Red Hat Release configuration
The configuration used in Red Hat Trusted Application Pipeline to configure the policy used by the Red Hat Release Engineering.
This document was generated on 2024-05-16 15:44:55 UTC based on the data in data/rule_data.yml and data/required_tasks.yml files from the https://github.com/release-engineering/rhtap-ec-policy.git repository at revision 31b6ea21a3d80ef52133c0b224fda09e802e6afb.
Allowed OCI registry prefixes
The following allowed_registry_prefixes are configured for the Base image comes from permitted registry rule.
-
registry.access.redhat.com/ -
registry.redhat.io/ -
brew.registry.redhat.io/rh-osbs/openshift-golang-builder
Allowed Task step OCI registry prefixes
The following allowed_step_image_registry_prefixes are configured for the Task steps ran on permitted container images rule.
-
quay.io/redhat-appstudio/ -
quay.io/konflux-ci/ -
registry.access.redhat.com/ -
registry.redhat.io/ -
quay.io/opdev/preflight
Allowed Java component repositories
The following allowed_java_component_sources are configured for the Java builds have no foreign dependencies rule.
-
redhat -
rebuilt
Allowed Tekton PipelineRun parameters
The following pipeline_run_params are configured for the Pipeline run params rule.
-
git-repo -
git-revision -
output-image
Deprecated OCI image labels
The following labels are deprecated with deprecated_labels for the Deprecated labels rule.
| Deprecated label | Replacement |
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Required OCI image labels
The following labels are mandatory with required_labels for the Required labels rule.
| Required label | Description |
|---|---|
|
Architecture the software in the image should target. |
|
Date/Time image was built as RFC 3339 date-time. |
|
The Bugzilla component name where bugs against this container should be reported by users. |
|
Detailed description of the image. |
|
Scope of intended distribution of the image. (private/authoritative-source-only/restricted/public). |
|
Description of the container displayed in Kubernetes. |
|
Name of the Image or Container. |
|
Release Number for this version. |
|
A URL where the user can find more information about the image. |
|
A 'reference' within the version control repository; e.g. a git commit, or a subversion branch. |
|
The type of version control used by the container source. Generally one of git, hg, svn, bzr, cvs |
|
Name of the vendor. |
|
Version of the image. |
Optional OCI image labels
The following labels are optional with optional_labels for the Optional labels rule.
| Required label | Description |
|---|---|
|
The name and email of the maintainer (usually the submitter). Should contain `@redhat.com` or `Red Hat`. |
|
A short description of the image. |
Disallowed OCI image labels
The following labels are optional with disallowed_inherited_labels for the Disallowed inherited labels rule.
-
description -
io.k8s.description -
io.k8s.display-name -
io.openshift.tags -
summary -
name -
com.redhat.component
Required File Based Catalog (FBC) image labels
The following labels are mandatory with fbc_required_labels for the Required labels rule.
None configured
Optional File Based Catalog (FBC) image labels
The following labels are optional with fbc_optional_labels for the Optional labels rule.
None configured
Disallowed File Based Catalog (FBC) image labels
The following labels are optional with fbc_disallowed_inherited_labels for the Disallowed inherited labels rule.
None configured
Required Tekton tasks
The following tasks are required for specific PipelineRuns types determined by the pipelines.openshift.io/runtime label for the All required tasks were included in the pipeline rule.
| Pipeline type | Since | Tasks |
|---|---|---|
fbc |
|
|
docker |
|
|
|
||
generic |
|
|
|
||
java |
|
|
|
||
nodejs |
|
|
|
The following tasks are required for the for PipelineRuns that do not contain the pipelines.openshift.io/runtime label.
| Since | Tasks |
|---|---|
|
|
|