Merge branch 'main' into sync-20240920052429

.github/workflows/report_ib_build_failures.yml

@@ -0,0 +1,91 @@
+name: Report IB Build Failures
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+permissions:
+  issues: write
+  contents: read
+  actions: read
+
+jobs:
+  report-failures:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get the last two runs of "Image Creation Run" workflow
+        id: get_runs
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const workflowName = 'Image Creation Run';
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+
+            // Get the workflows in the repo
+            const workflows = await github.rest.actions.listRepoWorkflows({
+              owner,
+              repo
+            });
+
+            // Find the workflow ID for "Image Creation Run"
+            const workflow = workflows.data.workflows.find(wf => wf.name === workflowName);
+            if (!workflow) {
+              core.setFailed(`Workflow "${workflowName}" not found.`);
+              return;
+            }
+            const workflow_id = workflow.id;
+
+            // Get the last two workflow runs
+            const runsResponse = await github.rest.actions.listWorkflowRuns({
+              owner,
+              repo,
+              workflow_id,
+              per_page: 2,
+            });
+            const runs = runsResponse.data.workflow_runs;
+            if (runs.length < 2) {
+              core.setFailed('Not enough workflow runs found.');
+              return;
+            }
+            // Output the run IDs
+            core.setOutput('run_id1', runs[0].id);
+            core.setOutput('run_id2', runs[1].id);
+
+      - name: Get failed jobs from the last two runs with suffix "-ib"
+        id: get_failed_jobs
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const owner = context.repo.owner;
+            const repo = context.repo.repo;
+            const run_id1 = ${{ steps.get_runs.outputs.run_id1 }};
+            const run_id2 = ${{ steps.get_runs.outputs.run_id2 }};
+
+            // Function to get failed jobs ending with "-ib"
+            async function getFailedJobs(run_id) {
+              const jobsResponse = await github.rest.actions.listJobsForWorkflowRun({
+                owner,
+                repo,
+                run_id,
+                per_page: 200,
+              });
+              const jobs = jobsResponse.data.jobs;
+              const failedJobs = jobs.filter(job => {
+                return job.conclusion === 'failure' && job.name.endsWith('-ib');
+              });
+              return failedJobs.map(job => job.name);
+            }
+
+            const failedJobs1 = await getFailedJobs(run_id1);
+            const failedJobs2 = await getFailedJobs(run_id2);
+
+            // Find jobs that failed in both runs
+            const failedInBoth = failedJobs1.filter(job => failedJobs2.includes(job));
+            core.setOutput('failed_jobs', failedInBoth.join(','));
+
+      - name: Report jobs failed in last two runs
+        if: steps.get_failed_jobs.outputs.failed_jobs != ''
+        run: |
+          echo "Images failed in both of the last two runs: ${{ steps.get_failed_jobs.outputs.failed_jobs }}"

community_images/ansible-operator/ironbank/image.yml

@@ -0,0 +1,47 @@
+name: ansible-operator-ib
+official_name: Ansible-Operator Iron Bank
+official_website: https://sdk.operatorframework.io/docs/building-operators/ansible/
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/opensource/ansible/ansible-operator
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/ironbank%2Fopensource%2Fansible%2Fansible-operator
+source_image_readme: https://repo1.dso.mil/dsop/opensource/ansible/ansible-operator/-/blob/development/README.md
+rf_docker_link: rapidfort/ansible-operator-ib
+image_workflow_name: ansible-operator_ironbank
+github_location: ansible-operator/ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fopensource%2Fansible%2Fansible-operator
+usage_instructions: |
+  ## Prerequisites:
+  - Ensure you have a running Kubernetes cluster
+  - Ensure you have the necessary CRDs (Custom Resource Definitions) applied in your Kubernetes cluster.
+  
+  ## Running the Ansible Operator with Docker:
+
+  The Ansible Operator runs as a container and requires access to a Kubernetes cluster to manage custom resources.
+  $ docker run -d -v $HOME/.kube:/root/.kube:ro -v /path/to/watches.yml:/opt/ansible/watches.yml:ro rapidfort/ansible-operator-ib
+  
+  After running the operator, apply the necessary CRDs in your Kubernetes cluster
+  $ kubectl apply -f /path/to/crd.yml
+
+  Once the CRD is applied, create custom resources for the Ansible Operator to manage
+  $ kubectl apply -f /path/to/cr.yml
+
+what_is_text: |
+  Ansible-Operator allows you to manage Kubernetes resources by running Ansible playbooks, providing a simplified way to automate Kubernetes operations using Ansible.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+is_locked: "False"
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+repo_sets:
+  - opensource/ansible/ansible-operator:
+      input_base_tag: "v1.35."
+      output_repo: ansible-operator-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      ansible-operator-ib:
+        repository: "ANSBILE_OPERATOR_IMAGE_REPOSITORY"
+        tag: "ANSBILE_OPERATOR_IMAGE_TAG"

community_images/boundary/ironbank/image.yml

@@ -0,0 +1,33 @@
+name: boundary-ib
+official_name: Boundary Iron Bank
+official_website: https://boundaryproject.io/
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/hashicorp/boundary
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/hashicorp%2Fboundary%2Fboundary
+source_image_readme: https://repo1.dso.mil/dsop/hashicorp/boundary/boundary/-/blob/development/README.md
+rf_docker_link: rapidfort/boundary-ib
+image_workflow_name: boundary_ironbank
+github_location: boundary/ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fhashicorp%2Fboundary%2Fboundary
+usage_instructions: |
+  $ docker run -d --name boundary -v "$PWD"/config.hcl:/boundary/config.hcl rapidfort/boundary-ib [COMMAND]
+what_is_text: |
+  HashiCorp Boundary is an identity-aware proxy aimed at simplifying and securing least-privileged access to cloud infrastructure
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+is_locked: "False"
+repo_sets:
+  - hashicorp/boundary:
+      input_base_tag: "0.17."
+      output_repo: boundary-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      boundary-ib:
+        repository: "BOUNDARY_IMAGE_REPOSITORY"
+        tag: "BOUNDARY_IMAGE_TAG"

community_images/clickhouse/ironbank/image.yml

@@ -0,0 +1,33 @@
+name: clickhouse-ib
+official_name: clickhouse Iron Bank
+official_website: https://clickhouse.com
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/opensource/clickhouse
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/opensource%2Fclickhouse
+source_image_readme: https://repo1.dso.mil/dsop/opensource/clickhouse/clickhouse/-/blob/development/README.md
+rf_docker_link: rapidfort/clickhouse-ib
+image_workflow_name: clickhouse_ironbank
+github_location: clickhouse/ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fopensource%2Fclickhouse
+usage_instructions: |
+  #Run the clickhouse container:
+  $ docker run -d --name clickhouse-server rapidfort/clickhouse-ib
+what_is_text: |
+  ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports in real-time.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+repo_sets:
+  - opensource/clickhouse:
+      input_base_tag: "22.3."
+      output_repo: clickhouse-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      clickhouse-ib:
+        repository: "CLICKHOUSE_IMAGE_REPOSITORY"
+        tag: "CLICKHOUSE_IMAGE_TAG"

community_images/elasticsearch-exporter/ironbank/image.yml

@@ -21,7 +21,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/bitnami/elasticsearch-exporter:
-      input_base_tag: "1.7."
+      input_base_tag: "1.8."
       output_repo: elasticsearch-exporter-ib
 runtimes:
   - type: docker_compose

community_images/elasticsearch/official/image.yml

@@ -34,7 +34,7 @@ runtimes:
   - type: docker_compose
     script: dc_coverage.sh
     compose_file: docker-compose.yml
-    wait_time_sec: 120
+    wait_time_sec: 30
     image_keys:
       elasticsearch-official:
         repository: "ELASTICSEARCH_IMAGE_REPOSITORY"

community_images/gitaly/ironbank/image.yml

@@ -31,6 +31,7 @@ runtimes:
   - type: k8s
     script: k8s_coverage.sh
     readiness_check_script: gitaly_readiness_check.sh
+    readiness_check_timeout: 1200
     helm:
       repo: gitlab
       repo_url: http://charts.gitlab.io/

community_images/jq/ironbank/image.yml

@@ -0,0 +1,33 @@
+name: jq-ib
+official_name: JQ Iron Bank
+official_website: https://jqlang.github.io/jq/
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/stedolan/jq
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/stedolan%2Fjq
+source_image_readme: https://repo1.dso.mil/dsop/opensource/stedolan/jq/-/blob/development/README.md
+rf_docker_link: rapidfort/jq-ib
+github_location: jq/ironbank
+image_workflow_name: jq_ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fstedolan%2Fjq
+usage_instructions: |
+  #Run the jq container:
+  $ docker run -i rapidfort/jq-ib <test.json '.a+.b'
+what_is_text: |
+  jq is a lightweight and flexible command-line JSON processor.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+repo_sets:
+  - stedolan/jq:
+      input_base_tag: "1.7."
+      output_repo: jq-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      jq-ib:
+        repository: "JQ_IMAGE_REPOSITORY"
+        tag: "JQ_IMAGE_TAG"

community_images/kafka-bridge/ironbank/image.yml

@@ -0,0 +1,33 @@
+name: kafka-bridge-ib
+official_name: Kafka Bridge Iron Bank
+official_website: https://strimzi.io/docs/bridge/in-development/
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/opensource/apache/kakfa-bridge
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/opensource%2Fapache%2Fkafka-bridge
+source_image_readme: https://repo1.dso.mil/dsop/opensource/apache/kafka-bridge/-/blob/development/README.md
+rf_docker_link: rapidfort/kafka-bridge-ib
+image_workflow_name: kafka-bridge_ironbank
+github_location: kafka-bridge/ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fopensource%2Fapache%2Fkafka-bridge
+usage_instructions: |
+  $ docker pull rapidfort/kafka-bridge-ib
+  $ docker run -w /opt/strimzi/kafka-bridge-0.30.0/ rapidfort/kafka-bridge-ib bash bin/kafka_bridge_run.sh --config-file config/application.properties
+what_is_text: |
+  The Kafka Bridge provides a RESTful interface that allows HTTP-based clients to interact with a Kafka cluster.  It offers the advantages of a web API connection to Strimzi, without the need for client applications to interpret the Kafka protocol.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+repo_sets:
+  - opensource/apache/kafka-bridge:
+      input_base_tag: "0.30."
+      output_repo: kafka-bridge-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      kafka-bridge-ib:
+        repository: "KAFKA_BRIDGE_IMAGE_REPOSITORY"
+        tag: "KAFKA_BRIDGE_IMAGE_TAG"

community_images/postgresql/bitnami-ironbank/image.yml

@@ -0,0 +1,37 @@
+name: postgresql-bitnami-ib
+official_name: PostgreSQL IronBank (Bitnami)
+official_website: https://www.postgresql.com/
+source_image_provider: Platform One
+source_image_repo: registry1.dso.mil/ironbank/bitnami/postgres
+source_image_repo_link: https://registry1.dso.mil/harbor/projects/3/repositories/bitnami%2Fpostgres
+source_image_readme: https://repo1.dso.mil/dsop/bitnami/postgres/postgresql16/-/blob/development/README.md
+rf_docker_link: rapidfort/postgresql-bitnami-ib
+image_workflow_name: postgresql_bitnami_ironbank
+github_location: postgresql/bitnami-ironbank
+report_url: https://us01.rapidfort.com/app/community/imageinfo/registry1.dso.mil%2Fironbank%2Fbitnami%2Fpostgres
+usage_instructions: |
+  $ docker run -e POSTGRES_PASSWORD=mysecretpassword -d rapidfort/postgresql16-bitnami-ib:latest
+what_is_text: |
+  PostgreSQL, often simply "Postgres", is an object-relational database management system (ORDBMS) with an emphasis on extensibility and standards-compliance. As a database server, its primary function is to store data, securely and supporting best practices, and retrieve it later, as requested by other software applications, be it those on the same computer or those running on another computer across a network (including the Internet). It can handle workloads ranging from small single-machine applications to large Internet-facing applications with many concurrent users. Recent versions also provide replication of the database itself for security and scalability.
+disclaimer: |
+  Trademarks: This software listing is packaged by RapidFort. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement.
+is_locked: "False"
+input_registry:
+  registry: registry1.dso.mil
+  account: ironbank
+repo_sets:
+  - bitnami/postgres:
+      input_base_tag: "16.3."
+      output_repo: postgresql16-bitnami-ib
+runtimes:
+  - type: docker_compose
+    script: dc_coverage.sh
+    compose_file: docker-compose.yml
+    image_keys:
+      postgresql16-bitnami-ib:
+        repository: "PG_IMAGE_REPOSITORY"
+        tag: "PG_IMAGE_TAG"
+  - type: docker
+    postgresql16-bitnami-ib:
+      environment:
+        POSTGRES_PASSWORD: PgPwd

community_images/prometheus-config-reloader/ironbank/image.yml

@@ -24,7 +24,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/prometheus-operator/prometheus-config-reloader:
-      input_base_tag: "v0.76."
+      input_base_tag: "v0.77."
       output_repo: prometheus-config-reloader-ib
 runtimes:
   - type: k8s

community_images/prometheus-operator/ironbank/image.yml

@@ -22,7 +22,7 @@ input_registry:
   account: ironbank
 repo_sets:
   - opensource/prometheus-operator/prometheus-operator:
-      input_base_tag: "v0.76."
+      input_base_tag: "v0.77."
       output_repo: prometheus-operator-ib
 runtimes:
   - type: docker_compose

community_images/rabbitmq/bitnami/image.yml

@@ -25,6 +25,8 @@ input_registry:
 repo_sets:
   - rabbitmq:
       input_base_tag: "3.13.7-debian-12-r"
+  - rabbitmq:
+      input_base_tag: "4.0.1-debian-12-r"
 runtimes:
   - type: k8s
     script: k8s_coverage.sh