Comments (5)
When I have created the example pod the scanner on platform B
analyzed the image from its image registry
{"Event":"Analyzing image components for image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest@sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861","Level":"info","Location":"service.go:146","Time":"2022-07-26 19:45:14.078214"}
2022/07/26 19:45:14 registry.manifest.head url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/manifests/sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861 repository=openshift/httpd reference=sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861
2022/07/26 19:45:14 registry.manifest.get url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/manifests/sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861 repository=openshift/httpd reference=sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861
{"Event":"Found 4 layers for image image-registry.openshift-image-registry.svc:5000/openshift/httpd@sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861","Level":"info","Location":"scan.go:94","Time":"2022-07-26 19:45:14.167097"}
2022/07/26 19:45:14 registry.layer.download url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/blobs/sha256:d9e72d058dc507f406dc9377495e3d29ce17596f885c09d0aba6b21e10e27ce6 repository=openshift/httpd digest=sha256:d9e72d058dc507f406dc9377495e3d29ce17596f885c09d0aba6b21e10e27ce6
2022/07/26 19:45:18 registry.layer.download url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/blobs/sha256:cca21acb641a96561e0cf9a0c1c7b7ffbaaefc92185bd8a9440f6049c838e33b repository=openshift/httpd digest=sha256:cca21acb641a96561e0cf9a0c1c7b7ffbaaefc92185bd8a9440f6049c838e33b
2022/07/26 19:45:18 registry.layer.download url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/blobs/sha256:620696f92fec0547c823160d862393fad85007737a207a51cfb32da6086c505c repository=openshift/httpd digest=sha256:620696f92fec0547c823160d862393fad85007737a207a51cfb32da6086c505c
2022/07/26 19:45:21 registry.layer.download url=https://image-registry.openshift-image-registry.svc:5000/v2/openshift/httpd/blobs/sha256:199846f31ae5fa065552bd264c2e9c002b4e92e89f73f949724c6353621e1d9c repository=openshift/httpd digest=sha256:199846f31ae5fa065552bd264c2e9c002b4e92e89f73f949724c6353621e1d9c
{"Event":"Finished analyzing all layers for image image-registry.openshift-image-registry.svc:5000/openshift/httpd@sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861","Level":"info","Location":"scan.go:55","Time":"2022-07-26 19:45:25.763688"}
{"Event":"Done analyzing components for image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest@sha256:62cfaa2a199641010aab4c4f3fba24cb4040729dd31420438380a4b791f69861","Level":"info","Location":"service.go:167","Time":"2022-07-26 19:45:25.844757"}
from stackrox.
Those error messages are a known issue, but they should not affect correctness nor functionality. I'd still expect the internal images to be scanned. Are your images still not scanned? Do you see any related logs in B
's Scanner pod(s)?
from stackrox.
Hi Ross, yes the images are scanned and I can see results on the dashboard. In my second comment the logs indicate scanning took place in platorm B
and results were sent to central.
As long as the log messages in central are only false-positives I am okay with it, though they clog the logstream a bit.
Is there a ticket tracking this issue?
from stackrox.
Yes, we are tracking this issue internally
from stackrox.
Hi @balpert89 I believe that this issue has been resolved in recent versions of the product via the delegated scanning functionality. I will close this ticket, but if you are still experiencing this issue, please feel free to reopen
from stackrox.
Related Issues (20)
- Delete old deferral requests HOT 5
- Scanner: no support for external DB HOT 2
- Revamp Database Migration and Management Process HOT 4
- This is a test issue to see if the token still works
- StackRox 4.4.0 collectors are crashing on COS GKE - failed to initialize collector kernel components HOT 9
- StackRox central 4.4.0 is trying to write to deprecated/'no longer needed' stackrox-db volume HOT 6
- OIDC Login redirect_uri is incorrect using Generic Kubernetes 1.28.6 cluster HOT 4
- can`t scan images HOT 7
- add integration with harbor HOT 3
- Replace sort functions with slices equivalents HOT 2
- Create CredentialExpiryBanner warnings for certificate expiration of central-db-tls certificates HOT 1
- DOCS Missing - What's the API call behind : roxctl image check HOT 1
- Stackrox helm chart PodSecurityPolicy deprecation/deletion in v1.21/v1.25 HOT 2
- Empty commit
- roxctl unknown module(s) HOT 9
- Jira Cloud Integration fails HOT 8
- ACS cannot fetch metadata when using mirrors in a disconnected environment HOT 2
- Updating Scanner Defitions in Offline Mode HOT 4
- secured cluster services not able to authenticate with central service after restarting central db HOT 17
- UI reports Vulnerability definitions as out of date, definitions manifest in Central is correct HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from stackrox.