Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider dropping the data output target #2212

Open
lcarva opened this issue Dec 10, 2024 · 0 comments
Open

Consider dropping the data output target #2212

lcarva opened this issue Dec 10, 2024 · 0 comments

Comments

@lcarva
Copy link
Member

lcarva commented Dec 10, 2024

The ec validate image command allows dumping the computed policy data via the data output target, e.g.

ec validate image ... --output data

Because of our use of conftest, this creates the need of having to re-compiling the policy data for a second time for each image being validated. (Moving to using OPA directly could make this easier but it would still require some work.)

The data output target is not exposed in our Tekton task. (At some point we did, but this turned out to cause issues due to the large amount of data.)

Do we still need this output target? Is inspecting the workdir created under /tmp just as good for debugging purposes?

Acceptance Criteria

  • A decision is made on whether or not to keep the data output target. If removing it, use this issue to remove support. Otherwise, provide the compelling reason(s) for keeping it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant