Merge branch 'init' into 'development'

Init

See merge request !12

Dockerfile

+ARG BASE_REGISTRY=registry1.dso.mil
+ARG BASE_IMAGE=ironbank/redhat/ubi/ubi8
+ARG BASE_TAG=8.3
+ARG BUILD_IMAGE=ubi8/go-toolset
+ARG BUILD_TAG=1.14.12
+
+FROM ${BASE_REGISTRY}/${BUILD_IMAGE}:${BUILD_TAG} as builder
+USER 0
+ARG TARBALL=tsb-src-files.tar.gz
+WORKDIR /go/src/app
+COPY "${TARBALL}" .
+RUN tar -zxf "${TARBALL}" -C /go/src/app
+RUN CGO_ENABLED=0 go build -a --ldflags '-X github.com/tetrateio/tetrate/pkg/version.build=1.1.0-0-ge7507582d-HEAD -extldflags "-static"' \
+  -tags "netgo" -installsuffix netgo \
+  -o /go/bin/tsboperator-server \
+  github.com/tetrateio/tetrate/tsboperator/cmd/server
+
+FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
+
+COPY --from=builder /go/bin/tsboperator-server /usr/local/bin
+COPY LICENSE .
+USER 1000
+ENTRYPOINT ["/usr/local/bin/tsboperator-server"]
+HEALTHCHECK --timeout=30s CMD type -P tsboperator-server || exit 1

LICENSE

+TETRATE.IO, INC.
+END USER LICENSE AGREEMENT
+
+
+BY CLICKING ON THE "ACCEPT" BUTTON, YOU OR THE ENTITY THAT YOU REPRESENT ("LICENSEE") ARE UNCONDITIONALLY CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THIS END USER LICENSE AGREEMENT (THIS "AGREEMENT") WITH TETRATE.IO, INC. AND ITS AFFILIATES (“TETRATE”). IF THESE TERMS ARE CONSIDERED AN OFFER, ACCEPTANCE IS EXPRESSLY LIMITED TO SUCH TERMS. IF LICENSEE DOES NOT UNCONDITIONALLY AGREE TO THE FOREGOING, CLICK THE "CANCEL" BUTTON AND THE INSTALLATION PROCESS WILL NOT CONTINUE. IF YOU CLICK THE “ACCEPT” BUTTON TO CONTINUE WITH INSTALLATON YOU ARE REPRESENTING AND WARRANTING THAT YOU ARE AUTHORIZED TO BIND LICENSEE.
+
+
+1. Grant of License and Restrictions. Subject to the terms hereof, payment of all fees, and any applicable user/use limitations, Tetrate grants Licensee a personal, nonsublicensable, nonexclusive, right to use the software that is directly accessible through this installation process, but only: (i) in object code form only (“Software”); (ii) for the number of instances specified in the applicable invoice or order form; and (iii) in accordance with Tetrate’s applicable user documentation (“Documentation”) and price list. Tetrate retains ownership of the Software and Licensee will maintain the copyright notice.
+
+
+2. Updates and Support Services.  To the extent that an update to the Software is provided, such update shall be deemed “Software” provided subject to this Agreement.  Support services are provided pursuant to Tetrate’s standard support terms. Tetrate reserves the right to change the scope or duration of such services at any time, and to access, freely use and distribute data collected from Licensee through such services. In order to receive support services, Licensee may be required to enable features to communicate with Tetrate as specified in the Documentation.
+
+
+3. Restrictions.  Licensee will not (and will not allow any third party to): (i) reverse engineer or attempt to discover any source code or underlying ideas or algorithms of the Software (except to the limited extent that applicable law prohibits reverse engineering restrictions); (ii) provide, lease, lend, disclose, use for timesharing or service bureau purposes, or otherwise use or allow others to use for the benefit of any third party, the Software (except as expressly and specifically authorized by Tetrate);  (iii) without the express prior written consent of Tetrate, conduct any benchmarking or comparative study or analysis involving the Software (“Benchmarking”) for any reason or purpose except, to the limited extent absolutely necessary, to determine the suitability of the Software to interoperate with  Licensee’s internal computer systems; (iv) disclose to any third party any Benchmarking or any other information related thereto; (v) use the Software or any Benchmarking in connection with the development of products that compete with the Software; or (vi) reproduce, alter or modify the Software.  Prior to disposing of any media or apparatus containing any part of the Software, Licensee shall completely destroy the Software contained therein.  All the limitations and restrictions on Software in this Agreement also apply to Documentation and screens. Licensee acknowledges that Software may be distributed alongside or contain or use certain open source or other third-party software (“Third Party Software”).  THIRD PARTY SOFTWARE IS (IN ADDITION TO THE TERMS AND CONDITIONS OF THIS AGREEMENT), SUBJECT TO AND GOVERNED BY (AND LICENSEE AGREES TO AND WILL INDEMNIFY TETRATE FOR NONCOMPLIANCE WITH) THE RESPECTIVE LICENSES FOR SUCH THIRD-PARTY SOFTWARE.  No rights or licenses are granted other than as expressly and unambiguously set forth herein.
+
+
+4. Confidentiality. The Software in source code form remains a confidential trade secret of Tetrate and/or its suppliers. The Software is protected by the copyright and other intellectual property laws of the United States and international treaties. Licensee acknowledges that, in the course of using the Software, Licensee may obtain or learn information relating to the Software, which may include, without limitation, information relating to the performance, reliability or stability of the Software, operation of the Software, know-how, techniques, processes, ideas, algorithms, and software design and architecture (“Proprietary Information”). As between the parties, such Proprietary Information shall belong solely to Tetrate.  During and after the term of this Agreement, Licensee shall hold in confidence and protect, and shall not use (except as expressly authorized by this Agreement) or disclose, Proprietary Information to any third party.
+  
+5.        Termination. This Agreement shall enter into effect upon its acceptance as set forth above and continue in full force and effect until revoked by Tetrate or earlier terminated by either party as expressly permitted by this Agreement. Licensee may terminate this Agreement at any time by destroying all copies of the Software and related Documentation. This Agreement will terminate automatically if Licensee fails to pay the full invoiced amount for the Software when due or fails to comply with any term or condition of this Agreement, including any attempt to transfer a copy of the Software to another party except as provided in this Agreement. Licensee agrees that upon such termination, Licensee will destroy all copies of the Software and related Documentation. Except as otherwise expressly provided herein, the terms hereof shall survive any termination. Termination is not an exclusive remedy and all other remedies will be available whether or not termination occurs.
+ 
+6. Warranty Disclaimer. TETRATE AND ITS SUPPLIERS PROVIDE THE SOFTWARE AND DOCUMENTATION “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE SOFTWARE AND DOCUMENTATION IS WITH LICENSEE. SHOULD THE SOFTWARE OR DOCUMENTATION PROVE DEFECTIVE, LICENSEE ASSUMES THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+
+7. Limitation of Liability.   IN NO EVENT WILL TETRATE OR ITS SUPPLIERS BE LIABLE FOR ANY LOST DATA, LOST PROFITS, SECURITY BREACH OR GOVERNMENTAL FINE DUE TO RELIANCE ON THE SOFTWARE OR SUPPORT SERVICES, OR CONSEQUENTIAL, EXEMPLARY, SPECIAL, OR INCIDENTAL DAMAGES, ARISING FROM OR RELATING TO THIS AGREEMENT, EVEN IF A PARTY KNEW OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT SHALL TETRATE’SOR ITS SUPPLIERS’ TOTAL CUMULATIVE LIABILITY ARISING FROM OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT OR TORT OR OTHERWISE, EXCEED A SUM EQUAL TO THE TOTAL OF ALL FEES PAID BY LICENSEE TO TETRATE DURING THE SIX (6) MONTH PERIOD IMMEDIATELY PRECEDING THE EVENT FIRST GIVING RISE TO LIABILITY.  THIS LIMITATION IS CUMULATIVE AND WILL NOT BE INCREASED BY THE EXISTENCE OF MORE THAN ONE INCIDENT OR CLAIM.
+
+
+8. Export Control.  Licensee represents and warrants that it shall comply with all laws and regulations applicable to Licensee with respect to the license and use of the Software.  Licensee further acknowledges and agrees that the Software licensed under this Agreement may be subject to restrictions and controls imposed by the United States Export Administration Act and the regulations thereunder. Licensee agrees to comply with all applicable export and reexport control laws and regulations, including the Export Administration Regulations (“EAR”) maintained by the U.S. Department of Commerce, trade and economic sanctions maintained by the Treasury Department’s Office of Foreign Assets Control, and the International Traffic in Arms Regulations (“ITAR”) maintained by the Department of State.  Specifically, Licensee covenants that it shall not, directly or indirectly, sell, export, reexport, transfer, divert, or otherwise dispose of any Software or technology (including products derived from or based on such technology) received from Tetrate under this Agreement to any destination, entity, or person prohibited by the laws or regulations of the United States, without obtaining prior authorization from the competent government authorities as required by those laws and regulations.  These prohibitions include, but are not limited to the following:  (i) the Software cannot be exported or re-exported to any countries embargoes by the United States (currently including Cuba, Iran, North Korea, Sudan or Syria) which includes nationals of these countries employed by Licensee; (ii) the Software cannot be exported or re-exported for military use in country group ‘b’ prior to valid ‘export license’ or valid ‘license exception’; (iii) engineers cannot have access to Tetrate’s proprietary encryption source code; and (iv) the Software cannot be used for any prohibited end uses including any ‘nuclear, biological or chemical weapon related activities’.  Licensee agrees to notify Tetrate of any suspicious activities by any employee related to the Software.  Licensee agrees to indemnify, to the fullest extent permitted by law, Tetrate from and against any fines or penalties that may arise as a result of Licensee’s breach of this provision.  This export control clause shall survive termination or cancellation of this Agreement.
+
+
+9.        Anticorruption Laws.         Licensee acknowledges that it is familiar with and understands the provisions of the U.S. Foreign Corrupt Practices Act (the “FCPA") and the U.K. Bribery Act of 2010 (“UKBA”) and agrees to comply with its terms as well as any provisions of local law or Tetrate’s corporate policies and procedures related thereto. Licensee further understands the provisions relating to the FCPA and UKBA’s prohibitions regarding the payment or giving of anything of value, including but not limited to payments, gifts, travel, entertainment and meals, either directly or indirectly, to an official of a foreign government or political party for the purpose of influencing an act or decision in his or her official capacity or inducing the official to use his or her party's influence with that government, to obtain or retain business involving the Software. Licensee agrees to not violate or knowingly let anyone violate the FCPA or UKBA, and Licensee agrees that no payment it makes will constitute a bribe, influence payment, kickback, rebate, or other payment that violates the FCPA, the UKBA, or any other applicable anticorruption or antibribery law.  
+
+
+10.                U.S. Government Restricted Rights.        The Software and Documentation are “commercial items”, “commercial computer software” and “commercial computer software documentation,” respectively, pursuant to DFAR Section 227.7202 and FAR Section 12.212, as applicable.  Any use, modification, reproduction, release, performance, display or disclosure of the Software and Documentation by the United States Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of this Agreement. The Software was developed fully at private expense.
+
+
+11.        Reports.  Licensee shall audit its actual usage and inform Tetrate by email as set forth in an order form of the number upon the occurrence of the following events: (i) on or before any material increase in the usage beyond what was set forth in the applicable order form; and (ii) on the thirtieth (30th) day preceding each anniversary of the subscription start date; or (iii) upon request by Tetrate.  Tetrate may audit Licensee’s systems and records if it reasonably suspects there has been a material increase. 
+
+
+12.        Evaluation.  Notwithstanding anything to the contrary herein, if Licensee is using the Software for evaluation purposes then such use is subject to Tetrate’s then current evaluation terms and conditions or other mutually agreed upon terms to govern such evaluation as agreed in an order form.  Evaluations will be in a non-production environment and will not receive support services.
+
+
+13.        Miscellaneous.  Neither this arrangement nor the licenses granted hereunder are assignable or transferable by Licensee (and any attempt to do so shall be void).  Tetrate may freely assign, delegate, license and/or transfer this Agreement, in whole or in part, without consent. This Agreement shall be deemed to have been made in, and shall be construed pursuant to the laws of the State of California and the United States without regard to conflicts of laws provisions thereof, and without regard to the United Nations Convention on the International Sale of Goods or the Uniform Computer Information Transactions Act.  Subject to the foregoing, the provisions hereof are for the benefit of the parties only and not for any other person or entity.  Any notice, report, approval, authorization, agreement or consent required or permitted hereunder shall be in writing; notices shall be sent to the address the applicable party has or may provide by written notice or, if there is no such address, the most recent address the party giving notice can locate using reasonable efforts. No failure or delay in exercising any right hereunder will operate as a waiver thereof, nor will any partial exercise of any right or power hereunder preclude further exercise. If any provision shall be adjudged by any court of competent jurisdiction to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that this arrangement shall otherwise remain in full force and effect and enforceable. This is the complete and exclusive statement of the mutual understanding of the parties with respect to the license granted herein and supersedes and cancels all previous written and oral agreements and communications relating to such license and any waivers or amendments shall be effective only if executed  in writing by Tetrate; however, any pre-printed or standard terms of any purchase order, confirmation, or similar form, unless signed by Tetrate after the effectiveness hereof, shall have no force or effect.  The substantially prevailing party in any action to enforce this agreement will be entitled to recover its attorney’s fees and costs in connection with such action. 
+
+
+Tetrate.io, Inc. End User License Agreement (Rev. 1019)                                                                                      Page  of 3
\ No newline at end of file

README.md

-# <application name>
+# Tetrate TSB - tsboperator-server
 
-Project template for all Iron Bank container repositories.
+For TSB related inquiries - https://www.tetrate.io/
\ No newline at end of file

hardening_manifest.yaml

+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "tetrate/tsb/tsboperator-server"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dso.mil
+tags:
+- "1.1.0"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+  BUILD_IMAGE: google/golang/golang-1.14
+  BUILD_TAG: "1.14.15"
+
+# Docker image labels
+labels:
+  # Name of the image
+  org.opencontainers.image.title: "tsboperator-server"
+  # Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "Tetrate TSB operator"
+  # License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "Tetrate License"
+  # URL to find more information on the image
+  org.opencontainers.image.url: "https://tetrate.io"
+  # Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "Tetrate"
+  # Authoritative version of the software
+  org.opencontainers.image.version: "1.1.0"
+  # Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "tetrate,tsb"
+  # This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "commercial"
+  # Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "tsb"
+
+resources:
+  - auth:
+      region: us-east-1
+      id: tetrate-credential
+    url: "s3://tetrate-buildfiles/tsb-src-files-1.1.0-e7507582d.tar.gz"
+    filename: "tsb-src-files.tar.gz"
+    validation:
+      type: "sha256"
+      value: "6e43bffa04eb1c00a0d8eb09b70d0d3e6fe8b57541cdae5f38cfe281dca0bfd6"
+
+# List of project maintainers
+maintainers:
+- name: "Nick Nellis"
+  username: "nick_tetrate"
+  email: "nick@tetrate.io"