-k8s-operators/nova-operator |
      
      | nova-operator-container | /manager        | go binary is not CGO_ENABLED | quay.io/openstack-k8s-operators/nova-operator |
      
      +-------------------------+-----------------+------------------------------+-----------------------------------------------+
      
      • downstream image
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
      
      | OPERATOR NAME           | EXECUTABLE NAME | STATUS                       | IMAGE                                                            |
      
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
      
      | nova-operator-container | /manager        | go binary is not CGO_ENABLED | registry.redhat.io/rhosp-dev-preview/nova-rhel9-operator:0.1.2-6 |
      
      +-------------------------+-----------------+------------------------------+------------------------------------------------------------------+
       

       

            smooney@redhat.com Sean Mooney
            skaplons@redhat.com Slawomir Kaplonski
            JP Jung
            Jason Grosso Jason Grosso
            rhos-dfg-compute
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: