Neuvector fails to start based on scanner image not being able to find certs during init
Bug
Description
The scanner image is failing registry1.dso.mil/ironbank/neuvector/neuvector/scanner:6
k logs neuvector-scanner-pod-7c55bf8bbd-4k8w7 -c init-cert-permissions
+ cp -a '/etc/neuvector/certs/internal/*' /newcerts
cp: cannot stat '/etc/neuvector/certs/internal/*': No such file or directory
+ chmod 660 '/newcerts/*'
chmod: cannot access '/newcerts/*': No such file or directory
+ chown scanner:scanner '/newcerts/*'
chown: cannot access '/newcerts/*': No such file or directory
These certs do not exist in the image.
docker run --user=0 -it --entrypoint sh registry1.dso.mil/ironbank/neuvector/neuvector/scanner:6
sh-5.1# cp -a '/etc/neuvector/certs/internal/*' /newcerts
cp: cannot stat '/etc/neuvector/certs/internal/*': No such file or directory
sh-5.1# cd /etc/neuvector/certs/internal/
sh-5.1# ls
sh-5.1# ls -al
total 8
drwxrwx--- 2 root root 4096 Apr 14 01:46 .
drwxr-xr-x 3 root root 4096 Apr 14 01:46 ..
BigBang Version
bigbang-2.50.0