Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[huawei-csi-plugin] schema v1 manifest not supported by trivy #473

Closed
hairmare opened this issue Dec 11, 2021 · 1 comment · Fixed by #516
Closed

[huawei-csi-plugin] schema v1 manifest not supported by trivy #473

hairmare opened this issue Dec 11, 2021 · 1 comment · Fixed by #516

Comments

@hairmare
Copy link
Contributor

Affected chart
huawei-csi-plugin

Describe the bug
Artifacthub tries to do security scanning on the contaiers referenced in our charts and is reporting that it cannot scan parts of the huawei-csi-plugin multiple times per day.

To Reproduce
Steps to reproduce the behavior:

  1. Regularly check Artifacthub mail

Expected behavior
The plugin should be delivered in a "scannable by artifacthub" way and not spam us with multiple mails about failed scans per day.

Logs

error scanning image quay.io/k8scsi/csi-attacher:v1.2.1: schema v1 manifest not supported by trivy (package huawei-csi-plugin:0.3.1)

Affected version
all of them

Values
none

Environment
none

Additional context
The image that fails to scan is 2 years old and has since been superseded by both 2.x and 3.x versions of csi-attacher.

The recomended Kubernetes versions for csi-attacher 1.2.1 are 1.14 and 1.15 which are both very much out of date.

Huawei has been advised to update the csi-attacher in this issue: Huawei/eSDK_K8S_Plugin#3. A Helm chart of their own has been requested here: Huawei/eSDK_K8S_Plugin#16 wth some progress being made in Huawei/eSDK_K8S_Plugin#35

Personally i think we should scrap support for this helm chart ASAP. If anything the chart has added reasons for upstream to not push their own efforts further. If need be we can assist anyone using this in migrating the chart to their own helm charts repository or, if upstream wants it, we can contribute it to the efforts being made in their repo.

@hairmare
Copy link
Contributor Author

followup: artifacthub/hub#1882

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant