Add workflow to validate UBI images pass RedHat Certification #4035
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #4035 +/- ##
=======================================
Coverage 86.70% 86.71%
=======================================
Files 128 128
Lines 16758 16758
Branches 62 62
=======================================
+ Hits 14530 14531 +1
Misses 2043 2043
+ Partials 185 184 -1 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
…on in matrix of images
| registry: quay.io | ||
| username: ${{ secrets.QUAY_USERNAME }} | ||
| password: ${{ secrets.QUAY_ROBOT_TOKEN }} |
There was a problem hiding this comment.
Why are we pushing to quay.io? Can't we just run the tool against our images in ghcr?
There was a problem hiding this comment.
That's a good point... 😅
I think in my mind I was avoiding that as we don't normally push there during PRs, but we will only need to do that while testing this.
There was a problem hiding this comment.
For context, NIC push to quay.io: https://quay.io/organization/nginx
I figured that was the way to go about it.
There was a problem hiding this comment.
I'm going to leave it as is right now just while we're testing this.
Once this works I'll remove those and then test with the ghcr images
There was a problem hiding this comment.
@ciarams87 the workflow should be using the images from ghcr.io now as well as only running on merges to main and on prod releases
…during merges to main and prod releases
Proposed changes
This change adds a new workflow file,
openshift-certification.ymlwhich is responsible for validating that our UBI based images of NGF, NGINX OSS, and NGF Operator will pass the RedHad certification process.This workflow uses RedHat Openshift Preflight tool to pre-certify images before they are published:
https://github.com/redhat-openshift-ecosystem/openshift-preflight
Closes #3909
Checklist
Before creating a PR, run through this checklist and mark each as complete.
Release notes
If this PR introduces a change that affects users and needs to be mentioned in the release notes,
please add a brief note that summarizes the change.