Skip to content

[openshift_setup] Add image-rbac-proxy to the list of allowed registries#3810

Open
dsariel wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
dsariel:rbac-prio-test
Open

[openshift_setup] Add image-rbac-proxy to the list of allowed registries#3810
dsariel wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
dsariel:rbac-prio-test

Conversation

@dsariel
Copy link
Copy Markdown
Contributor

@dsariel dsariel commented Mar 30, 2026 •
edited by openshift-ci bot
Loading

According to the ANVIL-58 ticket, we prioritize image-rbac-proxy
registry images. This change is required to make the prioritization
work. Without adding the registry to the list of allowed registries,
it would be considered insecure.

Signed-off-by: David Sariel dsariel@redhat.com

ANVIL-58

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Mar 30, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign fultonj for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dsariel dsariel changed the title DNM: Add image-rbac-proxy.apps.kflux-osp-p01 to the list of allowed r… Add image-rbac-proxy.apps.kflux-osp-p01 to the list of allowed r… Mar 31, 2026
@dsariel dsariel changed the title Add image-rbac-proxy.apps.kflux-osp-p01 to the list of allowed r… Add image-rbac-proxy to the list of allowed registries Mar 31, 2026
@dsariel dsariel force-pushed the rbac-prio-test branch 3 times, most recently from 9ef28ac to 032ab36 Compare March 31, 2026 09:21
@dsariel
[openshift_setup] Add image-rbac-proxy to the list of allowed registries
cf22321 
According to the ANVIL-58 ticket, we prioritize image-rbac-proxy
registry images. This change is required to make the prioritization
work. Without adding the registry to the list of allowed registries,
it would be considered insecure.

Signed-off-by: David Sariel <dsariel@redhat.com>

ANVIL-58
@dsariel dsariel changed the title Add image-rbac-proxy to the list of allowed registries [openshift_setup] Add image-rbac-proxy to the list of allowed registries Mar 31, 2026
@softwarefactory-project-zuul
Copy link
Copy Markdown

softwarefactory-project-zuul bot commented Mar 31, 2026

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/9b827a89b24c4043af58f9a2398cb2f2

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 20m 45s
❌ podified-multinode-edpm-deployment-crc FAILURE in 1h 18m 42s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 37m 29s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 02m 40s
✔️ cifmw-pod-zuul-files SUCCESS in 5m 01s
✔️ adoption-standalone-to-crc-ceph-provider SUCCESS in 3h 07m 00s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 8m 58s
✔️ cifmw-pod-pre-commit SUCCESS in 9m 56s
✔️ cifmw-molecule-openshift_setup SUCCESS in 16m 28s

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Valkyrie00 Valkyrie00 Awaiting requested review from Valkyrie00

@evallesp evallesp Awaiting requested review from evallesp

@nemarjan nemarjan Awaiting requested review from nemarjan

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dsariel