feat(iop): csaf eval, cpes, release graph - #752
Conversation
Enables VMaaS Reposcan to import CPE and Release Graph metadata through/from IoP Gateway.
b18461d to
9091252
Compare
vkrizan
changed the title
|
@ehelms @jeremylenz Please review. 🙏 |
| SYNC_CSAF: "yes" | ||
| SYNC_RELEASES: "no" | ||
| SYNC_RELEASE_GRAPH: "no" | ||
| SYNC_RELEASE_GRAPH: "yes" |
There was a problem hiding this comment.
This would unfortunately be available only in downstream. Should I flip this to "no" here?
There was a problem hiding this comment.
Mapping of Product Versions to CPEs for accurate reporting. @jdobes can give more details if you want.
There was a problem hiding this comment.
What does it trigger to happen? or put another way, will this causes errors if there is no access?
There was a problem hiding this comment.
The import is part of reposync (either manual through the trigger script, or timed within the process). If there is no access (or malformed response), then it would fail just the part of release graphs import (with a log entry).
We can flip this to "no" here for the upstream. Then the REPOLIST_GIT URL (to vmaas-assets) would not matter.
There was a problem hiding this comment.
If it fails without a bunch of noise, I'm OK with it.
This can seem quite random and unclear what they are to anyone in the community. Not to mention they are private once you realize they are Red Hat Jira issues. Please try to avoid including that kind of info in the description or commit message. |
| KATELLO_URL: "http://iop-core-gateway:9090" | ||
| REDHAT_CVEMAP_URL: "http://iop-core-gateway:9090/pub/iop/data/meta/v1/cvemap.xml" | ||
| CPE_DICT_URL: http://iop-core-gateway:9090/pub/iop/data/meta/v1/cpe-dictionary.xml | ||
| REPOLIST_GIT: http://iop-core-gateway:9090/static/vmaas-assets/.git |
There was a problem hiding this comment.
A hidden folder? Is this a standard git repo config folder? What creates it?
There was a problem hiding this comment.
This is a bare git folder that is generated during build. Reposcan works with git at the moment, so we've chosen this workaround. We are planning to remove the dependency on git in our services...
This is related to SYNC_RELEASE_GRAPH=yes. See also comment #752 (comment).
Let's discuss this outside of the PR. I'd love your thoughts to improve this. |
2 participants
Why are you introducing these changes? (Problem description, related links)
Enabling the CVE's without errata feature in VMaas.
This requires additional data syncs of CPEs and Release Graphs.
What are the changes introduced in this pull request?
CSAF_UNFIXED_EVAL_ENABLEDon VMaaS web appHow to test this pull request
Steps to reproduce:
Checklist