CM-844: Set cpe label for 1.18 components

[bharath-b-rh]

For KONFLUX-6210, clair needs access to a name and cpe label that it can use to look up the image in VEX statements.

This is enforced in release flow, and the release fails if required labels are not present.

  + name=cert-manager-istio-csr-1-18
  ++ jq -r '.metadata.labels // [] | .[] | select(.name == "cpe")
          | .value // empty'
  + cpe_label=cpe:/a:redhat:enterprise_linux:9::appstream
  + [[ -z cpe:/a:redhat:enterprise_linux:9::appstream ]]
  + [[ cpe:/a:redhat:enterprise_linux:9::appstream != \c\p\e\:\/\a\:\r\e\d\h\a\t\:\c\e\r\t\_\m\a\n\a\g\e\r\:\1\.\1\8\:\:\e\l\9 ]]
  + fail_or_warn 'Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match' 'the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
  + local 'msg=Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
  + '[' true == true ']'
  + echo 'Error: Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
  Error: Component 'cert-manager-istio-csr-1-18' 'cpe' label ('cpe:/a:redhat:enterprise_linux:9::appstream') does not match the single required CPE value from the data file ('cpe:/a:redhat:cert_manager:1.18::el9').

See also

• Add new rule data fields for image metadata release-engineering/rhtap-ec-policy#149
• https://gitlab.cee.redhat.com/releng/konflux-release-data/-/merge_requests/13312
• https://gitlab.cee.redhat.com/releng/konflux-release-data/-/merge_requests/13313

[openshift-ci-robot]

@bharath-b-rh: This pull request references CM-844 which is a valid jira issue.

Details

In response to this:

For KONFLUX-6210, clair needs access to a name and cpe label that it can use to look up the image in VEX statements.

This is enforced in release flow, and the release fails if required labels are not present.

 + name=cert-manager-istio-csr-1-18
 ++ jq -r '.metadata.labels // [] | .[] | select(.name == "cpe")
         | .value // empty'
 + cpe_label=cpe:/a:redhat:enterprise_linux:9::appstream
 + [[ -z cpe:/a:redhat:enterprise_linux:9::appstream ]]
 + [[ cpe:/a:redhat:enterprise_linux:9::appstream != \c\p\e\:\/\a\:\r\e\d\h\a\t\:\c\e\r\t\_\m\a\n\a\g\e\r\:\1\.\1\8\:\:\e\l\9 ]]
 + fail_or_warn 'Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match' 'the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
 + local 'msg=Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
 + '[' true == true ']'
 + echo 'Error: Component '\''cert-manager-istio-csr-1-18'\'' '\''cpe'\'' label ('\''cpe:/a:redhat:enterprise_linux:9::appstream'\'') does not match the single required CPE value from the data file ('\''cpe:/a:redhat:cert_manager:1.18::el9'\'').'
 Error: Component 'cert-manager-istio-csr-1-18' 'cpe' label ('cpe:/a:redhat:enterprise_linux:9::appstream') does not match the single required CPE value from the data file ('cpe:/a:redhat:cert_manager:1.18::el9').

See also

• Add new rule data fields for image metadata release-engineering/rhtap-ec-policy#149
• https://gitlab.cee.redhat.com/releng/konflux-release-data/-/merge_requests/13312
• https://gitlab.cee.redhat.com/releng/konflux-release-data/-/merge_requests/13313

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bharath-b-rh

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [bharath-b-rh]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[lunarwhite]

/lgtm