Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add OCI baseprofile support #1560

Merged
merged 1 commit into from
Mar 30, 2023

Conversation

saschagrunert
Copy link
Member

@saschagrunert saschagrunert commented Mar 21, 2023

What type of PR is this?

/kind feature

What this PR does / why we need it:

This allows using OCI artifacts as base profiles when the baseProfileName is prefixed with oci://.

Which issue(s) this PR fixes:

None

Does this PR have test?

None

Special notes for your reviewer:

None

Does this PR introduce a user-facing change?

Added OCI seccomp base profile support if the `baseProfileName` if prefixed with `oci://`.

@k8s-ci-robot k8s-ci-robot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. kind/feature Categorizes issue or PR as related to a new feature. release-note Denotes a PR that will be considered when it comes time to generate release notes. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Mar 21, 2023
@k8s-ci-robot k8s-ci-robot added approved Indicates a PR has been approved by an approver from all required OWNERS files. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Mar 21, 2023
@saschagrunert saschagrunert force-pushed the oci-baseprofiles branch 3 times, most recently from b19b19f to b45c90f Compare March 21, 2023 11:52
@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Mar 21, 2023
@saschagrunert saschagrunert force-pushed the oci-baseprofiles branch 2 times, most recently from 28fcfde to e367910 Compare March 21, 2023 13:57
@saschagrunert
Copy link
Member Author

/test pull-security-profiles-operator-verify

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Mar 21, 2023
@ccojocar
Copy link
Contributor

/lgtm

@saschagrunert
Copy link
Member Author

Blocked by kubernetes/org#4105

@k8s-ci-robot k8s-ci-robot removed the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Mar 28, 2023
@saschagrunert saschagrunert force-pushed the oci-baseprofiles branch 2 times, most recently from 9cc7be9 to 759b856 Compare March 28, 2023 15:28
@saschagrunert
Copy link
Member Author

/test pull-security-profiles-operator-verify

@saschagrunert saschagrunert force-pushed the oci-baseprofiles branch 3 times, most recently from ecfc5d1 to 8ae1a5e Compare March 28, 2023 15:56
@saschagrunert
Copy link
Member Author

/retest

1 similar comment
@saschagrunert
Copy link
Member Author

/retest

@saschagrunert saschagrunert force-pushed the oci-baseprofiles branch 2 times, most recently from d7456d6 to 3caf633 Compare March 29, 2023 10:07
@saschagrunert saschagrunert changed the title WIP: Add OCI baseprofile support Add OCI baseprofile support Mar 29, 2023
@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Mar 29, 2023
@saschagrunert
Copy link
Member Author

@kubernetes-sigs/security-profiles-operator-maintainers PTAL

@saschagrunert
Copy link
Member Author

/test pull-security-profiles-operator-test-e2e

@codecov-commenter
Copy link

Codecov Report

Merging #1560 (21b7ede) into main (de6dfee) will increase coverage by 0.32%.
The diff coverage is 61.70%.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1560      +/-   ##
==========================================
+ Coverage   48.67%   49.00%   +0.32%     
==========================================
  Files          68       69       +1     
  Lines        6664     6744      +80     
==========================================
+ Hits         3244     3305      +61     
- Misses       3295     3314      +19     
  Partials      125      125              

This allows using OCI artifacts as base profiles when the
baseProfileName is prefixed with `oci://`.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
@saschagrunert
Copy link
Member Author

@ccojocar @pjbgf @JAORMX @jhrozek green tests, PTAL again.

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Mar 30, 2023
@ccojocar
Copy link
Contributor

/lgtm

@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ccojocar, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:
  • OWNERS [ccojocar,saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot merged commit 1b0877d into kubernetes-sigs:main Mar 30, 2023
@saschagrunert saschagrunert deleted the oci-baseprofiles branch March 30, 2023 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/feature Categorizes issue or PR as related to a new feature. lgtm "Looks good to me", indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants