Merge branch 'hardening_manifest' into '5.5.2'

Hardening manifest

See merge request !8

.gitignore

@@ -8,3 +8,6 @@ Python-3.6.12.tgz
 archive.key
 build-container.sh
 python-libs_filelist.txt
+.env
+download.yaml
+Jenkinsfile

.gitlab/CODEOWNERS

+[Pipelines]
+.gitlab-ci.yml @ironbank-notifications/cht
+.gitlab-ci.yaml @ironbank-notifications/cht
+
+[Gitlab Configuration Files]
+.gitlab/* @ironbank-notifications/cht

.gitlab/issue_templates/Access Request.md

+## Summary
+
+The following individuals are requesting access to this project (one per line):
+(List or tag all individuals here)
+
+
+The access level should be:
+- [ ] Developer access
+- [ ] Remove access
+
+
+## Definition of Done
+- [ ] All accounts have been provided the necessary accesses
+
+
+/label ~"Access" ~"To Do"
\ No newline at end of file

.gitlab/issue_templates/Application - Archive.md

+## Summary
+
+Requesting this application be archived due to one of the following reasons:
+- [ ] Version is no longer supported by vendor
+- [ ] Application is End-Of-Life
+- [ ] License violation.
+- [ ] Other. See below.
+
+## Detailed Description
+
+(Please provide a detailed description of why this application should be archived)
+
+
+## Definition of Done
+- [ ] Application has been reviewed for archival
+- [ ] Project is officially marked as stale
+- [ ] Iron Bank frontend no longer lists application as available or approved
+
+
+/label ~"Container::Archive"
+/cc @ironbank-notifications/archive
\ No newline at end of file

.gitlab/issue_templates/Application - Initial.md

+## Summary
+
+Requesting application to be hardened. This is only for initial hardening of a container.
+
+
+## Version Information
+
+Current version: (State the current version of the application as you see it)
+
+Under support: (Is the updated version within the same major version of the application or is this a new major version?)
+
+
+## Definition of Done
+Hardening:
+- [ ] Container builds successfully
+- [ ] Greylist file has been created (requires a member from container hardening)
+- [ ] Branch has been merged into `development`
+
+Justifications:
+- [ ] All findings have been justified per the above documentation
+- [ ] Justifications have been provided to the container hardening team
+
+Approval Process (container hardening team processes):
+- [ ] Peer review from Container Hardening Team
+- [ ] Findings Approver has reviewed and approved all justifications
+- [ ] Approval request has been sent to Authorizing Official
+- [ ] Approval request has been processed by Authorizing Official
+
+
+
+/label ~"Container::Initial"
+/cc @ironbank-notifications/cht
\ No newline at end of file

.gitlab/issue_templates/Application - Update.md

+## Summary
+
+Requesting application be updated to a newer version.
+
+
+
+## Version Information
+
+Current version: (State the current version of the application as you see it)
+
+Updated version: (State the version you would like the application updated to)
+
+Under support: (Is the updated version within the same major version of the application or is this a new major version?)
+
+
+## Definition of Done
+Hardening:
+- [ ] Container builds successfully
+- [ ] Container version has been updated in greylist file
+- [ ] Branch has been merged into `development`
+
+Justifications:
+- [ ] All findings have been justified per the above documentation
+- [ ] Justifications have been provided to the container hardening team
+
+Approval Process:
+- [ ] Peer review from Container Hardening Team
+- [ ] Findings Approver has reviewed and approved all justifications
+- [ ] Approval request has been sent to Authorizing Official
+- [ ] Approval request has been processed by Authorizing Official
+
+
+
+/label ~"Container::Update"
+/cc @ironbank-notifications/updates
\ No newline at end of file

.gitlab/issue_templates/Bug.md

+## Summary
+
+(Summarize the bug encountered concisely)
+
+
+## Steps to reproduce
+
+(How one can reproduce the issue - this is very important)
+
+
+## What is the current bug behavior?
+
+(What actually happens)
+
+
+## What is the expected correct behavior?
+
+(What you should see instead)
+
+
+## Relevant logs and/or screenshots
+
+(Paste any relevant logs - please use code blocks (```) to format console output,
+logs, and code as it's very hard to read otherwise.)
+
+
+## Possible fixes
+
+(If you can, link to the line of code that might be responsible for the problem)
+
+
+## Defintion of Done
+- [ ] Bug has been identified and corrected within the container
+
+
+/label ~Bug
+/cc @ironbank-notifications/bug
\ No newline at end of file

.gitlab/issue_templates/Feature Request.md

+## Feature description
+
+(Detailed description of the feature being requested)
+
+
+## Use cases
+
+
+(Detailed description of the use case for this feature)
+
+
+## Benefits
+
+(How does this benefit others)
+
+
+## Requirements
+
+(Any requirements for this feature to be enabled?)
+
+
+## Links / references
+
+(List of links or references that support this feature)
+
+
+## Definition of Done
+- [ ] Feature has been implemented
+
+
+/label ~Feature
+/cc @ironbank-notifications/feature
\ No newline at end of file

.gitlab/issue_templates/Leadership Question.md

+## Leadership question
+
+(Detailed description of the question you'd like to ask the leadership team)
+
+
+/label ~"Question::Leadership" ~"To Do"
+/cc @ironbank-notifications/leadership
\ No newline at end of file

.gitlab/issue_templates/New Findings.md

+## Summary
+
+Container has new findings discovered during continuous monitoring.
+
+
+
+## Definition of Done
+Justifications:
+- [ ] All findings have been justified
+- [ ] Justifications have been provided to the container hardening team
+
+Approval Process:
+- [ ] Findings Approver has reviewed and approved all justifications
+- [ ] Approval request has been sent to Authorizing Official
+- [ ] Approval request has been processed by Authorizing Official
+
+
+
+/label ~"Container::New Findings"
+/cc @ironbank-notifications/security
\ No newline at end of file

.gitlab/issue_templates/Onboarding Question.md

+## Onboarding question
+
+(Detailed description of the question you'd like to ask the onboarding team)
+
+
+/label ~"Question::Onboarding" ~"To Do"
+/cc @ironbank-notifications/onboarding
\ No newline at end of file

.gitlab/issue_templates/Pipeline Failure.md

+## Summary
+
+(Summarize the pipeline issue encountered concisely)
+
+
+## Link to failed pipeline
+
+(Link to the failed pipeline)
+
+
+## What is the current bug behavior?
+
+(What actually happens)
+
+
+## What is the expected correct behavior?
+
+(What you should see instead)
+
+
+## Possible fixes
+
+(If you can, link to the line of code that might be responsible for the problem)
+
+
+## Definition of Done
+- [ ] Pipeline failure has been resolved
+
+
+/label ~Pipeline
+/cc @ironbank-notifications/pipelines
\ No newline at end of file

Dockerfile

@@ -43,13 +43,11 @@ RUN dnf update -y && \
 
 COPY wheel-0.35.1-py2.py3-none-any.whl /tmp/wheel-0.35.1-py2.py3-none-any.whl
 COPY python_dateutil-2.8.0-py2.py3-none-any.whl /tmp/python_dateutil-2.8.0-py2.py3-none-any.whl
-COPY python_dateutil-2.8.1-py2.py3-none-any.whl /tmp/python_dateutil-2.8.1-py2.py3-none-any.whl
 COPY setuptools-50.0.0-py3-none-any.whl /tmp/setuptools-50.0.0-py3-none-any.whl
-COPY python-requirements/confluent_docker_utils-0.0.40-py3-none-any.whl /tmp/confluent_docker_utils-0.0.40-py3-none-any.whl
+COPY confluent_docker_utils-0.0.40-py3-none-any.whl /tmp/confluent_docker_utils-0.0.40-py3-none-any.whl
 COPY *.whl /tmp/python-dependencies/
 COPY *.gz  /tmp/python-dependencies/
 
-
 RUN dnf install -y openssl tar procps iputils hostname \
     && pip3 install --no-index --prefix=/usr/local --upgrade --find-links /tmp/python-dependencies/ /tmp/wheel-0.35.1-py2.py3-none-any.whl \
     && pip3 install --no-index --prefix=/usr/local --upgrade --find-links /tmp/python-dependencies/ /tmp/setuptools-50.0.0-py3-none-any.whl \
@@ -62,8 +60,8 @@ RUN mkdir -p /etc/confluent/docker /usr/logs \
     && useradd --no-log-init --create-home --shell /bin/bash appuser \
     && chown appuser:appuser -R /etc/confluent/ /usr/logs
 
-COPY --chown=appuser:appuser target/cp-base-new-5.5.2-package/share/doc/* /usr/share/doc/cp-base-new/
-COPY --chown=appuser:appuser target/cp-base-new-5.5.2-package/share/java/cp-base-new/* /usr/share/java/cp-base-new/
+ADD --chown=appuser:appuser cp-base-new-5.5.2_doc.tar.gz /usr/share/doc/cp-base-new/
+ADD --chown=appuser:appuser cp-base-new-5.5.2_java.tar.gz /usr/share/java/cp-base-new/
 
 COPY --chown=appuser:appuser include/etc/confluent/docker /etc/confluent/docker
 
@@ -74,25 +72,6 @@ COPY license.txt /licenses
 ############################################################
 ############ vvvvv  This Container Below  vvvvv ############
 
-ARG PROJECT_VERSION=5.5.2
-ARG ARTIFACT_ID=cp-kafka
-
-LABEL maintainer="confluentfed@confluent.io"
-LABEL vendor="Confluent"
-LABEL version=$PROJECT_VERSION
-LABEL release=$PROJECT_VERSION
-LABEL name=$ARTIFACT_ID
-LABEL summary="Confluent platform Kafka."
-LABEL io.confluent.docker=true
-ARG BUILD_NUMBER=-1
-LABEL io.confluent.docker.build.number=$BUILD_NUMBER
-LABEL io.confluent.docker.git.repo="confluentinc/kafka-images"
-
-ARG CONFLUENT_VERSION=5.5.2-1
-ARG CONFLUENT_PACKAGES_REPO
-ARG CONFLUENT_PLATFORM_LABEL
-ARG SCALA_VERSION=2.12
-
 # allow arg override of required env params
 ARG KAFKA_ZOOKEEPER_CONNECT
 ENV KAFKA_ZOOKEEPER_CONNECT=${KAFKA_ZOOKEEPER_CONNECT}

Jenkinsfile

-@Library('DCCSCR@master') _
-dccscrPipeline( version: "5.5.2" )
-

download.yaml

-resources:
-  - url: "https://www.python.org/ftp/python/3.6.12/Python-3.6.12.tgz"
-    filename: "Python-3.6.12.tgz"
-    validation:
-      type: "sha256"
-      value: "12dddbe52385a0f702fb8071e12dcc6b3cb2dde07cd8db3ed60e90d90ab78693"
-  - url: "https://files.pythonhosted.org/packages/ee/ff/48bde5c0f013094d729fe4b0316ba2a24774b3ff1c52d924a8a4cb04078a/six-1.15.0-py2.py3-none-any.whl"
-    filename: "six-1.15.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "8b74bedcbbbaca38ff6d7491d76f2b06b3592611af620f8426e82dddb04a5ced"
-  - url: "https://files.pythonhosted.org/packages/a7/00/3df031b3ecd5444d572141321537080b40c1c25e1caa3d86cdd12e5e919c/wheel-0.35.1-py2.py3-none-any.whl"
-    filename: "wheel-0.35.1-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "497add53525d16c173c2c1c733b8f655510e909ea78cc0e29d374243544b77a2"
-  - url: "https://files.pythonhosted.org/packages/41/17/c62faccbfbd163c7f57f3844689e3a78bae1f403648a6afb1d0866d87fbb/python_dateutil-2.8.0-py2.py3-none-any.whl"
-    filename: "python_dateutil-2.8.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "7e6584c74aeed623791615e26efd690f29817a27c73085b78e4bad02493df2fb"
-  - url: "https://files.pythonhosted.org/packages/b0/8b/379494d7dbd3854aa7b85b216cb0af54edcb7fce7d086ba3e35522a713cf/setuptools-50.0.0-py3-none-any.whl"
-    filename: "setuptools-50.0.0-py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "1e842b6dc37a1282f95a05551efe2c4bd09ddca8dd506ed3aa635a9fb6d15309"
-  - url: "https://files.pythonhosted.org/packages/d4/70/d60450c3dd48ef87586924207ae8907090de0b306af2bce5d134d78615cb/python_dateutil-2.8.1-py2.py3-none-any.whl"
-    filename: "python_dateutil-2.8.1-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "75bb3f31ea686f1197762692a9ee6a7550b59fc6ca3a1f4b5d7e32fb98e2da2a"
-  - url: "https://files.pythonhosted.org/packages/cf/ae/94e70d49044ccc234bfdba20114fa947d7ba6eb68a2e452d89b920e62227/paramiko-2.4.2-py2.py3-none-any.whl"
-    filename: "paramiko-2.4.2-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "3c16b2bfb4c0d810b24c40155dbfd113c0521e7e6ee593d704e84b4c658a1f3b"
-  - url: "https://files.pythonhosted.org/packages/bc/2d/831406bd8ad5846aef015f98cfb8ebee6a4830bdc3b3bf14ab378f79c970/boto3-1.9.128-py2.py3-none-any.whl"
-    filename: "boto3-1.9.128-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "9a133736098741ef8016fb22824c99f9bef8f39a0bfbb76f73fe8bf18373f726"
-  - url: "https://files.pythonhosted.org/packages/97/18/c6557f63a6abde34707196fb2cad1c6dc0dbff25a200d5044922496668a4/cryptography-2.7-cp34-abi3-manylinux1_x86_64.whl"
-    filename: "cryptography-2.7-cp34-abi3-manylinux1_x86_64.whl"
-    validation:
-      type: "sha256"
-      value: "96d8473848e984184b6728e2c9d391482008646276c3ff084a1bd89e15ff53a1"
-  - url: "https://files.pythonhosted.org/packages/48/68/c3afca1a5aa8d2997ec3b8ee822a4d752cf85907b321f07ea86888545152/docker-3.7.2-py2.py3-none-any.whl"
-    filename: "docker-3.7.2-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "2b1f48041cfdcc9f6b5da0e04e0e326ded225e736762ade2060000e708f4c9b7"
-  - url: "https://files.pythonhosted.org/packages/f1/ca/10332a30cb25b627192b4ea272c351bce3ca1091e541245cccbace6051d8/requests-2.20.0-py2.py3-none-any.whl"
-    filename: "requests-2.20.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "a84b8c9ab6239b578f22d1c21d51b696dcfe004032bb80ea832398d6909d7279"
-  - url: "https://files.pythonhosted.org/packages/e6/35/f187bdf23be87092bd0f1200d43d23076cee4d0dec109f195173fd3ebc79/mock-2.0.0-py2.py3-none-any.whl"
-    filename: "mock-2.0.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "5ce3c71c5545b472da17b72268978914d0252980348636840bd34a00b5cc96c1"
-  - url: "https://files.pythonhosted.org/packages/80/18/1492d651693ef7d40e0a40377ed56a8cc5c5fe86073eb6c56e53513f4480/pyrsistent-0.16.1.tar.gz"
-    filename: "pyrsistent-0.16.1.tar.gz"
-    validation:
-      type: "sha256"
-      value: "aa2ae1c2e496f4d6777f869ea5de7166a8ccb9c2e06ebcf6c7ff1b670c98c5ef"
-  - url: "https://files.pythonhosted.org/packages/65/eb/1f97cb97bfc2390a276969c6fae16075da282f5058082d4cb10c6c5c1dba/six-1.14.0-py2.py3-none-any.whl"
-    filename: "six-1.14.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "8f3cd2e254d8f793e7f3d6d9df77b92252b52637291d0f0da013c76ea2724b6c"
-  - url: "https://files.pythonhosted.org/packages/a0/dd/6ecfedfb035567bb3be1b895ef036bfe9183917c8746b97ea1a94d1fabd5/docker_compose-1.25.2-py2.py3-none-any.whl"
-    filename: "docker_compose-1.25.2-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "93f8a0eb1909aebbefaeeb172b35507a4d04b88962b02ac11c08c92a545678cd"
-  - url: "https://files.pythonhosted.org/packages/30/9e/f663a2aa66a09d838042ae1a2c5659828bb9b41ea3a6efa20a20fd92b121/Jinja2-2.11.2-py2.py3-none-any.whl"
-    filename: "Jinja2-2.11.2-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "f0a4641d3cf955324a89c04f3d94663aa4d638abe8f733ecd3582848e1c37035"
-  - url: "https://files.pythonhosted.org/packages/9d/57/2f5e6226a674b2bcb6db531e8b383079b678df5b10cdaa610d6cf20d77ba/PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl"
-    filename: "PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl"
-    validation:
-      type: "sha256"
-      value: "30f9b96db44e09b3304f9ea95079b1b7316b2b4f3744fe3aaecccd95d547063d"
-  - url: "https://files.pythonhosted.org/packages/62/1e/a94a8d635fa3ce4cfc7f506003548d0a2447ae76fd5ca53932970fe3053f/pyasn1-0.4.8-py2.py3-none-any.whl"
-    filename: "pyasn1-0.4.8-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "39c7e2ec30515947ff4e87fb6f456dfc6e84857d34be479c9d4a4ba4bf46aa5d"
-  - url: "https://files.pythonhosted.org/packages/26/70/6d218afbe4c73538053c1016dd631e8f25fffc10cd01f5c272d7acf3c03d/bcrypt-3.2.0-cp36-abi3-manylinux2010_x86_64.whl"
-    filename: "bcrypt-3.2.0-cp36-abi3-manylinux2010_x86_64.whl"
-    validation:
-      type: "sha256"
-      value: "cd1ea2ff3038509ea95f687256c46b79f5fc382ad0aa3664d200047546d511d1"
-  - url: "https://files.pythonhosted.org/packages/8e/7b/88f10115b4748f86be6b7b1d8761ba5023fccf6e6cbe762e368f63eddcf9/botocore-1.12.253-py2.py3-none-any.whl"
-    filename: "botocore-1.12.253-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "dc080aed4f9b220a9e916ca29ca97a9d37e8e1d296fe89cbaeef929bf0c8066b"
-  - url: "https://files.pythonhosted.org/packages/16/8a/1fc3dba0c4923c2a76e1ff0d52b305c44606da63f718d14d3231e21c51b0/s3transfer-0.2.1-py2.py3-none-any.whl"
-    filename: "s3transfer-0.2.1-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "b780f2411b824cb541dbcd2c713d0cb61c7d1bcadae204cdddda2b35cef493ba"
-  - url: "https://files.pythonhosted.org/packages/07/cb/5f001272b6faeb23c1c9e0acc04d48eaaf5c862c17709d20e3469c6e0139/jmespath-0.10.0-py2.py3-none-any.whl"
-    filename: "jmespath-0.10.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "cdf6525904cc597730141d61b36f2e4b8ecc257c420fa2f4549bac2c2d0cb72f"
-  - url: "https://files.pythonhosted.org/packages/b5/a8/56be92dcd4a5bf1998705a9b4028249fe7c9a035b955fe93b6a3e5b829f8/asn1crypto-1.4.0-py2.py3-none-any.whl"
-    filename: "asn1crypto-1.4.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "4bcdf33c861c7d40bdcd74d8e4dd7661aac320fcdf40b9a3f95b4ee12fde2fa8"
-  - url: "https://files.pythonhosted.org/packages/c6/60/44b6c54dbbee7d5eafbc34e0a0b67207e85906fe8e36c830dfd3966dde1d/cffi-1.14.3-cp38-cp38-manylinux1_x86_64.whl"
-    filename: "cffi-1.14.3-cp38-cp38-manylinux1_x86_64.whl"
-    validation:
-      type: "sha256"
-      value: "529c4ed2e10437c205f38f3691a68be66c39197d01062618c55f74294a4a4828"
-  - url: "https://files.pythonhosted.org/packages/f5/e8/f6bd1eee09314e7e6dee49cbe2c5e22314ccdb38db16c9fc72d2fa80d054/docker_pycreds-0.4.0-py2.py3-none-any.whl"
-    filename: "docker_pycreds-0.4.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "7266112468627868005106ec19cd0d722702d2b7d5912a28e19b826c3d37af49"
-  - url: "https://files.pythonhosted.org/packages/4c/5f/f61b420143ed1c8dc69f9eaec5ff1ac36109d52c80de49d66e0c36c3dfdf/websocket_client-0.57.0-py2.py3-none-any.whl"
-    filename: "websocket_client-0.57.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "0fc45c961324d79c781bab301359d5a1b00b13ad1b10415a4780229ef71a5549"
-  - url: "https://files.pythonhosted.org/packages/4b/2a/0276479a4b3caeb8a8c1af2f8e4355746a97fab05a372e4a2c6a6b876165/idna-2.7-py2.py3-none-any.whl"
-    filename: "idna-2.7-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "156a6814fb5ac1fc6850fb002e0852d56c0c8d2531923a51032d1b70760e186e"
-  - url: "https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl"
-    filename: "chardet-3.0.4-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691"
-  - url: "https://files.pythonhosted.org/packages/5e/c4/6c4fe722df5343c33226f0b4e0bb042e4dc13483228b4718baf286f86d87/certifi-2020.6.20-py2.py3-none-any.whl"
-    filename: "certifi-2020.6.20-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41"
-  - url: "https://files.pythonhosted.org/packages/01/11/525b02e4acc0c747de8b6ccdab376331597c569c42ea66ab0a1dbd36eca2/urllib3-1.24.3-py2.py3-none-any.whl"
-    filename: "urllib3-1.24.3-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "a637e5fae88995b256e3409dc4d52c2e2e0ba32c42a6365fee8bbd2238de3cfb"
-  - url: "https://files.pythonhosted.org/packages/c1/a3/d439f338aa90edd5ad9096cd56564b44882182150e92148eb14ceb7488ba/pbr-5.5.0-py2.py3-none-any.whl"
-    filename: "pbr-5.5.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "5adc0f9fc64319d8df5ca1e4e06eea674c26b80e6f00c530b18ce6a6592ead15"
-  - url: "https://files.pythonhosted.org/packages/48/19/f2090f7dad41e225c7f2326e4cfe6fff49e57dedb5b53636c9551f86b069/cached_property-1.5.2-py2.py3-none-any.whl"
-    filename: "cached_property-1.5.2-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "df4f613cf7ad9a588cc381aaf4a512d26265ecebd5eb9e1ba12f1319eb85a6a0"
-  - url: "https://files.pythonhosted.org/packages/a2/55/8f8cab2afd404cf578136ef2cc5dfb50baa1761b68c9da1fb1e4eed343c9/docopt-0.6.2.tar.gz"
-    filename: "docopt-0.6.2.tar.gz"
-    validation:
-      type: "sha256"
-      value: "49b3a825280bd66b3aa83585ef59c4a8c82f2c8a522dbe754a8bc8d08c85c491"
-  - url: "https://files.pythonhosted.org/packages/8d/ee/e9ecce4c32204a6738e0a5d5883d3413794d7498fe8b06f44becc028d3ba/dockerpty-0.4.1.tar.gz"
-    filename: "dockerpty-0.4.1.tar.gz"
-    validation:
-      type: "sha256"
-      value: "69a9d69d573a0daa31bcd1c0774eeed5c15c295fe719c61aca550ed1393156ce"
-  - url: "https://files.pythonhosted.org/packages/c5/8f/51e89ce52a085483359217bc72cdbf6e75ee595d5b1d4b5ade40c7e018b8/jsonschema-3.2.0-py2.py3-none-any.whl"
-    filename: "jsonschema-3.2.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "4e5b3cf8216f577bee9ce139cbe72eca3ea4f292ec60928ff24758ce626cd163"
-  - url: "https://files.pythonhosted.org/packages/06/f5/46201c428aebe0eecfa83df66bf3e6caa29659dbac5a56ddfd83cae0d4a4/texttable-1.6.3-py2.py3-none-any.whl"
-    filename: "texttable-1.6.3-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "f802f2ef8459058736264210f716c757cbf85007a30886d8541aa8c3404f1dda"
-  - url: "https://files.pythonhosted.org/packages/64/c2/b80047c7ac2478f9501676c988a5411ed5572f35d1beff9cae07d321512c/PyYAML-5.3.1.tar.gz"
-    filename: "PyYAML-5.3.1.tar.gz"
-    validation:
-      type: "sha256"
-      value: "b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d"
-  - url: "https://files.pythonhosted.org/packages/4b/20/f6d7648c81cb84815d0be935d5c74cd1cc0239e43eadb1a61062d34b6543/MarkupSafe-1.1.1-cp38-cp38-manylinux1_x86_64.whl"
-    filename: "MarkupSafe-1.1.1-cp38-cp38-manylinux1_x86_64.whl"
-    validation:
-      type: "sha256"
-      value: "13d3144e1e340870b25e7b10b98d779608c02016d5184cfb9927a9f10c689f42"
-  - url: "https://files.pythonhosted.org/packages/22/cd/a6aa959dca619918ccb55023b4cb151949c64d4d5d55b3f4ffd7eee0c6e8/docutils-0.15.2-py3-none-any.whl"
-    filename: "docutils-0.15.2-py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "6c4f696463b79f1fb8ba0c594b63840ebd41f059e92b31957c46b74a4599b6d0"
-  - url: "https://files.pythonhosted.org/packages/ae/e7/d9c3a176ca4b02024debf82342dab36efadfc5776f9c8db077e8f6e71821/pycparser-2.20-py2.py3-none-any.whl"
-    filename: "pycparser-2.20-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "7582ad22678f0fcd81102833f60ef8d0e57288b6b5fb00323d101be910e35705"
-  - url: "https://files.pythonhosted.org/packages/14/df/479736ae1ef59842f512548bacefad1abed705e400212acba43f9b0fa556/attrs-20.2.0-py2.py3-none-any.whl"
-    filename: "attrs-20.2.0-py2.py3-none-any.whl"
-    validation:
-      type: "sha256"
-      value: "fce7fc47dfc976152e82d53ff92fa0407700c21acd20886a13777a0d20e655dc"
-  - url: "https://packages.confluent.io/rpm/5.5/confluent-kafka-2.12-5.5.2-1.noarch.rpm"
-    filename: "confluent-kafka-2.12-5.5.2-1.noarch.rpm"
-    validation:
-      type: "sha256"
-      value: "a65232ad4ee53acdc54fbe394c636caa956b7c17302c1631289b110be51ff2b4"

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "confluent/kafka/cp-kafka-5.5.x"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "5.5.2"
+- "5.5.x"
+- "5.5"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/openjdk/openjdk11"
+  BASE_TAG: "1.11"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "cp-kafka-5.5.x"
+  org.opencontainers.image.description: "Confluent Platform Kafka."
+  org.opencontainers.image.licenses: "CONFLUENT ENTERPRISE LICENSE"
+  org.opencontainers.image.url: "https://docs.confluent.io/5.5.2/installation/docker/image-reference.html#image-reference"
+  org.opencontainers.image.vendor: "Confluent"
+  org.opencontainers.image.version: "5.5.2"
+  mil.dso.ironbank.image.keywords: "confluent,kafka,zookeeper"
+  mil.dso.ironbank.image.type: "commercial"
+  mil.dso.ironbank.product.name: "Confluent Platform"
+
+# List of resources to make available to the offline build context
+resources:
+- filename: Python-3.6.12.tgz
+  url: https://www.python.org/ftp/python/3.6.12/Python-3.6.12.tgz
+  validation:
+    type: sha256
+    value: 12dddbe52385a0f702fb8071e12dcc6b3cb2dde07cd8db3ed60e90d90ab78693
+- filename: six-1.15.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/ee/ff/48bde5c0f013094d729fe4b0316ba2a24774b3ff1c52d924a8a4cb04078a/six-1.15.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 8b74bedcbbbaca38ff6d7491d76f2b06b3592611af620f8426e82dddb04a5ced
+- filename: wheel-0.35.1-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/a7/00/3df031b3ecd5444d572141321537080b40c1c25e1caa3d86cdd12e5e919c/wheel-0.35.1-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 497add53525d16c173c2c1c733b8f655510e909ea78cc0e29d374243544b77a2
+- filename: python_dateutil-2.8.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/41/17/c62faccbfbd163c7f57f3844689e3a78bae1f403648a6afb1d0866d87fbb/python_dateutil-2.8.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 7e6584c74aeed623791615e26efd690f29817a27c73085b78e4bad02493df2fb
+- filename: setuptools-50.0.0-py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/b0/8b/379494d7dbd3854aa7b85b216cb0af54edcb7fce7d086ba3e35522a713cf/setuptools-50.0.0-py3-none-any.whl
+  validation:
+    type: sha256
+    value: 1e842b6dc37a1282f95a05551efe2c4bd09ddca8dd506ed3aa635a9fb6d15309
+- filename: python_dateutil-2.8.1-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/d4/70/d60450c3dd48ef87586924207ae8907090de0b306af2bce5d134d78615cb/python_dateutil-2.8.1-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 75bb3f31ea686f1197762692a9ee6a7550b59fc6ca3a1f4b5d7e32fb98e2da2a
+- filename: paramiko-2.4.2-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/cf/ae/94e70d49044ccc234bfdba20114fa947d7ba6eb68a2e452d89b920e62227/paramiko-2.4.2-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 3c16b2bfb4c0d810b24c40155dbfd113c0521e7e6ee593d704e84b4c658a1f3b
+- filename: boto3-1.9.128-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/bc/2d/831406bd8ad5846aef015f98cfb8ebee6a4830bdc3b3bf14ab378f79c970/boto3-1.9.128-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 9a133736098741ef8016fb22824c99f9bef8f39a0bfbb76f73fe8bf18373f726
+- filename: cryptography-2.7-cp34-abi3-manylinux1_x86_64.whl
+  url: https://files.pythonhosted.org/packages/97/18/c6557f63a6abde34707196fb2cad1c6dc0dbff25a200d5044922496668a4/cryptography-2.7-cp34-abi3-manylinux1_x86_64.whl
+  validation:
+    type: sha256
+    value: 96d8473848e984184b6728e2c9d391482008646276c3ff084a1bd89e15ff53a1
+- filename: docker-3.7.2-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/48/68/c3afca1a5aa8d2997ec3b8ee822a4d752cf85907b321f07ea86888545152/docker-3.7.2-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 2b1f48041cfdcc9f6b5da0e04e0e326ded225e736762ade2060000e708f4c9b7
+- filename: requests-2.20.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/f1/ca/10332a30cb25b627192b4ea272c351bce3ca1091e541245cccbace6051d8/requests-2.20.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: a84b8c9ab6239b578f22d1c21d51b696dcfe004032bb80ea832398d6909d7279
+- filename: mock-2.0.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/e6/35/f187bdf23be87092bd0f1200d43d23076cee4d0dec109f195173fd3ebc79/mock-2.0.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 5ce3c71c5545b472da17b72268978914d0252980348636840bd34a00b5cc96c1
+- filename: pyrsistent-0.16.1.tar.gz
+  url: https://files.pythonhosted.org/packages/80/18/1492d651693ef7d40e0a40377ed56a8cc5c5fe86073eb6c56e53513f4480/pyrsistent-0.16.1.tar.gz
+  validation:
+    type: sha256
+    value: aa2ae1c2e496f4d6777f869ea5de7166a8ccb9c2e06ebcf6c7ff1b670c98c5ef
+- filename: six-1.14.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/65/eb/1f97cb97bfc2390a276969c6fae16075da282f5058082d4cb10c6c5c1dba/six-1.14.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 8f3cd2e254d8f793e7f3d6d9df77b92252b52637291d0f0da013c76ea2724b6c
+- filename: docker_compose-1.25.2-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/a0/dd/6ecfedfb035567bb3be1b895ef036bfe9183917c8746b97ea1a94d1fabd5/docker_compose-1.25.2-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 93f8a0eb1909aebbefaeeb172b35507a4d04b88962b02ac11c08c92a545678cd
+- filename: Jinja2-2.11.2-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/30/9e/f663a2aa66a09d838042ae1a2c5659828bb9b41ea3a6efa20a20fd92b121/Jinja2-2.11.2-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: f0a4641d3cf955324a89c04f3d94663aa4d638abe8f733ecd3582848e1c37035
+- filename: PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl
+  url: https://files.pythonhosted.org/packages/9d/57/2f5e6226a674b2bcb6db531e8b383079b678df5b10cdaa610d6cf20d77ba/PyNaCl-1.4.0-cp35-abi3-manylinux1_x86_64.whl
+  validation:
+    type: sha256
+    value: 30f9b96db44e09b3304f9ea95079b1b7316b2b4f3744fe3aaecccd95d547063d
+- filename: pyasn1-0.4.8-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/62/1e/a94a8d635fa3ce4cfc7f506003548d0a2447ae76fd5ca53932970fe3053f/pyasn1-0.4.8-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 39c7e2ec30515947ff4e87fb6f456dfc6e84857d34be479c9d4a4ba4bf46aa5d
+- filename: bcrypt-3.2.0-cp36-abi3-manylinux2010_x86_64.whl
+  url: https://files.pythonhosted.org/packages/26/70/6d218afbe4c73538053c1016dd631e8f25fffc10cd01f5c272d7acf3c03d/bcrypt-3.2.0-cp36-abi3-manylinux2010_x86_64.whl
+  validation:
+    type: sha256
+    value: cd1ea2ff3038509ea95f687256c46b79f5fc382ad0aa3664d200047546d511d1
+- filename: botocore-1.12.253-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/8e/7b/88f10115b4748f86be6b7b1d8761ba5023fccf6e6cbe762e368f63eddcf9/botocore-1.12.253-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: dc080aed4f9b220a9e916ca29ca97a9d37e8e1d296fe89cbaeef929bf0c8066b
+- filename: s3transfer-0.2.1-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/16/8a/1fc3dba0c4923c2a76e1ff0d52b305c44606da63f718d14d3231e21c51b0/s3transfer-0.2.1-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: b780f2411b824cb541dbcd2c713d0cb61c7d1bcadae204cdddda2b35cef493ba
+- filename: jmespath-0.10.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/07/cb/5f001272b6faeb23c1c9e0acc04d48eaaf5c862c17709d20e3469c6e0139/jmespath-0.10.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: cdf6525904cc597730141d61b36f2e4b8ecc257c420fa2f4549bac2c2d0cb72f
+- filename: asn1crypto-1.4.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/b5/a8/56be92dcd4a5bf1998705a9b4028249fe7c9a035b955fe93b6a3e5b829f8/asn1crypto-1.4.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 4bcdf33c861c7d40bdcd74d8e4dd7661aac320fcdf40b9a3f95b4ee12fde2fa8
+- filename: cffi-1.14.3-cp38-cp38-manylinux1_x86_64.whl
+  url: https://files.pythonhosted.org/packages/c6/60/44b6c54dbbee7d5eafbc34e0a0b67207e85906fe8e36c830dfd3966dde1d/cffi-1.14.3-cp38-cp38-manylinux1_x86_64.whl
+  validation:
+    type: sha256
+    value: 529c4ed2e10437c205f38f3691a68be66c39197d01062618c55f74294a4a4828
+- filename: docker_pycreds-0.4.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/f5/e8/f6bd1eee09314e7e6dee49cbe2c5e22314ccdb38db16c9fc72d2fa80d054/docker_pycreds-0.4.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 7266112468627868005106ec19cd0d722702d2b7d5912a28e19b826c3d37af49
+- filename: websocket_client-0.57.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/4c/5f/f61b420143ed1c8dc69f9eaec5ff1ac36109d52c80de49d66e0c36c3dfdf/websocket_client-0.57.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 0fc45c961324d79c781bab301359d5a1b00b13ad1b10415a4780229ef71a5549
+- filename: idna-2.7-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/4b/2a/0276479a4b3caeb8a8c1af2f8e4355746a97fab05a372e4a2c6a6b876165/idna-2.7-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 156a6814fb5ac1fc6850fb002e0852d56c0c8d2531923a51032d1b70760e186e
+- filename: chardet-3.0.4-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691
+- filename: certifi-2020.6.20-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/5e/c4/6c4fe722df5343c33226f0b4e0bb042e4dc13483228b4718baf286f86d87/certifi-2020.6.20-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 8fc0819f1f30ba15bdb34cceffb9ef04d99f420f68eb75d901e9560b8749fc41
+- filename: urllib3-1.24.3-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/01/11/525b02e4acc0c747de8b6ccdab376331597c569c42ea66ab0a1dbd36eca2/urllib3-1.24.3-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: a637e5fae88995b256e3409dc4d52c2e2e0ba32c42a6365fee8bbd2238de3cfb
+- filename: pbr-5.5.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/c1/a3/d439f338aa90edd5ad9096cd56564b44882182150e92148eb14ceb7488ba/pbr-5.5.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 5adc0f9fc64319d8df5ca1e4e06eea674c26b80e6f00c530b18ce6a6592ead15
+- filename: cached_property-1.5.2-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/48/19/f2090f7dad41e225c7f2326e4cfe6fff49e57dedb5b53636c9551f86b069/cached_property-1.5.2-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: df4f613cf7ad9a588cc381aaf4a512d26265ecebd5eb9e1ba12f1319eb85a6a0
+- filename: docopt-0.6.2.tar.gz
+  url: https://files.pythonhosted.org/packages/a2/55/8f8cab2afd404cf578136ef2cc5dfb50baa1761b68c9da1fb1e4eed343c9/docopt-0.6.2.tar.gz
+  validation:
+    type: sha256
+    value: 49b3a825280bd66b3aa83585ef59c4a8c82f2c8a522dbe754a8bc8d08c85c491
+- filename: dockerpty-0.4.1.tar.gz
+  url: https://files.pythonhosted.org/packages/8d/ee/e9ecce4c32204a6738e0a5d5883d3413794d7498fe8b06f44becc028d3ba/dockerpty-0.4.1.tar.gz
+  validation:
+    type: sha256
+    value: 69a9d69d573a0daa31bcd1c0774eeed5c15c295fe719c61aca550ed1393156ce
+- filename: jsonschema-3.2.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/c5/8f/51e89ce52a085483359217bc72cdbf6e75ee595d5b1d4b5ade40c7e018b8/jsonschema-3.2.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 4e5b3cf8216f577bee9ce139cbe72eca3ea4f292ec60928ff24758ce626cd163
+- filename: texttable-1.6.3-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/06/f5/46201c428aebe0eecfa83df66bf3e6caa29659dbac5a56ddfd83cae0d4a4/texttable-1.6.3-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: f802f2ef8459058736264210f716c757cbf85007a30886d8541aa8c3404f1dda
+- filename: PyYAML-5.3.1.tar.gz
+  url: https://files.pythonhosted.org/packages/64/c2/b80047c7ac2478f9501676c988a5411ed5572f35d1beff9cae07d321512c/PyYAML-5.3.1.tar.gz
+  validation:
+    type: sha256
+    value: b8eac752c5e14d3eca0e6dd9199cd627518cb5ec06add0de9d32baeee6fe645d
+- filename: MarkupSafe-1.1.1-cp38-cp38-manylinux1_x86_64.whl
+  url: https://files.pythonhosted.org/packages/4b/20/f6d7648c81cb84815d0be935d5c74cd1cc0239e43eadb1a61062d34b6543/MarkupSafe-1.1.1-cp38-cp38-manylinux1_x86_64.whl
+  validation:
+    type: sha256
+    value: 13d3144e1e340870b25e7b10b98d779608c02016d5184cfb9927a9f10c689f42
+- filename: docutils-0.15.2-py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/22/cd/a6aa959dca619918ccb55023b4cb151949c64d4d5d55b3f4ffd7eee0c6e8/docutils-0.15.2-py3-none-any.whl
+  validation:
+    type: sha256
+    value: 6c4f696463b79f1fb8ba0c594b63840ebd41f059e92b31957c46b74a4599b6d0
+- filename: pycparser-2.20-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/ae/e7/d9c3a176ca4b02024debf82342dab36efadfc5776f9c8db077e8f6e71821/pycparser-2.20-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: 7582ad22678f0fcd81102833f60ef8d0e57288b6b5fb00323d101be910e35705
+- filename: attrs-20.2.0-py2.py3-none-any.whl
+  url: https://files.pythonhosted.org/packages/14/df/479736ae1ef59842f512548bacefad1abed705e400212acba43f9b0fa556/attrs-20.2.0-py2.py3-none-any.whl
+  validation:
+    type: sha256
+    value: fce7fc47dfc976152e82d53ff92fa0407700c21acd20886a13777a0d20e655dc
+- filename: confluent-kafka-2.12-5.5.2-1.noarch.rpm
+  url: https://packages.confluent.io/rpm/5.5/confluent-kafka-2.12-5.5.2-1.noarch.rpm
+  validation:
+    type: sha256
+    value: a65232ad4ee53acdc54fbe394c636caa956b7c17302c1631289b110be51ff2b4
+- filename: confluent_docker_utils-0.0.40-py3-none-any.whl
+  url: https://ironbank-files.s3.amazonaws.com/confluent_docker_utils-0.0.40-py3-none-any.whl
+  validation:
+    type: sha256
+    value: f84abafb513eb80b94bf6f90a838beecd72d7b93bf76e77ae7b090f23db6002d
+- filename: cp-base-new-5.5.2_doc.tar.gz
+  url: https://ironbank-files.s3.amazonaws.com/cp-base-new-5.5.2_doc.tar.gz
+  validation:
+    type: sha256
+    value: a9f0dde812daa1e9d0c20a092c03e099f75786493ea6eb6e8fb56e358a57710d
+- filename: cp-base-new-5.5.2_java.tar.gz
+  url: https://ironbank-files.s3.amazonaws.com/cp-base-new-5.5.2_java.tar.gz
+  validation:
+    type: sha256
+    value: 4f3c6d93c5b3e80d318dccc6f82a2bc6c8ea14ddd13e6f06842081fef62f2061
+
+# List of project maintainers
+maintainers:
+- name: "Scott Stroud"
+  username: "scottstroud"
+  email: "confluent-fed@confluent.io"
+  cht_member: false  
+- name: "Preston McGowan"
+  username: "preston.mcgowan"
+  email: "confluent-fed@confluent.io"
+  cht_member: false  
\ No newline at end of file

target/checkstyle-checker.xml

-<?xml version="1.0"?>
-<!DOCTYPE module PUBLIC
-        "-//Puppy Crawl//DTD Check Configuration 1.3//EN"
-        "http://www.puppycrawl.com/dtds/configuration_1_3.dtd">
-
-<!--
- // Copyright 2015 Confluent Inc.
- //
- // Licensed under the Apache License, Version 2.0 (the "License");
- // you may not use this file except in compliance with the License.
- // You may obtain a copy of the License at
- //
- // http://www.apache.org/licenses/LICENSE-2.0
- //
- // Unless required by applicable law or agreed to in writing, software
- // distributed under the License is distributed on an "AS IS" BASIS,
- // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- // See the License for the specific language governing permissions and
- // limitations under the License.
-
-    Checkstyle configuration that checks the Google coding conventions from Google Java Style
-    that can be found at https://google.github.io/styleguide/javaguide.html. Based on google_checks.xml
-
-    NOTE: Plus some additional code-quality checks
- -->
-
-<module name = "Checker">
-    <property name="localeLanguage" value="en"/>
-
-    <property name="fileExtensions" value="java, properties, xml"/>
-
-    <!-- Checks for whitespace                               -->
-    <!-- See http://checkstyle.sf.net/config_whitespace.html -->
-    <module name="FileTabCharacter">
-        <property name="eachLine" value="true"/>
-    </module>
-
-    <!-- header -->
-    <module name="RegexpHeader">
-        <property name="header" value="/\*\nCopyright .* Confluent Inc."/>
-    </module>
-
-    <module name="SuppressWarningsFilter" />
-
-    <module name="TreeWalker">
-        <!-- Generic 'turn all checkstyle off' comment filter -->
-        <module name="SuppressionCommentFilter">
-            <property name="offCommentFormat" value="CHECKSTYLE:OFF"/>
-            <property name="onCommentFormat" value="CHECKSTYLE:ON"/>
-        </module>
-
-        <!-- Specific 'turn list of checkstyle rules off' comment filter -->
-        <module name="SuppressionCommentFilter">
-            <property name="offCommentFormat" value="CHECKSTYLE_RULES.OFF:\s+([\w\|]+)"/>
-            <property name="onCommentFormat" value="CHECKSTYLE_RULES.ON:\s+([\w\|]+)"/>
-            <property name="checkFormat" value="$1"/>
-        </module>
-
-        <module name="SuppressWarningsHolder" />
-
-        <module name="OuterTypeFilename"/>
-        <module name="IllegalTokenText">
-            <property name="tokens" value="STRING_LITERAL, CHAR_LITERAL"/>
-            <property name="format" value="\\u00(09|0(a|A)|0(c|C)|0(d|D)|22|27|5(C|c))|\\(0(10|11|12|14|15|42|47)|134)"/>
-            <property name="message" value="Consider using special escape sequence instead of octal value or Unicode escaped value."/>
-        </module>
-        <module name="AvoidEscapedUnicodeCharacters">
-            <property name="allowEscapesForControlCharacters" value="true"/>
-            <property name="allowByTailComment" value="true"/>
-            <property name="allowNonPrintableEscapes" value="true"/>
-        </module>
-        <module name="LineLength">
-            <property name="max" value="100"/>
-            <property name="ignorePattern" value="^package.*|^import.*|a href|href|http://|https://|ftp://"/>
-        </module>
-        <module name="AvoidStarImport"/>
-        <module name="UnusedImports"/>
-        <module name="OneTopLevelClass"/>
-        <module name="NoLineWrap"/>
-        <module name="EmptyBlock">
-            <property name="option" value="TEXT"/>
-            <property name="tokens" value="LITERAL_TRY, LITERAL_FINALLY, LITERAL_IF, LITERAL_ELSE, LITERAL_SWITCH"/>
-        </module>
-        <module name="NeedBraces"/>
-        <module name="LeftCurly"/>
-        <module name="RightCurly">
-            <property name="id" value="RightCurlySame"/>
-            <property name="tokens" value="LITERAL_TRY, LITERAL_CATCH, LITERAL_FINALLY, LITERAL_IF, LITERAL_ELSE"/>
-        </module>
-        <module name="RightCurly">
-            <property name="id" value="RightCurlyAlone"/>
-            <property name="option" value="alone"/>
-            <property name="tokens" value="CLASS_DEF, METHOD_DEF, CTOR_DEF, LITERAL_FOR, LITERAL_WHILE, STATIC_INIT, INSTANCE_INIT"/>
-        </module>
-        <module name="WhitespaceAround">
-            <property name="allowEmptyConstructors" value="true"/>
-            <property name="allowEmptyMethods" value="true"/>
-            <property name="allowEmptyTypes" value="true"/>
-            <property name="allowEmptyLoops" value="true"/>
-            <message key="ws.notFollowed"
-                     value="WhitespaceAround: ''{0}'' is not followed by whitespace. Empty blocks may only be represented as '{}' when not part of a multi-block statement (4.1.3)"/>
-            <message key="ws.notPreceded"
-                     value="WhitespaceAround: ''{0}'' is not preceded with whitespace."/>
-        </module>
-        <module name="OneStatementPerLine"/>
-        <module name="MultipleVariableDeclarations"/>
-        <module name="ArrayTypeStyle"/>
-        <module name="MissingSwitchDefault"/>
-        <module name="FallThrough"/>
-        <module name="UpperEll"/>
-        <module name="ModifierOrder"/>
-        <module name="EmptyLineSeparator">
-            <property name="allowNoEmptyLineBetweenFields" value="true"/>
-        </module>
-        <module name="SeparatorWrap">
-            <property name="id" value="SeparatorWrapDot"/>
-            <property name="tokens" value="DOT"/>
-            <property name="option" value="nl"/>
-        </module>
-        <module name="SeparatorWrap">
-            <property name="id" value="SeparatorWrapComma"/>
-            <property name="tokens" value="COMMA"/>
-            <property name="option" value="EOL"/>
-        </module>
-        <module name="PackageName">
-            <property name="format" value="^[a-z]+(\.[a-z][a-z0-9]*)*$"/>
-            <message key="name.invalidPattern"
-                     value="Package name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="TypeName">
-            <message key="name.invalidPattern"
-                     value="Type name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="MemberName">
-            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9]*$"/>
-            <message key="name.invalidPattern"
-                     value="Member name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="ParameterName">
-            <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-            <message key="name.invalidPattern"
-                     value="Parameter name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="CatchParameterName">
-            <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-            <message key="name.invalidPattern"
-                     value="Catch parameter name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="LocalVariableName">
-            <property name="tokens" value="VARIABLE_DEF"/>
-            <property name="format" value="^[a-z]([a-z0-9][a-zA-Z0-9]*)?$"/>
-            <message key="name.invalidPattern"
-                     value="Local variable name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="ClassTypeParameterName">
-            <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-            <message key="name.invalidPattern"
-                     value="Class type name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="MethodTypeParameterName">
-            <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-            <message key="name.invalidPattern"
-                     value="Method type name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="InterfaceTypeParameterName">
-            <property name="format" value="(^[A-Z][0-9]?)$|([A-Z][a-zA-Z0-9]*[T]$)"/>
-            <message key="name.invalidPattern"
-                     value="Interface type name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="NoFinalizer"/>
-        <module name="GenericWhitespace">
-            <message key="ws.followed"
-                     value="GenericWhitespace ''{0}'' is followed by whitespace."/>
-            <message key="ws.preceded"
-                     value="GenericWhitespace ''{0}'' is preceded with whitespace."/>
-            <message key="ws.illegalFollow"
-                     value="GenericWhitespace ''{0}'' should followed by whitespace."/>
-            <message key="ws.notPreceded"
-                     value="GenericWhitespace ''{0}'' is not preceded with whitespace."/>
-        </module>
-        <module name="Indentation">
-            <property name="basicOffset" value="2"/>
-            <property name="braceAdjustment" value="0"/>
-            <property name="caseIndent" value="2"/>
-            <property name="throwsIndent" value="4"/>
-            <property name="lineWrappingIndentation" value="4"/>
-            <property name="arrayInitIndent" value="2"/>
-        </module>
-        <module name="AbbreviationAsWordInName">
-            <property name="ignoreFinal" value="false"/>
-            <property name="allowedAbbreviationLength" value="2"/>
-        </module>
-        <module name="OverloadMethodsDeclarationOrder"/>
-        <module name="VariableDeclarationUsageDistance"/>
-        <module name="CustomImportOrder">
-            <property name="sortImportsInGroupAlphabetically" value="true"/>
-            <property name="separateLineBetweenGroups" value="true"/>
-            <property name="specialImportsRegExp"
-                      value="${checkstyle.customimportorder.specialimportsregexp}"
-                      default=""/>
-            <property name="customImportOrderRules"
-                      value="${checkstyle.customimportorder.customimportorderrules}"
-                      default="STATIC###THIRD_PARTY_PACKAGE"/>
-            <property name="severity"
-                      value="${checkstyle.customimportorder.severity}"
-                      default="ignore"/>
-        </module>
-        <module name="MethodParamPad"/>
-        <module name="ParenPad"/>
-        <module name="OperatorWrap">
-            <property name="option" value="NL"/>
-            <property name="tokens" value="BAND, BOR, BSR, BXOR, DIV, EQUAL, GE, GT, LAND, LE, LITERAL_INSTANCEOF, LOR, LT, MINUS, MOD, NOT_EQUAL, PLUS, QUESTION, SL, SR, STAR"/>
-        </module>
-        <module name="AnnotationLocation">
-            <property name="id" value="AnnotationLocationMostCases"/>
-            <property name="tokens" value="CLASS_DEF, INTERFACE_DEF, ENUM_DEF, METHOD_DEF, CTOR_DEF"/>
-        </module>
-        <module name="AnnotationLocation">
-            <property name="id" value="AnnotationLocationVariables"/>
-            <property name="tokens" value="VARIABLE_DEF"/>
-            <property name="allowSamelineMultipleAnnotations" value="true"/>
-        </module>
-        <module name="NonEmptyAtclauseDescription"/>
-        <module name="JavadocTagContinuationIndentation"/>
-        <module name="JavadocParagraph"/>
-        <module name="AtclauseOrder">
-            <property name="tagOrder" value="@param, @return, @throws, @deprecated"/>
-            <property name="target" value="CLASS_DEF, INTERFACE_DEF, ENUM_DEF, METHOD_DEF, CTOR_DEF, VARIABLE_DEF"/>
-        </module>
-        <module name="MethodName">
-            <property name="format" value="^[a-z][a-z0-9][a-zA-Z0-9_]*$"/>
-            <message key="name.invalidPattern"
-                     value="Method name ''{0}'' must match pattern ''{1}''."/>
-        </module>
-        <module name="SingleLineJavadoc">
-            <property name="ignoreInlineTags" value="false"/>
-        </module>
-        <module name="EmptyCatchBlock">
-            <property name="exceptionVariableName" value="expected"/>
-        </module>
-        <module name="CommentsIndentation"/>
-
-        <!-- code quality -->
-        <module name="MethodLength"/>
-        <module name="ParameterNumber">
-            <property name="max" value="10"/>
-        </module>
-        <module name="ClassDataAbstractionCoupling">
-            <property name="excludeClassesRegexps"
-                      value="${checkstyle.classdataabstractioncoupling.excludeclassesregexps}"
-                      default="^.*Exception$"/>
-        </module>
-        <module name="BooleanExpressionComplexity"/>
-        <module name="CyclomaticComplexity"/>
-        <module name="JavaNCSS" />
-        <module name="NPathComplexity"/>
-
-        <module name="FinalParameters">
-            <property name="severity"
-                      value="${checkstyle.finalparameters.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="FinalLocalVariable">
-            <property name="severity"
-                      value="${checkstyle.finallocalvariable.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="FinalClass">
-            <property name="severity"
-                      value="${checkstyle.finalclass.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="TodoComment">
-            <property name="format"
-                      value="${checkstyle.todocomment.format}"
-                      default="(TODO)|(FIXME)"/>
-            <property name="severity"
-                      value="${checkstyle.todocomment.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="HideUtilityClassConstructor">
-            <property name="severity"
-                      value="${checkstyle.hideutilityclassconstructor.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="RedundantModifier">
-            <property name="severity"
-                      value="${checkstyle.redundantmodifier.severity}"
-                      default="ignore"/>
-        </module>
-
-        <module name="RedundantImport">
-            <property name="severity"
-                      value="${checkstyle.redundantimport.severity}"
-                      default="error"/>
-        </module>
-    </module>
-</module>

target/checkstyle-result.xml

-<?xml version="1.0" encoding="UTF-8"?>
-<checkstyle version="8.18">
-</checkstyle>

target/checkstyle-suppressions.xml

-<?xml version="1.0"?>
-
-<!DOCTYPE suppressions PUBLIC
-        "-//Puppy Crawl//DTD Suppressions 1.1//EN"
-        "http://www.puppycrawl.com/dtds/suppressions_1_1.dtd">
-
-<suppressions>
-
-    <!-- these are c/p from ak :( -->
-    <!-- TODO: reuse these from AK -->
-    <suppress
-            checks="."
-            files="(Configurable|CopyOnWriteMap|MockTime|SystemTime|Time|Utils|ZkUtils).java"
-    />
-
-    <!-- these are c/p from ak :( -->
-    <!-- TODO: reuse these from AK -->
-    <suppress
-            checks="."
-            files="io[\\/]confluent[\\/]common[\\/](metrics|config)[\\/].*"
-    />
-
-</suppressions>