Back to bug 1378007

Who When What Removed Added
Greg Blomquist 2016-09-22 14:03:04 UTC Assignee gblomqui fsimonce
Whiteboard container
Dafna Ron 2016-09-22 14:49:15 UTC Priority unspecified medium
CC dron
Federico Simoncelli 2016-09-23 08:16:25 UTC Status NEW ASSIGNED
Assignee fsimonce nshneor
Federico Simoncelli 2016-09-27 07:38:43 UTC CC fsimonce
Summary Provide a config property to override "default" docker repository to pull down image-inspector container image. [RFE] Provide a config property to override "default" docker repository to pull down image-inspector container image.
RHEL Program Management 2016-09-27 08:50:23 UTC Keywords FutureFeature
Beni Paskin-Cherniavsky 2016-09-27 10:47:54 UTC CC cben
CFME Bot 2016-10-11 07:11:25 UTC Status ASSIGNED ON_DEV
Barak 2016-10-13 10:13:33 UTC Target Release 5.7.0 cfme-future
CC bazulay
Nimrod Shneor 2017-01-26 15:08:39 UTC CC ncatling
Status ON_DEV ASSIGNED
Dave Johnson 2017-01-31 23:15:53 UTC QA Contact dajohnso epacific
Dave Johnson 2017-01-31 23:15:58 UTC Cloudforms Team --- Container Management
CFME Bot 2017-02-20 16:16:41 UTC Status ASSIGNED ON_DEV
Nimrod Shneor 2017-03-06 13:34:47 UTC Status ON_DEV POST
Chris Pelland 2017-03-06 13:59:21 UTC CC cpelland
Satoe Imaishi 2017-03-06 19:09:20 UTC Status POST ON_QA
Target Release cfme-future 5.8.0
CC simaishi
Fixed In Version 5.8.0.2
Satoe Imaishi 2017-03-06 19:10:11 UTC Blocks 1429654
Satoe Imaishi 2017-03-06 19:10:30 UTC Keywords TestOnly, ZStream
Loic Avenel 2017-03-08 09:22:42 UTC CC lavenel, pmukhedk
Flags needinfo?(pmukhedk)
Prasad Mukhedkar 2017-03-09 08:52:16 UTC CC cpatters
Flags needinfo?(pmukhedk)
Einat Pacifici 2017-03-14 12:34:12 UTC QA Contact epacific pzagalsk
Beni Paskin-Cherniavsky 2017-03-22 15:30:54 UTC Doc Text I'm not sure we want to document this before https://bugzilla.redhat.com/show_bug.cgi?id=1379185
is solved, but if we do, a subtle point that may be worth documenting:

The builtin OpenSCAP policy has a "Don't scan image-inspector's image" condition (this avoids lots of unnecessary repeated scanning).
What it checks is simply if the image name is `<anything>/image-inspector`.

If one names it differently, e.g.
:image_inspector_repository: foo/my-image-checker
this condition will not apply, and one should Copy and modify this policy
(https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.2/html/policies_and_profiles_guide/appendix#openscap-custom , plus in this case you also need to Copy this condition, modify it, and assign the modified condition...)
Doc Type If docs needed, set a value Enhancement
Dayle Parker 2017-05-03 07:03:16 UTC Doc Text I'm not sure we want to document this before https://bugzilla.redhat.com/show_bug.cgi?id=1379185
is solved, but if we do, a subtle point that may be worth documenting:

The builtin OpenSCAP policy has a "Don't scan image-inspector's image" condition (this avoids lots of unnecessary repeated scanning).
What it checks is simply if the image name is `<anything>/image-inspector`.

If one names it differently, e.g.
:image_inspector_repository: foo/my-image-checker
this condition will not apply, and one should Copy and modify this policy
(https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.2/html/policies_and_profiles_guide/appendix#openscap-custom , plus in this case you also need to Copy this condition, modify it, and assign the modified condition...)
This enhancement makes the registry and repository information configurable for the 'image-inspector’ container image. However, the built-in OpenSCAP policy in CloudForms scans only images named `<file>/image-inspector`, and skips any modified image names and paths. To scan customised images, copy and modify the OpenSCAP policy, then assign the modified condition to the image.
Dayle Parker 2017-05-03 07:04:04 UTC Doc Text This enhancement makes the registry and repository information configurable for the 'image-inspector’ container image. However, the built-in OpenSCAP policy in CloudForms scans only images named `<file>/image-inspector`, and skips any modified image names and paths. To scan customised images, copy and modify the OpenSCAP policy, then assign the modified condition to the image. This enhancement makes registry and repository information configurable for the 'image-inspector’ container image. However, the built-in OpenSCAP policy in CloudForms scans only images named `<file>/image-inspector`, and skips any modified image names and paths. To scan customised images, copy and modify the OpenSCAP policy, then assign the modified condition to the image.
Pavel Zagalsky 2017-05-14 13:10:40 UTC Status ON_QA VERIFIED
Federico Simoncelli 2017-06-06 17:22:57 UTC Blocks 1459189
Dave Johnson 2017-06-12 17:04:53 UTC Status VERIFIED CLOSED
Resolution --- CURRENTRELEASE
Last Closed 2017-06-12 13:04:53 UTC
Paul Maddocks 2017-11-23 23:55:47 UTC CC paul.maddocks1

Back to bug 1378007