mirror of
				https://github.com/optim-enterprises-bv/vault.git
				synced 2025-10-30 02:02:43 +00:00 
			
		
		
		
	 c8e6169d5d
			
		
	
	c8e6169d5d
	
	
	
		
			
			* VAULT-31402: Add verification for all container images Add verification for all container images that are generated as part of the build. Before this change we only ever tested a limited subset of "default" containers based on Alpine Linux that we publish via the Docker hub and AWS ECR. Now we support testing all Alpine and UBI based container images. We also verify the repository and tag information embedded in each by deploying them and verifying the repo and tag metadata match our expectations. This does change the k8s scenario interface quite a bit. We now take in an archive image and set image/repo/tag information based on the scenario variants. To enable this I also needed to add `tar` to the UBI base image. It was already available in the Alpine image and is used to copy utilities to the image when deploying and configuring the cluster via Enos. Since some images contain multiple tags we also add samples for each image and randomly select which variant to test on a given PR. Signed-off-by: Ryan Cragun <me@ryan.ec>
		
			
				
	
	
		
			15 lines
		
	
	
		
			440 B
		
	
	
	
		
			HCL
		
	
	
	
	
	
			
		
		
	
	
			15 lines
		
	
	
		
			440 B
		
	
	
	
		
			HCL
		
	
	
	
	
	
| # Copyright (c) HashiCorp, Inc.
 | |
| # SPDX-License-Identifier: BUSL-1.1
 | |
| 
 | |
| quality "vault_artifact_container_alpine" {
 | |
|   description = "The candidate binary packaged as an Alpine package is used for testing"
 | |
| }
 | |
| 
 | |
| quality "vault_artifact_container_ubi" {
 | |
|   description = "The candidate binary packaged as an UBI package is used for testing"
 | |
| }
 | |
| 
 | |
| quality "vault_artifact_container_tags" {
 | |
|   description = "The candidate binary has the expected tags"
 | |
| }
 |