-
Task
-
Resolution: Done
-
Blocker
-
1.9.0
-
None
As noted in RHIDP-9594, Konflux's tendency to hide ECP test failures has bitten us in the cheeks again.
So, we need to apply the same fixes done for the oci artifact package builds to the index image.
- add license files
- set a non-root user (even though we were previously just a scratch image)
- use a builder image to convince Konflux we're UBI-based
Failed production release pipeline:
Actual failed tests are here:
"suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.",
"knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
"check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
},
{
"name": "RunAsNonRoot",
"elapsed_time": 0,
"description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication",
"help": "Check RunAsNonRoot encountered an error. Please review the preflight.log file for more information.",
"suggestion": "Indicate a specific USER in the dockerfile or containerfile",
"knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
"check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
},
{
"name": "BasedOnUbi",
"elapsed_time": 168,
"description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)",
"help": "Check BasedOnUbi encountered an error. Please review the preflight.log file for more information.",
"suggestion": "Change the FROM directive in your Dockerfile or Containerfile, for the latest list of images and details refer to: https://catalog.redhat.com/software/base-images",
"knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
"check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
- blocks
-
-
- Closed
-
- is related to
-
KFLUXUI-1075 Failed required ecosystem or FBC validation checks, but build shows "Succeeded"; also warning icon sometimes means failed with error, sometimes warnings
-
- New
-
