openshift / openshift/machine-config-operator
Enable RH Registry signature verification by default
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 269
- Forks
- 529
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 83
Description
Description
All images in the Red Hat registry are signed. We have the GPG key on disk to enable verification of these images when pulling, all that's left to do is configure Cri-o to verify the signatures when pulling those images.
Steps to reproduce the issue:
See: https://access.redhat.com/verify-images-ocp4
Describe the results you received:
Signatures are not verified
Describe the results you expected:
Verification steps from the reproduction article are met
Output of oc adm release info --commits | grep machine-config-operator:
machine-config-operator https://github.com/openshift/machine-config-operator d780d197a9c5848ba786982c0c4aaa7487297046
Additional environment details (platform, options, etc.):
OCP 4.2.12
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the verification steps in the linked Red Hat article and inspect the machine-config-operator entry point that configures Cri-o, using the reported OCP 4.2.12 context. The work is complete when Cri-o verifies Red Hat Registry image signatures and the article’s expected verification steps are met.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100