Ignore CVEs 2021-3533 and 2021-3532 in Ansible 2.9 base image (#5465)

asmacdo · web-flow · commit 69ba8b0e9b37 · 2022-01-05T11:53:19.000-05:00
* Ignore CVEs 2021-3533 and 2021-3532 in base image The following CVEs are causing `pipenv check` step of image build to fail: https://nvd.nist.gov/vuln/detail/CVE-2021-3533 https://nvd.nist.gov/vuln/detail/CVE-2021-3532 Both of these CVEs are against Ansible 2.9. The Ansible team is aware of them, but they require deliberately insecure configuration from the user and the Ansible team considers them invalid CVEs. There are no plans for these to be fixed in the 2.9.z stream and will not cause a security problem with Ansible-based operators. Signed-off-by: austin <austin@redhat.com> * Rerun sanity tests in 2022 Signed-off-by: austin <austin@redhat.com>
diff --git a/OWNERS_ALIASES b/OWNERS_ALIASES
@@ -7,7 +7,6 @@ aliases:
   sdk-admins:
   - estroz
   - joelanford
-  - jmccormick2001
   - jmrodri
   - asmacdo
   - marc-obrien
diff --git a/images/ansible-operator/base.Dockerfile b/images/ansible-operator/base.Dockerfile
@@ -33,7 +33,7 @@ RUN yum clean all && rm -rf /var/cache/yum/* \
   && pip3 install --upgrade pip~=21.1.0 \
   && pip3 install pipenv==2020.11.15 \
   && pipenv install --deploy \
-  && pipenv check \
+  && pipenv check  -i 42926 -i 42923 \
   && yum remove -y gcc libffi-devel openssl-devel python38-devel \
   && yum clean all \
   && rm -rf /var/cache/yum
diff --git a/testdata/go/v2/memcached-operator/api/v1alpha1/groupversion_info.go b/testdata/go/v2/memcached-operator/api/v1alpha1/groupversion_info.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/api/v1alpha1/memcached_types.go b/testdata/go/v2/memcached-operator/api/v1alpha1/memcached_types.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/api/v1alpha1/memcached_webhook.go b/testdata/go/v2/memcached-operator/api/v1alpha1/memcached_webhook.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/api/v1alpha1/zz_generated.deepcopy.go b/testdata/go/v2/memcached-operator/api/v1alpha1/zz_generated.deepcopy.go
diff --git a/testdata/go/v2/memcached-operator/controllers/memcached_controller.go b/testdata/go/v2/memcached-operator/controllers/memcached_controller.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/controllers/suite_test.go b/testdata/go/v2/memcached-operator/controllers/suite_test.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/hack/boilerplate.go.txt b/testdata/go/v2/memcached-operator/hack/boilerplate.go.txt
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v2/memcached-operator/main.go b/testdata/go/v2/memcached-operator/main.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/api/v1alpha1/groupversion_info.go b/testdata/go/v3/memcached-operator/api/v1alpha1/groupversion_info.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/api/v1alpha1/memcached_types.go b/testdata/go/v3/memcached-operator/api/v1alpha1/memcached_types.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/api/v1alpha1/memcached_webhook.go b/testdata/go/v3/memcached-operator/api/v1alpha1/memcached_webhook.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/api/v1alpha1/webhook_suite_test.go b/testdata/go/v3/memcached-operator/api/v1alpha1/webhook_suite_test.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/api/v1alpha1/zz_generated.deepcopy.go b/testdata/go/v3/memcached-operator/api/v1alpha1/zz_generated.deepcopy.go
diff --git a/testdata/go/v3/memcached-operator/controllers/memcached_controller.go b/testdata/go/v3/memcached-operator/controllers/memcached_controller.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/controllers/suite_test.go b/testdata/go/v3/memcached-operator/controllers/suite_test.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/hack/boilerplate.go.txt b/testdata/go/v3/memcached-operator/hack/boilerplate.go.txt
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
diff --git a/testdata/go/v3/memcached-operator/main.go b/testdata/go/v3/memcached-operator/main.go
@@ -1,5 +1,5 @@
 /*
-Copyright 2021.
+Copyright 2022.
 
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
