<div dir="ltr">Adding in Hayden for Anchore Support. Hayden - please see below.<div><br></div><div>Thanks,<br>Taylor<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><br>----<br> Taylor Biggs<br> <a href="mailto:taylor@redhat.com" target="_blank">taylor@redhat.com</a><br> <a href="tel:850-449-2220" value="+18504492220" target="_blank">850-449-2220</a><br><br></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 4, 2019 at 11:37 AM Pascal, Jay <<a href="mailto:Jay.Pascal@diligent-us.com">Jay.Pascal@diligent-us.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div dir="ltr" style="font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255);font-family:Calibri,Arial,Helvetica,sans-serif"> <p>I was able to get the scan results for Twistlock. I have also been able to log in to Anchore. However, when I attempt to analyze a repository or tag, Anchore does not appear able to locate it. I have tried various values. I am attempting to analyze the following image.<br> </p> <p><br style="font-size:12pt"> </p> <span style="font-size:12pt"></span><span style="font-size:12pt"></span> <p class="gmail-m_5583795385061930052p1"><span class="gmail-m_5583795385061930052s1" style="font-size:12pt"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"><a href="http://docker-registry-default.apps.cluster.unified-platform.io/aam-ci-cd/develop-misp-app-web:latest" target="_blank">docker-registry-default.apps.cluster.unified-platform.io/aam-ci-cd/develop-misp-app-web:latest</a></span></span></p> <p class="gmail-m_5583795385061930052p1"><span class="gmail-m_5583795385061930052s1"><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><br> </span></p> <div id="gmail-m_5583795385061930052Signature"> <div name="divtagdefaultwrapper"> <div style="background-color:rgb(255,255,255);margin:0px"> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">I have tried docker-registry.default.svc as the registry and aam-ci-cd as the repository. I have tried both the analyze repository and analyze tag options. using docker-registry.default.svc seems to attempt to pull from the registry, but does not find the image.</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt"><br> </span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">It may be the Anchore user does not have privileges to pull from the registry/repository. I don't know which user/service account Anchore attempts to use to pull from the registry in order to grant them privileges.</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt"><br> </span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">v/r,</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt"><br> </span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">Jay L Pascal</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">Senior Systems Engineer</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font face="Times New Roman,serif" color="red"><b>DILIGENT</b></font><font face="Times New Roman,serif" color="black"> </font><font color="black">Consulting Inc.</font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">(O) 210.826.9300</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">(C) 210.827.5323</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">A Service Disabled Veteran Owned Small Business</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">CMMI-DEV Maturity Level 3</span></font></span></font></div> <div style="color:rgb(33,33,33);font-family:"Segoe UI","Segoe WP","Segoe UI WPC",Tahoma,Arial,sans-serif;font-size:15px;margin:0px"> <font face="Calibri,sans-serif" size="3"><span style="font-size:12pt"><font size="2" color="black"><span style="font-size:11pt">ISO 9001:2015 certified</span></font></span></font></div> </div> </div> </div> <div style="color:rgb(33,33,33)"> <hr style="display:inline-block;width:98%"> <div id="gmail-m_5583795385061930052divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Keegan Reap <<a href="mailto:kreap@redhat.com" target="_blank">kreap@redhat.com</a>><br> <b>Sent:</b> Tuesday, December 3, 2019 9:33 AM<br> <b>To:</b> Mark Nissley<br> <b>Cc:</b> Jonathan Hultz; Bubb, Mike; SANCHEZ, MARK GG-13 USAF AFMC AFLCMC/HNCP; Pascal, Jay; <a href="mailto:platformONE@redhat.com" target="_blank">platformONE@redhat.com</a><br> <b>Subject:</b> [PossibleSpam] Re: [Platformone] Rogue One IATT Actions</font> <div> </div> </div> <div> <div dir="ltr">With the added people to the thread, I will go ahead and reiterate these points just in case, for full transparency:<br> <br> <br> Hey Mark & all, <div><br> </div> <div>As far as the first objective, Twistlock has been deployed to the environment and is ready to start scanning, link below. The Twistlock app is locked behind an admin account, so we will need a POC to share the admin account with. As far as Anchore goes, we have it deployed but it seems something is preventing it from coming up successfully, we are currently going to investigate.</div> <div><br> </div> <div><a href="https://cluster.unified-platform.io/console/project/levelup-twistlock/overview" target="_blank">https://cluster.unified-platform.io/console/project/levelup-twistlock/overview</a><br> </div> <div><a href="https://levelup-twistlock.apps.cluster.unified-platform.io/" target="_blank">https://levelup-twistlock.apps.cluster.unified-platform.io/</a><br> </div> <div><br> </div> <div>Thanks,</div> <div>Keegan Reap<br> <br> </div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Tue, Dec 3, 2019 at 9:29 AM Mark Nissley <<a href="mailto:mnissley@redhat.com" target="_blank">mnissley@redhat.com</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div dir="ltr"> <div class="gmail_default" style="font-size:small">Adding some of the UP Nodes Team to this thread. Mike, in a separate thread you noted that you were having trouble with Twistlock. Could you send a name and email address for someone on your team that we can grant access to? That may be you...</div> <div> <div dir="ltr"> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"> <br> </p> <p style="color:rgb(0,0,0);font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"> <font face="trebuchet ms, sans-serif">Mark NISSLEY</font><font color="#000000" style="font-weight:normal;font-family:"trebuchet ms",sans-serif;font-size:10px">,</font><span style="font-weight:normal;font-family:"trebuchet ms",sans-serif;font-size:10px;color:rgb(204,204,204)"> <span style="color:rgb(170,170,170);margin:0px">PMP, CSM, LEAN</span></span><font face="trebuchet ms, sans-serif"><br> </font></p> <p style="font-size:10px;margin:0px 0px 4px;text-transform:uppercase"><font face="trebuchet ms, sans-serif"><font color="#000000">PROGRAM MaNAGER & SR technical Project Manager</font></font></p> <p style="margin:0px;font-size:10px;color:rgb(153,153,153)"><a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank"><font face="trebuchet ms, sans-serif">North American Consulting, Public Sector<br> </font></a></p> <p style="margin:0px 0px 6px"><font face="trebuchet ms, sans-serif"><span style="color:rgb(153,153,153);font-size:10px">M: </span><font color="#0088ce"><span style="font-size:11px">850-530-3234</span></font></font></p> <p style="font-family:overpass,sans-serif;margin:0px 0px 6px"><a href="https://www.redhat.com/" style="font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;font-size:medium" target="_blank"><img width="90" height="auto" src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png"></a><font color="#0088ce"><span style="font-size:11px"><br> </span></font></p> <p style="font-family:overpass,sans-serif;margin:0px 0px 6px"><font color="#cc0000" size="1"><b>Scheduled Training: October 14-18</b></font></p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <br> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Tue, Dec 3, 2019 at 10:25 AM Jonathan Hultz <<a href="mailto:jhultz@redhat.com" target="_blank">jhultz@redhat.com</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div dir="ltr">Mark, <div><br> </div> <div>Here is the results for the initial stig run against one of the UP Node ec2 instances. <a href="https://dccscr.dsop.io/levelup-automation/security/rhel7-stig/issues/1" target="_blank">https://dccscr.dsop.io/levelup-automation/security/rhel7-stig/issues/1</a></div> <div><br> </div> <div>There are several Cat 1 and 2s that are not implemented and the reasoning is in the ticket. Corey is currently working on the Sat role which will also need several stigs disabled to run correctly. </div> <div><br> </div> <div>We are currently waiting for Colleen to rescan the UP Prod host with the stigs applied. </div> <div><br> </div> <div>Cheers, Jon </div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Tue, Dec 3, 2019 at 10:07 AM Mark Nissley <<a href="mailto:mnissley@redhat.com" target="_blank">mnissley@redhat.com</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div dir="ltr"> <div class="gmail_default" style="font-size:small">I am on call with UP Node aka Rogue One. They are getting ready for IATT. Here is the actions that they asked of our team, due COB today: </div> <div class="gmail_default" style="font-size:small"> <ol> <li>They asked if we can utilize Anchore and/or Twistlock to scan their apps and provide a report. They will be glad to do it as well if we want to make the containers available, but they emphasized that the shortest course of action is the best. </li><li>A plan of action for all High and Critical items scan results from Colleen's scan (if hardening scripts will be needed, they must be delivered IATT, 20 December)</li></ol> <div>As this is the highest urgency task on our list right now, we need to be able to assign these tasks to specific people and knock them out. <u><b>The deadline is COB today on both items</b></u>. Who can work with me to make these things happen?</div> </div> <div> <div dir="ltr"> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"> <br> </p> <p style="color:rgb(0,0,0);font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"> <font face="trebuchet ms, sans-serif">Mark NISSLEY</font><font color="#000000" style="font-weight:normal;font-family:"trebuchet ms",sans-serif;font-size:10px">,</font><span style="font-weight:normal;font-family:"trebuchet ms",sans-serif;font-size:10px;color:rgb(204,204,204)"> <span style="color:rgb(170,170,170);margin:0px">PMP, CSM, LEAN</span></span><font face="trebuchet ms, sans-serif"><br> </font></p> <p style="font-size:10px;margin:0px 0px 4px;text-transform:uppercase"><font face="trebuchet ms, sans-serif"><font color="#000000">PROGRAM MaNAGER & SR technical Project Manager</font></font></p> <p style="margin:0px;font-size:10px;color:rgb(153,153,153)"><a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank"><font face="trebuchet ms, sans-serif">North American Consulting, Public Sector<br> </font></a></p> <p style="margin:0px 0px 6px"><font face="trebuchet ms, sans-serif"><span style="color:rgb(153,153,153);font-size:10px">M: </span><font color="#0088ce"><span style="font-size:11px">850-530-3234</span></font></font></p> <p style="font-family:overpass,sans-serif;margin:0px 0px 6px"><a href="https://www.redhat.com/" style="font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;font-size:medium" target="_blank"><img width="90" height="auto" src="https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9ddafd5b2f1836854d7416a/Logo-RedHat-Email.png"></a><font color="#0088ce"><span style="font-size:11px"><br> </span></font></p> <p style="font-family:overpass,sans-serif;margin:0px 0px 6px"><font color="#cc0000" size="1"><b>Scheduled Training: October 14-18</b></font></p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> _______________________________________________<br> platformONE mailing list<br> <a href="mailto:platformONE@redhat.com" target="_blank">platformONE@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/platformone" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/platformone</a><br> </blockquote> </div> <br clear="all"> <div><br> </div> -- <br> <div dir="ltr"> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"> <span>JONATHAN</span> <span>HULTZ</span><span style="color:rgb(170,170,170);font-family:RedHatText,sans-serif">, RHCSA</span></p> <p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:10px;margin:0px 0px 4px;text-transform:uppercase"> <span>SENIOR CONSULTANT</span><span style="color:rgb(170,170,170);margin:0px"></span></p> <p style="font-family:overpass,sans-serif;margin:0px;font-size:10px;color:rgb(153,153,153)"> <a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank">Red Hat <span>Remote US CA</span></a></p> <p style="font-family:overpass,sans-serif;margin:0px 0px 6px;font-size:10px;color:rgb(153,153,153)"> <span style="margin:0px;padding:0px"><a href="mailto:jhultz@redhat.com" style="color:rgb(0,136,206);margin:0px" target="_blank">jhultz@redhat.com</a> </span> <span>M: <a href="tel:609-713-9778" style="color:rgb(0,136,206);font-size:11px;margin:0px" target="_blank">609-713-9778</a> </span></p> <table border="0" style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:medium"> <tbody> <tr> <td width="100px"><a href="https://red.ht/sig" target="_blank"><img width="90" height="auto" src="https://www.redhat.com/files/brand/email/sig-redhat.png"></a></td> </tr> </tbody> </table> </div> </div> </div> </div> </div> </div> </blockquote> </div> _______________________________________________<br> platformONE mailing list<br> <a href="mailto:platformONE@redhat.com" target="_blank">platformONE@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/platformone" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/platformone</a><br> </blockquote> </div> </div> </div> Confidentiality Notice: This e-mail may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient) please contact the sender by reply e-mail and delete all copies of this message. </div> _______________________________________________<br> platformONE mailing list<br> <a href="mailto:platformONE@redhat.com" target="_blank">platformONE@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/platformone" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/platformone</a><br> </blockquote></div>