From e19529785c5962aa0a94501651893aea95c99870 Mon Sep 17 00:00:00 2001
From: ironbank-bot <ironbank-bot@dsop.io>
Date: Thu, 10 Dec 2020 01:11:28 +0000
Subject: [PATCH] Migrate to hardening_manifest.yaml

---
 Dockerfile              |  7 ------
 Jenkinsfile             |  3 ---
 download.json           |  9 -------
 hardening_manifest.yaml | 55 +++++++++++++++++++++++++++++++++++++++++
 4 files changed, 55 insertions(+), 19 deletions(-)
 delete mode 100644 Jenkinsfile
 delete mode 100644 download.json
 create mode 100644 hardening_manifest.yaml

diff --git a/Dockerfile b/Dockerfile
index 71fcf16..76e144e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,13 +14,6 @@ ENV MMS_LOG_DIR /var/log/mongodb-mms-automation
 ENV MDB_DIR /var/lib/mongodb-mms-automation/downloads
 
 
-LABEL name="MongoDB Enterprise AppDB" \
-      version="${VERSION}" \
-      summary="MongoDB Enterprise AppDB" \
-      description="MongoDB Enterprise AppDB" \
-      vendor="MongoDB" \
-      release="1" \
-      maintainer="support@mongodb.com"
 
 RUN yum update -y && yum install \
         libpcap \
diff --git a/Jenkinsfile b/Jenkinsfile
deleted file mode 100644
index 1c5cc31..0000000
--- a/Jenkinsfile
+++ /dev/null
@@ -1,3 +0,0 @@
-@Library('DCCSCR@master') _
-dccscrPipeline(version: "10.2.15.5958-1")
-
diff --git a/download.json b/download.json
deleted file mode 100644
index 05019bf..0000000
--- a/download.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  "resources": [
-    {
-      "url": "docker://quay.io/mongodb/mongodb-enterprise-appdb@sha256:6650dbd4cac6e08bd064407c178c73cf306e8f58bebe370f36aca33ff1c3e406",
-      "tag": "quay.io/mongodb/mongodb-enterprise-appdb:10.2.15.5958-1"
-    }
-  ]
-}
-
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
new file mode 100644
index 0000000..6b0abed
--- /dev/null
+++ b/hardening_manifest.yaml
@@ -0,0 +1,55 @@
+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "mongodb/mongodb-enterprise/mongodb-ops-manager-appdb"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "10.2.15.5958-1"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi7"
+  BASE_TAG: "7.9"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "mongodb-ops-manager-appdb"
+  ## Human-readable description of the software packaged in the image
+  # org.opencontainers.image.description: "FIXME"
+  ## License(s) under which contained software is distributed
+  # org.opencontainers.image.licenses: "FIXME"
+  ## URL to find more information on the image
+  # org.opencontainers.image.url: "FIXME"
+  ## Name of the distributing entity, organization or individual
+  # org.opencontainers.image.vendor: "FIXME"
+  org.opencontainers.image.version: "10.2.15.5958-1"
+  ## Keywords to help with search (ex. "cicd,gitops,golang")
+  # mil.dso.ironbank.image.keywords: "FIXME"
+  ## This value can be "opensource" or "commercial"
+  # mil.dso.ironbank.image.type: "FIXME"
+  ## Product the image belongs to for grouping multiple images
+  # mil.dso.ironbank.product.name: "FIXME"
+
+# List of resources to make available to the offline build context
+resources:
+- tag: quay.io/mongodb/mongodb-enterprise-appdb:10.2.15.5958-1
+  url: docker://quay.io/mongodb/mongodb-enterprise-appdb@sha256:6650dbd4cac6e08bd064407c178c73cf306e8f58bebe370f36aca33ff1c3e406
+
+# List of project maintainers
+# FIXME: Fill in the following details for the current container owner in the whitelist
+# FIXME: Include any other vendor information if applicable
+maintainers:
+- email: "jonathan.janos@mongodb.com"
+#   # The name of the current container owner
+#   name: "FIXME"
+#   # The gitlab username of the current container owner
+#   username: "FIXME"
+#   cht_member: true # FIXME: Uncomment if the maintainer is a member of CHT
+# - name: "FIXME"
+#   username: "FIXME"
+#   email: "FIXME"
-- 
GitLab