Comments (5)
@rtaniwa Could you please describe in more details what the use-cases would be for the solution delivered by this request? Is it handling of entitlements for RHEL-based container image builds on the existing Ubuntu GitHub Actions environments, or something else?
from common.
Hi @adelton. I will let @jduimovich add the details. I opened this up as a placeholder during some of our planning discussions, but we never circled back to add the details required.
from common.
@adelton Yes, the main use case is around entitlements for RHEL based container builds but we also see use cases for the using github actions runner (in openshift as well as on direcly on a customers RHEL).
The issue will be to enable consistency in a customers workflow such that it runs transparently on GH VMs or on OpenShift Runners or on RHEL natively.
For containers its configuration and management of a subscription
- simplify team configuration and access to registry.redhat.io, registry.connect.redhat.com (github org level configurations)
- management of entitlements in rhel based containers to run install/update (yum, dnf)
- subscription manager inside containers with proper lifecycle (unsubscribe).
- security concerns to ensure entitlement subscriptions don't leak
For runners, same use cases (running a standard workflow) but with usage of the customer environment.
We also had some thoughts on making RHEL an official runner or simplify the connection of RHEL to GHA which would make reuse in customer HW/SW environment simpler.
Lastly there was a consideration to enable a github app to manage all this automatically (install / remove entitlements as needed by actions) and we could incorporate that app into the redhat dev portal to simplify customers use of entitlements with github actions.
Much of this can be done manually today with manual configuration movement of entitlement files and these use cases would simplify the use experience.
If you have thoughts on these use cases, perhaps there are other scenarios we had not considered or solutions already available we are unaware of, I'd like to hear it.
from common.
Hello, I've now filed #60 to show a possible implementation of an Action which allows to entitle podman build
(and podman run
but those I assume install Red Hat content less often) by adding single step to the workflow, without changing Dockerfiles or modifying the podman build
commands.
from common.
@jduimovich, @divyansh42 Could I get some feedback on the #60 proposal? I'd like to start using it to test RHEL-based images of https://github.com/freeipa/freeipa-container and while I can certainly put the same logic to that repository, I'd prefer to use some standard and generally accepted approach.
from common.
Related Issues (20)
- Update openshift starter workflow HOT 1
- Update helm install with oc-new-app action
- Add cron jobs to actions
- operator-sdk installer HOT 4
- Podman login action HOT 4
- Update buildah, PTR and oc-new-app readmes to point to podman-login action HOT 2
- Test automation for starter workflow HOT 1
- [FEATURE] podman service as an action HOT 5
- Document setting up CRC in Actions HOT 1
- Add a workflow to help users without Dockerfile HOT 1
- TODOs post CRDA action release HOT 2
- Create a blog post for CRDA action HOT 5
- Add CRDA action in code scanning starter workflow
- [FEATURE] GitHub Action to Check CVE-2021-42574 and CVE-2021-42694 HOT 2
- Add new Starter workflows HOT 1
- RedHat github actions site should be verified. HOT 3
- Fix token and secrets in all the test workflows HOT 1
- Add Quarkus Starter workflow
- [BUG] Broken links in READMEs HOT 1
- [FEATURE] wrap output of action-io-generator if line exceeds a threshold
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from common.