Release-1.5.7

.github/workflows/test-cluster-access.yml

@@ -0,0 +1,28 @@
+name: Test Cluster Access
+
+# Intended to be used when cluster secrets change (e.g. when transitioning to
+# new clusters), this workflow confirms access to the cluster.
+
+on:
+  workflow_dispatch:
+
+jobs:
+  test-cluster-access:
+    name: Test Cluster Access
+    runs-on: ubuntu-22.04
+    steps:
+    - name: Install oc
+      uses: redhat-actions/openshift-tools-installer@v1
+      with:
+        oc: latest
+    - name: Read API_SERVER endpoint
+      id: login-params
+      run: |
+        API_SERVER=$( echo -n ${{ secrets.API_SERVER }} | base64 -d)
+        echo "API_SERVER=${API_SERVER}" >> $GITHUB_OUTPUT
+    - uses: redhat-actions/oc-login@v1
+      id: oc_login
+      with:
+        openshift_server_url: ${{ steps.login-params.outputs.API_SERVER }}
+        openshift_token: ${{ secrets.CLUSTER_TOKEN }}
+        insecure_skip_tls_verify: true

tests/data/HC-04/community/report.yaml

@@ -2,19 +2,19 @@ apiversion: v1
 kind: verify-report
 metadata:
     tool:
-        verifier-version: 1.9.0
+        verifier-version: 1.12.2
         profile:
             VendorType: community
-            version: v1.1
-        reportDigest: uint64:6109394152551061817
-        chart-uri: vault-0.17.0.tgz
+            version: v1.2
+        reportDigest: uint64:12284475994233296417
+        chart-uri: tests/data/vault-0.17.0.tgz
         digests:
-            chart: sha256:f01dd362d81fe4b1ef99bb7fa5be268fa94dc96f3009d28bc93a18517aa1ef7a
-            package: 9cb7e3a5d82537f512319c754ccd6e9a4be08118b34849609d0fc261934d062a
-        lastCertifiedTimestamp: "2022-10-09T19:21:54.5696+05:30"
-        testedOpenShiftVersion: "4.11"
+            chart: sha256:aba56e4bc68704aa933a180a7a7abb309b73c7020a53020a3f2c17565faf12a3
+            package: 72f8d48aad2df1fe49e864a33a112793d2c8a67874d62a466d94bbe4e5f54fee
+        lastCertifiedTimestamp: "2023-07-26T13:27:49.167072-05:00"
+        testedOpenShiftVersion: "4.12"
         supportedOpenShiftVersions: '>=4.2'
-        providerControlledDelivery: false
+        webCatalogOnly: false
     chart:
         name: vault
         home: https://www.vaultproject.io
@@ -47,54 +47,58 @@ metadata:
         type: ""
     chart-overrides: ""
 results:
-    - check: v1.0/not-contains-crds
-      type: Optional
-      outcome: PASS
-      reason: Chart does not contain CRDs
-    - check: v1.0/is-helm-v3
-      type: Optional
-      outcome: PASS
-      reason: API version is V2, used in Helm 3
-    - check: v1.0/required-annotations-present
-      type: Optional
-      outcome: PASS
-      reason: All required annotations present
-    - check: v1.0/chart-testing
-      type: Optional
+    - check: v1.0/helm-lint
+      type: Mandatory
       outcome: PASS
-      reason: Chart tests have passed
-    - check: v1.0/has-readme
+      reason: Helm lint successful
+    - check: v1.0/not-contain-csi-objects
       type: Optional
       outcome: PASS
-      reason: Chart has a README
-    - check: v1.0/images-are-certified
+      reason: CSI objects do not exist
+    - check: v1.1/images-are-certified
       type: Optional
       outcome: PASS
       reason: |-
         Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault-k8s:0.14.0-ubi
         Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault:1.8.4-ubi
-    - check: v1.0/not-contain-csi-objects
+    - check: v1.0/is-helm-v3
       type: Optional
       outcome: PASS
-      reason: CSI objects do not exist
-    - check: v1.0/contains-values-schema
+      reason: API version is V2, used in Helm 3
+    - check: v1.0/signature-is-valid
       type: Optional
-      outcome: PASS
-      reason: Values schema file exist
+      outcome: SKIPPED
+      reason: 'Chart is not signed : Signature verification not required'
     - check: v1.0/contains-test
       type: Optional
       outcome: PASS
       reason: Chart test files exist
+    - check: v1.0/contains-values-schema
+      type: Optional
+      outcome: PASS
+      reason: Values schema file exist
     - check: v1.0/contains-values
       type: Optional
       outcome: PASS
       reason: Values file exist
+    - check: v1.0/required-annotations-present
+      type: Optional
+      outcome: PASS
+      reason: All required annotations present
+    - check: v1.0/has-readme
+      type: Optional
+      outcome: PASS
+      reason: Chart has a README
     - check: v1.1/has-kubeversion
       type: Optional
       outcome: PASS
       reason: Kubernetes version specified
-    - check: v1.0/helm-lint
-      type: Mandatory
+    - check: v1.0/not-contains-crds
+      type: Optional
       outcome: PASS
-      reason: Helm lint successful
+      reason: Chart does not contain CRDs
+    - check: v1.0/chart-testing
+      type: Optional
+      outcome: PASS
+      reason: Chart tests have passed
 

tests/data/HC-04/partner/report.yaml

@@ -2,19 +2,19 @@ apiversion: v1
 kind: verify-report
 metadata:
     tool:
-        verifier-version: 1.9.0
+        verifier-version: 1.12.2
         profile:
             VendorType: partner
-            version: v1.1
-        reportDigest: uint64:2083954931931251669
-        chart-uri: vault-0.17.0.tgz
+            version: v1.2
+        reportDigest: uint64:7594949332872749418
+        chart-uri: tests/data/vault-0.17.0.tgz
         digests:
-            chart: sha256:f01dd362d81fe4b1ef99bb7fa5be268fa94dc96f3009d28bc93a18517aa1ef7a
-            package: 9cb7e3a5d82537f512319c754ccd6e9a4be08118b34849609d0fc261934d062a
-        lastCertifiedTimestamp: "2022-10-09T19:11:54.765745+05:30"
-        testedOpenShiftVersion: "4.11"
+            chart: sha256:aba56e4bc68704aa933a180a7a7abb309b73c7020a53020a3f2c17565faf12a3
+            package: 72f8d48aad2df1fe49e864a33a112793d2c8a67874d62a466d94bbe4e5f54fee
+        lastCertifiedTimestamp: "2023-07-26T13:25:44.500114-05:00"
+        testedOpenShiftVersion: "4.12"
         supportedOpenShiftVersions: '>=4.2'
-        providerControlledDelivery: false
+        webCatalogOnly: false
     chart:
         name: vault
         home: https://www.vaultproject.io
@@ -47,42 +47,48 @@ metadata:
         type: ""
     chart-overrides: ""
 results:
-    - check: v1.0/has-readme
+    - check: v1.1/images-are-certified
       type: Mandatory
       outcome: PASS
-      reason: Chart has a README
-    - check: v1.0/chart-testing
+      reason: |-
+        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault-k8s:0.14.0-ubi
+        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault:1.8.4-ubi
+    - check: v1.0/not-contain-csi-objects
       type: Mandatory
       outcome: PASS
-      reason: Chart tests have passed
+      reason: CSI objects do not exist
+    - check: v1.0/signature-is-valid
+      type: Mandatory
+      outcome: SKIPPED
+      reason: 'Chart is not signed : Signature verification not required'
     - check: v1.0/contains-test
       type: Mandatory
       outcome: PASS
       reason: Chart test files exist
-    - check: v1.0/helm-lint
+    - check: v1.0/contains-values-schema
       type: Mandatory
       outcome: PASS
-      reason: Helm lint successful
-    - check: v1.0/required-annotations-present
+      reason: Values schema file exist
+    - check: v1.1/has-kubeversion
       type: Mandatory
       outcome: PASS
-      reason: All required annotations present
-    - check: v1.0/contains-values-schema
+      reason: Kubernetes version specified
+    - check: v1.0/required-annotations-present
       type: Mandatory
       outcome: PASS
-      reason: Values schema file exist
-    - check: v1.0/contains-values
+      reason: All required annotations present
+    - check: v1.0/chart-testing
       type: Mandatory
       outcome: PASS
-      reason: Values file exist
-    - check: v1.1/has-kubeversion
+      reason: Chart tests have passed
+    - check: v1.0/has-readme
       type: Mandatory
       outcome: PASS
-      reason: Kubernetes version specified
-    - check: v1.0/not-contain-csi-objects
+      reason: Chart has a README
+    - check: v1.0/helm-lint
       type: Mandatory
       outcome: PASS
-      reason: CSI objects do not exist
+      reason: Helm lint successful
     - check: v1.0/is-helm-v3
       type: Mandatory
       outcome: PASS
@@ -91,10 +97,8 @@ results:
       type: Mandatory
       outcome: PASS
       reason: Chart does not contain CRDs
-    - check: v1.0/images-are-certified
+    - check: v1.0/contains-values
       type: Mandatory
       outcome: PASS
-      reason: |-
-        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault-k8s:0.14.0-ubi
-        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault:1.8.4-ubi
+      reason: Values file exist
 

tests/data/HC-04/redhat/report.yaml

@@ -2,19 +2,19 @@ apiversion: v1
 kind: verify-report
 metadata:
     tool:
-        verifier-version: 1.9.0
+        verifier-version: 1.12.2
         profile:
             VendorType: redhat
-            version: v1.1
-        reportDigest: uint64:8490969933058949466
-        chart-uri: vault-0.17.0.tgz
+            version: v1.2
+        reportDigest: uint64:17589002506308805613
+        chart-uri: tests/data/vault-0.17.0.tgz
         digests:
-            chart: sha256:f01dd362d81fe4b1ef99bb7fa5be268fa94dc96f3009d28bc93a18517aa1ef7a
-            package: 9cb7e3a5d82537f512319c754ccd6e9a4be08118b34849609d0fc261934d062a
-        lastCertifiedTimestamp: "2022-10-09T19:18:05.749707+05:30"
-        testedOpenShiftVersion: "4.11"
+            chart: sha256:aba56e4bc68704aa933a180a7a7abb309b73c7020a53020a3f2c17565faf12a3
+            package: 72f8d48aad2df1fe49e864a33a112793d2c8a67874d62a466d94bbe4e5f54fee
+        lastCertifiedTimestamp: "2023-07-26T13:26:52.775951-05:00"
+        testedOpenShiftVersion: "4.12"
         supportedOpenShiftVersions: '>=4.2'
-        providerControlledDelivery: false
+        webCatalogOnly: false
     chart:
         name: vault
         home: https://www.vaultproject.io
@@ -47,54 +47,58 @@ metadata:
         type: ""
     chart-overrides: ""
 results:
-    - check: v1.0/required-annotations-present
+    - check: v1.0/helm-lint
       type: Mandatory
       outcome: PASS
-      reason: All required annotations present
+      reason: Helm lint successful
     - check: v1.0/contains-values
       type: Mandatory
       outcome: PASS
       reason: Values file exist
+    - check: v1.0/is-helm-v3
+      type: Mandatory
+      outcome: PASS
+      reason: API version is V2, used in Helm 3
     - check: v1.0/not-contains-crds
       type: Mandatory
       outcome: PASS
       reason: Chart does not contain CRDs
-    - check: v1.0/chart-testing
+    - check: v1.0/contains-values-schema
       type: Mandatory
       outcome: PASS
-      reason: Chart tests have passed
-    - check: v1.0/has-readme
+      reason: Values schema file exist
+    - check: v1.1/has-kubeversion
       type: Mandatory
       outcome: PASS
-      reason: Chart has a README
-    - check: v1.0/contains-test
+      reason: Kubernetes version specified
+    - check: v1.0/not-contain-csi-objects
       type: Mandatory
       outcome: PASS
-      reason: Chart test files exist
-    - check: v1.1/has-kubeversion
+      reason: CSI objects do not exist
+    - check: v1.0/has-readme
       type: Mandatory
       outcome: PASS
-      reason: Kubernetes version specified
-    - check: v1.0/helm-lint
+      reason: Chart has a README
+    - check: v1.0/required-annotations-present
       type: Mandatory
       outcome: PASS
-      reason: Helm lint successful
-    - check: v1.0/images-are-certified
+      reason: All required annotations present
+    - check: v1.0/signature-is-valid
       type: Mandatory
-      outcome: PASS
-      reason: |-
-        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault-k8s:0.14.0-ubi
-        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault:1.8.4-ubi
-    - check: v1.0/is-helm-v3
+      outcome: SKIPPED
+      reason: 'Chart is not signed : Signature verification not required'
+    - check: v1.0/chart-testing
       type: Mandatory
       outcome: PASS
-      reason: API version is V2, used in Helm 3
-    - check: v1.0/not-contain-csi-objects
+      reason: Chart tests have passed
+    - check: v1.0/contains-test
       type: Mandatory
       outcome: PASS
-      reason: CSI objects do not exist
-    - check: v1.0/contains-values-schema
+      reason: Chart test files exist
+    - check: v1.1/images-are-certified
       type: Mandatory
       outcome: PASS
-      reason: Values schema file exist
+      reason: |-
+        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault-k8s:0.14.0-ubi
+        Image is Red Hat certified : registry.connect.redhat.com/hashicorp/vault:1.8.4-ubi