hardening updates

.gitignore

+*.rpm
+*.rpm.dependencies
+*.rpm.sha256sum
+*.whl*
+*.gz*
+pip-20.2.2-py2.py3-none-any.whl
+Python-3.6.12.tgz
+archive.key
+build-container.sh
+python-libs_filelist.txt
+.env

Dockerfile

@@ -6,18 +6,12 @@ FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
 
 USER root
 
-ARG IMAGE_VERSION='5.5.2'
-ENV IMAGE_VERSION=${IMAGE_VERSION}
-ARG DOCKER_UPSTREAM_TAG
-ENV CONFLUENT_VERSION=${DOCKER_UPSTREAM_TAG}
-
 ENV CONTROL_CENTER_DATA_DIR=/mnt/data
 ENV CONTROL_CENTER_CONFIG_DIR=/mnt/config
 ENV CONTROL_CENTER_SECRETS_DIR=/mnt/secrets
 ENV DOCKER_SCRIPT_DIR=/opt/caas/bin
 ENV COMPONENT_SCRIPT_DIR=/opt/confluent/etc
 
-
 WORKDIR /opt
 
 COPY opt/caas/lib/ /opt/caas/lib/

hardening_manifest.yaml

@@ -9,8 +9,9 @@ name: "confluent/confluent-component-operator/cp-enterprise-control-center-opera
 # on ironbank.dsop.io
 tags:
 - "5.5.2"
-- "latest"
-
+- "5.5.x"
+- "5.5"
+  
 # Build args passed to Dockerfile ARGs
 args:
   BASE_IMAGE: "redhat/openjdk/openjdk11"
@@ -19,35 +20,25 @@ args:
 # Docker image labels
 labels:
   org.opencontainers.image.title: "cp-enterprise-control-center-operator-5.5.x"
-  ## Human-readable description of the software packaged in the image
-  # org.opencontainers.image.description: "FIXME"
-  ## License(s) under which contained software is distributed
-  # org.opencontainers.image.licenses: "FIXME"
-  ## URL to find more information on the image
-  # org.opencontainers.image.url: "FIXME"
-  ## Name of the distributing entity, organization or individual
-  # org.opencontainers.image.vendor: "FIXME"
+  org.opencontainers.image.description: "Confluent Operator image for enterprise control center."
+  org.opencontainers.image.licenses: "CONFLUENT ENTERPRISE LICENSE"
+  org.opencontainers.image.url: "https://docs.confluent.io/5.5.2/installation/operator/index.html"
+  org.opencontainers.image.vendor: "Confluent"
   org.opencontainers.image.version: "5.5.2"
-  ## Keywords to help with search (ex. "cicd,gitops,golang")
-  # mil.dso.ironbank.image.keywords: "FIXME"
-  ## This value can be "opensource" or "commercial"
-  # mil.dso.ironbank.image.type: "FIXME"
-  ## Product the image belongs to for grouping multiple images
-  # mil.dso.ironbank.product.name: "FIXME"
+  mil.dso.ironbank.image.keywords: "confluent,kafka,zookeeper,operator"
+  mil.dso.ironbank.image.type: "commercial"
+  mil.dso.ironbank.product.name: "Confluent Platform"
 
 # List of resources to make available to the offline build context
 resources: []
 
 # List of project maintainers
-# FIXME: Fill in the following details for the current container owner in the whitelist
-# FIXME: Include any other vendor information if applicable
 maintainers:
-- email: "confluentfed@confluent.io"
-#   # The name of the current container owner
-#   name: "FIXME"
-#   # The gitlab username of the current container owner
-#   username: "FIXME"
-#   cht_member: true # FIXME: Uncomment if the maintainer is a member of CHT
-# - name: "FIXME"
-#   username: "FIXME"
-#   email: "FIXME"
+- name: "Scott Stroud"
+  username: "scottstroud"
+  email: "confluent-fed@confluent.io"
+  cht_member: false  
+- name: "Preston McGowan"
+  username: "preston.mcgowan"
+  email: "confluent-fed@confluent.io"
+  cht_member: false