Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify operator CSV images are from allowed registries #1092

Merged
merged 1 commit into from
Aug 2, 2024

Conversation

nmars
Copy link
Contributor

@nmars nmars commented Jul 30, 2024

This commit adds a rule that verifies that images from operator bundle CSVs are hosted on approved registries.

resolves: CVP-4149

policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm.rego Outdated Show resolved Hide resolved
policy/release/olm_test.rego Show resolved Hide resolved
@nmars nmars force-pushed the olm_approved_registries branch from e995c8f to 09b805a Compare July 30, 2024 21:28
Copy link
Member

@zregvart zregvart left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, one typo

policy/release/olm.rego Outdated Show resolved Hide resolved
@codecov-commenter
Copy link

codecov-commenter commented Jul 31, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (bc298d4) to head (d44d7cb).
Report is 9 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##              main     #1092   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          113       113           
  Lines         5621      5672   +51     
=========================================
+ Hits          5621      5672   +51     
Files Coverage Δ
policy/release/olm.rego 100.00% <100.00%> (ø)
policy/release/olm_test.rego 100.00% <100.00%> (ø)

... and 2 files with indirect coverage changes

@lcarva lcarva enabled auto-merge August 1, 2024 18:01
@lcarva
Copy link
Member

lcarva commented Aug 1, 2024

@nmars, one more thing. We require signed commits in this repo.

auto-merge was automatically disabled August 1, 2024 21:05

Head branch was pushed to by a user without write access

@nmars nmars force-pushed the olm_approved_registries branch from dd2064e to d44d7cb Compare August 1, 2024 21:05
@nmars
Copy link
Contributor Author

nmars commented Aug 1, 2024

@lcarva signed commit added.

@yashvardhannanavati
Copy link
Contributor

yashvardhannanavati commented Aug 2, 2024

/ok-to-test

Edit: lol, looks like I don't have the power to approve workflows

@lcarva lcarva merged commit a64de53 into enterprise-contract:main Aug 2, 2024
4 checks passed
@lcarva
Copy link
Member

lcarva commented Aug 2, 2024

Thanks for the PR!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants