Bug 1436093

Summary: oc binary for MAC is not signed
Product: OpenShift Container Platform Reporter: Kenjiro Nakayama <knakayam>
Component: ocAssignee: Fabiano Franz <ffranz>
Status: CLOSED ERRATA QA Contact: Xingxing Xia <xxia>
Severity: low Docs Contact:
Priority: medium    
Version: 3.4.1CC: aos-bugs, bleanhar, jokerman, knakayam, mmccomas, sgraf, wgordon
Target Milestone: ---   
Target Release: 3.7.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: 'oc' binary for macOS is not signed. Consequence: some of the customer's company policies don't allow users to install unsigned binaries. Fix: sign the 'oc' binary using a Red Hat certificate. Result: 'oc' is trusted by companies that restrict the installation of unsigned binaries.
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-11-28 21:53:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Kenjiro Nakayama 2017-03-27 07:17:36 UTC
Description of problem:
---
  oc binary for MAC in [1] is not signed. Some of the customers' company policy doesn't allow them to install unsigned binary. So, please release the signed binary.

  [1] https://access.redhat.com/downloads/content/290/ver=3.4/rhel---7/3.4.1.10/x86_64/product-software

Version-Release number of selected component (if applicable):
---
  v 3.4 or any version

Additional info
---
  For the windows env has already been requested - https://bugzilla.redhat.com/show_bug.cgi?id=1429314

Comment 13 Xingxing Xia 2017-06-02 11:33:00 UTC
Tested oc from comment 7 (v3.5.5.8) per selected cases in comment 4 link, oc works well, no problem.
BTW, could you give any tips in verifying if the Mac binary is well signed? If viable, will add a test case for the bug for regular test afterwards

Comment 15 Brenton Leanhardt 2017-08-14 19:09:42 UTC
The last pending step here is simply to have this binary hosted for Online users.  OCP customers can already download the signed binary from the customer portal.

Comment 19 errata-xmlrpc 2017-11-28 21:53:01 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:3188