devsecops-workshop/workshop-guide

The workshop guide sources. The rendered website can be found here : https://devsecops-workshop.github.io/

workshop-guide's Issues

Prepare Cluster workshop is spread over two pages, that is confusing.

The last step of the Quay integration is on a dedicated page "prepare cluster":
content/2.1-prepare-cluster/_index.md

There was an architecture recap right before and then again after.
I suggest copying this small Quay Integration chapter on the previous "Prerequisites" page and remove this extra page.
content/2-install-prerequisites/_index.md

I don't want to mess up the navigation, so raising this as an issue for someone more familiar with the navigation & structure of the guide.

odo init - invalid command in dev space terminal

Trying to run "odo init" in Dev Space Terminal as specified here:
https://devsecops-workshop.github.io/devsecops-workshop.github.io-dev/3-inner-loop/#use-odo-to-deploy-and-update-our-application
--> but init is not done, see bash output:

bash-4.4$ odo init
Error: Invalid command - see available commands/subcommands above
Usage:
odo [flags]
odo [command]

Examples:

Creating and deploying a Node.js project

git clone https://github.com/openshift/nodejs-ex && cd nodejs-ex
odo create nodejs
odo push

Accessing your Node.js component

odo url create

Commands:
app Perform application operations (delete, describe, list)
catalog Catalog related operations (describe, list, search)
component Manage components (create, delete, describe, exec, link, list, log, push, status, test, unlink, watch)
config Change or view configuration (set, unset, view)
debug Debug commands (info, port-forward)
env Change or view environment configuration (set, unset, view)
preference Modifies preference settings (set, unset, view)
project Perform project operations (create, delete, get, list, set)
registry Configure devfile registry (add, delete, list, update)
service Perform service related operations (create, delete, describe, list)
storage Perform storage operations (create, delete, list)
test Run the test command defined in the devfile
url Expose component to the outside world (create, delete, list)

Utility Commands:
build-images Build images
deploy Deploy components
help Help about any command
login Login to cluster
logout Log out of the current OpenShift session
utils Utilities for terminal commands and modifying odo configurations (terminal)
version Print the client version information

Component Shortcuts:
create Create a new component
delete Delete component
describe Describe component
exec Executes a command inside the component
link Link component to a service or component
list List all components in the current application
log Retrieve the log for the given component
push Push source code to a component
status Watches the given component and outputs machine-readable JSON events representing component status changes
unlink Unlink component to a service or component
watch Watch for changes, update component on change. Watch doesn't support git components.

Flags:
--complete Install completion for odo command
-h, --help Help for odo
--kubeconfig string Paths to a kubeconfig. Only required if out-of-cluster.
--uncomplete Uninstall completion for odo command
-v, --v Level Number for the log level verbosity. Level varies from 0 to 9 (default 0).
--vmodule moduleSpec Comma-separated list of pattern=N settings for file-filtered logging
-y, --y Don't prompt user for typing 'yes'

Use "odo [command] --help" for more information about a command.

✗ Invalid command - see available commands/subcommands above

Outer Loop: Java Container Image should be updated

RHEL 7 based images will be EOL very soon.
Also there is some confusion around which images are now actually used.
in chapter "Create an ImageStream Tag with an Old Image Version", description hints at OpenJDK 8 based on UBI 8, actual tags point to JDK11 on RHEL7.

Old images are good for vulnerabilities in later scenarios, but we may want to switch to more current "old" images.
The default image already shows critical and fixable issues in Quay, maybe then there is no need to introduce an even older image?

Quay instructions require update and test

Tested Quay version is 3.8, current version in OCP 4.14 is 3.11. In that version the config-editor seems to have changed and the guide won't work anymore.
So there needs to be an overhaul for a newer version. Workaround is to install version 3.8 (still available in Operator Hub and works in 4.14)

Problem bei tag-checked-image

Hallo Zusammen,

ich hab folgendes problem bei tag-checked-image in Pipeline und zwar auf diesen schritte Pipeline versucht Image Pullen und Pushen von Openshift Imagestream nicht Quay und in der nächste schritte remove-dev-tag das löscht Dev image von Openshift Imagestream nicht Quay.

Viele Grüße
Mohammad