Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-7053 Support FIPS in OpenShift Pipelines entrypoint image
  3. SRVKP-7107

Disable tls, Remove corev1 dependency and go.uber.org/zap for entrypoint cmd

XMLWordPrintable

    • 5
    • Pipelines Sprint Pioneers 22, Pipelines Sprint Pioneers 23, Pipelines Sprint Pioneers 24

      We need to make Tekton Pipelines FIPS compliant, and the entrypoint command is a key step in this effort. Since it is statically compiled, we must ensure that cryptographic symbols are removed from the entrypoint binary. To achieve this, we need compile options to disable TLS, SPIRE, and any network-related functionality.

      This substask adds 

      • disabling tls on entrypoint cmd
      • Remove corev1 dependency 
      • Remove go.uber.org/zap

              ppunamiy Puneet Punamiya
              jkhelil abdeljawed khelil
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: