All images to be tagged with specific tags - Internal security in VIP Authentication Hub

Products

• VIP Authentication Hub

Issue/Introduction

The company security asks that all images be tagged with specific the company tags:

  vendor, url to a confluence info page, internal team owner, etc.

To do so, something like the following should be applied:

- From imageXX docker build –-tag <tag> --label A=<labelA> --labelB=<labelB>;
- Then, retag to the original tag so that helm charts would still work;
- Then, deploy the new labelled images only to the container registries;

This should not change the images, binaries but it will clearly change image SHA and creation date.  

Is there an official confirmation no support will be lost doing so?

 

Resolution

Retagging images and managing image labels is part of the owner's image LCM expected to be done in the field.

This LCM has no impact on image runtime.

Adding additional labels would be done when the images are pulled.

Images can be retagged *prior* to being used by the helm chart that is expecting a specific tag, or retagged and used by the chart if the new image tags are passed in via the override values file.

Bottom line: after getting the images, custom tags or metadata labels can be used.