Skip to content

[disconnected] Add option to perform image signature verification - #4141

Draft
drosenfe wants to merge 1 commit into
openstack-k8s-operators:mainfrom
drosenfe:imagesignatureverify
Draft

[disconnected] Add option to perform image signature verification#4141
drosenfe wants to merge 1 commit into
openstack-k8s-operators:mainfrom
drosenfe:imagesignatureverify

Conversation

@drosenfe

Copy link
Copy Markdown
Contributor

Add option to the existing configure openshift cluster for disconnected deployment hook to perform image signature verification. This may be used when oc mirror v2 has mirrored both container images and their cryptographic signatures.

jira: https://redhat.atlassian.net/browse/OSPRH-35167

Signed-off-by: David Rosenfeld drosenfe@redhat.com

@qodo-code-review

Copy link
Copy Markdown

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

@openshift-ci

openshift-ci Bot commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nemarjan for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@drosenfe
drosenfe marked this pull request as draft August 25, 2026 13:17
@drosenfe drosenfe self-assigned this Aug 25, 2026
@centosinfra-prod-github-app

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/aabb940afc6449f493a9d1f7f9d5e571

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 53m 03s
✔️ podified-multinode-edpm-deployment-crc SUCCESS in 1h 29m 37s
✔️ cifmw-crc-podified-edpm-baremetal SUCCESS in 1h 48m 12s
✔️ cifmw-crc-podified-edpm-baremetal-minor-update SUCCESS in 2h 19m 45s
✔️ openstack-k8s-operators-content-provider-bootc SUCCESS in 3h 52m 30s
✔️ cifmw-crc-podified-edpm-baremetal-bootc SUCCESS in 2h 05m 09s
✔️ noop SUCCESS in 0s
✔️ cifmw-pod-ansible-test SUCCESS in 9m 29s
cifmw-pod-pre-commit FAILURE in 8m 20s

Add option to the existing configure openshift cluster for disconnected
deployment hook to perform image signature verification. This may be used
when oc mirror v2 has mirrored both container images and their cryptographic
signatures.

jira: https://redhat.atlassian.net/browse/OSPRH-35167

Signed-off-by: David Rosenfeld drosenfe@redhat.com
@drosenfe
drosenfe force-pushed the imagesignatureverify branch from cc9445e to 3372477 Compare August 25, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant