-
Feature
-
Resolution: Unresolved
-
Blocker
-
None
-
None
-
Product / Portfolio Work
-
XL
-
False
-
-
False
-
Not Selected
-
75% To Do, 25% In Progress, 0% Done
-
TBD (Boaz)
-
Enhancement
-
GA
-
-
-
-
750
-
1,500
-
Rox Sprint 4.10G, Rox Sprint 4.10H, Rox Sprint 4.11A
-
100% (High)
-
8
-
140,625
Goal Summary:
This task is to track the mandatory transition of our operator and operand images to the UBI Minimal base __ image, as part of the wider initiative to reduce CVE noise and improve security posture. This change must be completed for all images targeting the OpenShift 4.21 release or later.
Goals and expected user outcomes:
The Red Hat Advanced Cluster Security product will have all operator and operand images rebuilt on UBI 9 Minimal base images, resulting in:
- Reduced CVE noise from unnecessary packages
- Improved security posture through minimal attack surface
- Compliance with OpenShift platform requirements for the 4.21 release
- Updated container build processes using microdnf instead of DNF package manager
Acceptance Criteria:
Action Required:
- Base Image Change: Update the base image specified in the Containerfile/Dockerfile from the current Red Hat operator image to UBI Minimal.
- Package Manager Update: Replace the DNF package manager with micro DNF in all build instructions for installing packages.
Note: UBI Minimal does not include the Python runtime required by DNF. - Verification: Test the resulting operator and operand images to ensure no regression in functionality and that all necessary dependencies are correctly installed using microdnf.
Scope of Change:
- In Scope: All operator and operand images maintained and built by the owning team.
- Out of Scope: Dependencies pulled from RHEL AppStreams (e.g., Postgres, Redis) which are maintained by the RHEL team.
Definition of Done:
- All in-scope images have successfully been rebuilt using the UBI Minimal base image.
- The use of microdnf has been verified in the image build process.
- New images have been tested and confirmed to be fully functional.
- The necessary PRs for the changes have been merged.
Success Criteria or KPIs measured:
A list of specific, measurable criteria that will be used to determine if the feature is successful. Include key performance indicators (KPIs) or other metrics., etc. Initial completion during Refinement status.
[enter success criteria and/or KPIs here]
- is related to
-
ROX-32078 Remove rhel8 suffix from image names
-
- To Do
-
- is triggered by
-
OCPSTRAT-2553 Switch Red Hat operators and layered product base images to UBI Minimal
-
- In Progress
-