Skip to content

Commit a1b0520

Browse files
authored
RHOAIENG-24702, RHOAIENG-38121: add AI Pipelines exceptions to check-payload (#2654)
These exceptions are required because AI Pipelines uses two different binaries when in FIPS mode vs non-FIPS mode. The reason is that these binaries are copied to the user's provided base image and in FIPS mode, this means the OpenSSL version must match (e.g. UBI 9). In non-FIPS mode, we leverage the builtin Go crypto so that the binaries are portable. Relates: RHOAIENG-24702 and RHOAIENG-38121 Slack: https://redhat-internal.slack.com/archives/C09GK0M9YKD/p1762370844652579 Signed-off-by: mprahl <mprahl@users.noreply.github.com>
1 parent fcee493 commit a1b0520

File tree

1 file changed

+30
-0
lines changed

1 file changed

+30
-0
lines changed

scripts/check-payload/config.toml

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -170,6 +170,36 @@ dirs = ["/assets/downloads/cli"]
170170
error = "ErrGoMissingTag"
171171
dirs = ["/assets/downloads/cli"]
172172

173+
# AI Pipelines override (RHOAIENG-24702 and RHOAIENG-38121)
174+
# When FIPS is enabled, /usr/bin/argoexec-fips is used. /usr/bin/argoexec is
175+
# only used for portability reasons in non-FIPS environments.
176+
[[payload.odh-data-science-pipelines-argo-argoexec-container.ignore]]
177+
error = "ErrGoNotCgoEnabled"
178+
files = ["/usr/bin/argoexec"]
179+
180+
[[payload.odh-data-science-pipelines-argo-argoexec-container.ignore]]
181+
error = "ErrGoMissingSymbols"
182+
files = ["/usr/bin/argoexec"]
183+
184+
[[payload.odh-data-science-pipelines-argo-argoexec-container.ignore]]
185+
error = "ErrNotDynLinked"
186+
files = ["/usr/bin/argoexec"]
187+
188+
# AI Pipelines override (RHOAIENG-24702 and RHOAIENG-38121)
189+
# When FIPS is enabled, /usr/bin/launcher-v2-fips is used. /usr/bin/launcher-v2 is
190+
# only used for portability reasons in non-FIPS environments.
191+
[[payload.odh-ml-pipelines-launcher-container.ignore]]
192+
error = "ErrGoNotCgoEnabled"
193+
files = ["/usr/bin/launcher-v2"]
194+
195+
[[payload.odh-ml-pipelines-launcher-container.ignore]]
196+
error = "ErrGoMissingSymbols"
197+
files = ["/usr/bin/launcher-v2"]
198+
199+
[[payload.odh-ml-pipelines-launcher-container.ignore]]
200+
error = "ErrNotDynLinked"
201+
files = ["/usr/bin/launcher-v2"]
202+
173203
# Temporary supprsssions for workbenches
174204
# https://github.com/openshift/check-payload/blob/main/internal/types/errors.go
175205

0 commit comments

Comments
 (0)