-
Sub-task
-
Resolution: Done
-
Blocker
-
None
-
None
-
None
-
3
-
False
-
None
-
False
-
-
-
Pipelines Sprint Pioneers 22, Pipelines Sprint Pioneers 23, Pipelines Sprint Pioneers 24
We need to make Tekton Pipelines FIPS compliant, and the entrypoint command is a key step in this effort. Since it is statically compiled, we must ensure that cryptographic symbols are removed from the entrypoint binary. To achieve this, we need compile options to disable TLS, SPIRE, and any network-related functionality.
This PR is a partial subtask to introduce a build tag to disable SPIRE (github.com/tektoncd/pipeline/pkg/spire) in cmd/entrypoint/main.go.