CMP-4034: Implemented a fix to make the compliance operator compatible with RHC…

[xiaojiey]

…OS10

Description:

Previous, only rhel9 os supported for rhcos4 profiles. In this PR, add support for rhel10.

Rationale:

with the PR, the scan with rhcos profiles won't return "Not-Applicable".

$ oc get clusterversion
NAME      VERSION       AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.21.0-ec.3   True        False         30m     Cluster version is 4.21.0-ec.3
$ oc-compliance bind -N test -S default profile/upstream-ocp4-stig profile/upstream-ocp4-stig-node profile/upstream-rhcos4-stig
Creating ScanSettingBinding test
$ oc get suite
NAME   PHASE   RESULT
test   DONE    NON-COMPLIANT
$ oc get scan
NAME                             PHASE   RESULT
upstream-ocp4-stig               DONE    NON-COMPLIANT
upstream-ocp4-stig-node-master   DONE    NON-COMPLIANT
upstream-ocp4-stig-node-worker   DONE    NON-COMPLIANT
upstream-rhcos4-stig-master      DONE    NON-COMPLIANT
upstream-rhcos4-stig-worker      DONE    NON-COMPLIANT

[github-actions]

ATEX Test Results

Test artifacts have been submitted to Testing Farm.

Results: View Test Results
Workflow Run: View Workflow Details

This comment was automatically generated by the ATEX workflow.

[xiaojiey]

@yuumasato @Vincent056 Could you please help to review? Thanks.

[yuumasato]

Looks great @xiaojiey!
Thanks a lot

[Anna-Koudelkova]

Pre-merge verification passed on 4.21 cluster with rhcos10 nodes.

$ oc get clusterversion
NAME      VERSION       AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.21.0-ec.3   True        False         7h36m   Cluster version is 4.21.0-ec.3

$ oc compliance bind -N stig profile/upstream-rhcos4-stig profile/rhcos4-stig
Creating ScanSettingBinding stig
$ oc compliance bind -N test_rhcos10 profile/upstream-rhcos4-moderate profile/rhcos4-moderate
Creating ScanSettingBinding test_rhcos10

$ oc get suite
NAME           PHASE   RESULT
stig           DONE    NON-COMPLIANT
test-rhcos10   DONE    NON-COMPLIANT

$ oc get scan |grep rhcos4
rhcos4-moderate-master               DONE    NOT-APPLICABLE
rhcos4-moderate-worker               DONE    NOT-APPLICABLE
rhcos4-stig-master                   DONE    NOT-APPLICABLE
rhcos4-stig-worker                   DONE    NOT-APPLICABLE
upstream-rhcos4-moderate-master      DONE    NON-COMPLIANT
upstream-rhcos4-moderate-worker      DONE    NON-COMPLIANT
upstream-rhcos4-stig-master          DONE    NON-COMPLIANT
upstream-rhcos4-stig-worker          DONE    NON-COMPLIANT

Verified also on 4.14 and 4.21 clusters, which were not affected by the change.

$ oc get scans |grep rhcos
rhcos4-moderate-master            DONE    NON-COMPLIANT
rhcos4-moderate-worker            DONE    NON-COMPLIANT
rhcos4-stig-master                DONE    NON-COMPLIANT
rhcos4-stig-worker                DONE    NON-COMPLIANT
upstream-rhcos4-moderate-master   DONE    NON-COMPLIANT
upstream-rhcos4-moderate-worker   DONE    NON-COMPLIANT
upstream-rhcos4-stig-master       DONE    NON-COMPLIANT
upstream-rhcos4-stig-worker       DONE    NON-COMPLIANT