Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-7053

Support FIPS in OpenShift Pipelines entrypoint image

XMLWordPrintable

    • 5
    • False
    • None
    • False
    • Pipelines Sprint Pioneers 22, Pipelines Sprint Pioneers 23, Pipelines Sprint Pioneers 24

      The Pipelines entrypoint is the only remaining component of Pipelines that is not yet FIPS compliant. It needs to be compiled statically, but currently, it includes crypto symbols. The upstream issue below outlines the necessary work to make the entrypoint command FIPS compliant:

       GitHub Issue #8531

          1.
          		 disable spire for entrypoint Sub-task Closed Blocker abdeljawed khelil
          2.
          		 Add check payload scan task on konflux pipeline Sub-task Closed Undefined Savita .
          3.
          		 Fix FIPS Compliant Issues for 5.0 Build Sub-task Closed Undefined Zaki Shaikh
          4.
          		 Check check-payload for fips compliance is running as part of cvp Sub-task Closed Undefined abdeljawed khelil
          5.
          		 Run QA tests on fips enabled cluster Sub-task Closed Undefined Sri Vignesh Selvan
          6.
          		 Add FIPS ENV and tags for Golang components in p12n. Sub-task Closed Undefined Zaki Shaikh
          7.
          		 Ask for fips exception for entrypoint container Sub-task Closed Undefined Unassigned
          8.
          		 Remove dependency on corev1 Secret in the entrypoint image Sub-task Code Review Normal Vibhav Bobade
          9.
          		 Disable tls, Remove corev1 dependency and go.uber.org/zap for entrypoint cmd Sub-task Code Review Blocker Puneet Punamiya
          10.
          		 use entrypoint/platforms instead of containerd/platforms Sub-task Closed Blocker abdeljawed khelil

              jkhelil abdeljawed khelil
              rh-ee-ntatinen Navya Tatineni
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: