Adding security checks in the building and deployment process
This time, we will add a new step to perform a security check in the image that has been built. We are going to use Advanced Cluster Security for that. To successfully use it, you should have Advanced Cluster Security installed and the local cluster configured as a secured cluster. Check Chapter 12, OpenShift Multi-Cluster Security, to see how to do it.
See next what our pipeline looks like now:
Figure 14.14 – Pipeline with security checks
Therefore, the following task has been added to the pipeline:
security-check: Uses ACS APIs to check the image against existing security policies defined in ACS.
To simulate security issues, we will also use a custom s2i-java task that uses an old ubi-openjdk version, which contains many known vulnerabilities. To fix the issues, we will change the build strategy to use a Dockerfile that uses the latest version of the RHEL UBI image and...
