feat: added vault image to TRG 4.06

[tom-rm-meyer-ISST]

Description

The vault image with an image tag lower 1.14.2 are licensed unter MPL2.0 receives security updates by end of this year. For current use this is OK. See this discussion.

This PR closes sig-infra issue 247.

Pre-review checks

Please ensure to do as many of the following checks as possible, before asking for committer review:

• DEPENDENCIES are up-to-date. Dash license tool. Committers can open IP issues for restricted libs.
• Copyright and license header are present on all affected files

[tomaszbarwicki]

hi @tom-rm-meyer-ISST, thanks for creating PR with the vault image proposal. I suggest we first create a draft version with the change of new image so everyone interested can provide feedback before we publish it. Please follow described process: https://eclipse-tractusx.github.io/docs/release

[tom-rm-meyer-ISST]

I reverted the changes to TRG 4.06 and

• moved the changed file to folder trg-0
• added an entry to table trg-0/trg-0.md

Please check, if I got the process right.

If yes, thenI can write to the mailing list. I guess it still is a fast release case, isn't it?

[tomaszbarwicki]

LGTM

Right, seems to be fast case.

[tom-rm-meyer-ISST]

@tomaszbarwicki shall I write the mail with regard to this PR or do we need to merge first so that I can review the draft on https://eclipse-tractusx.github.io/docs/release/trg-0/ ?

[tomaszbarwicki]

@tom-rm-meyer-ISST please merge first and mail afterwards.

[tom-rm-meyer-ISST]

Hey @SebastianBezold, could you please check and merge so that we can ask the others via the mailing list?

[Siegfriedk]

@tom-rm-meyer-ISST Sebastian is on leave. Please fix the conflict and write to me on teams and i will merge it

[tom-rm-meyer-ISST]

Resolved merge conflict. After merging, I'll write to the mailing list. Last time @AngelikaWittek told us to keep holding as we're waiting for updates regarding the licence issue.

[carslen]

Unfortunately there is another merge conflict after merging a different PR. Sorry.

[tom-rm-meyer-ISST]

Unfortunately there is another merge conflict after merging a different PR. Sorry.

resolved

[almadigabor]

I've approved the changes and merged the PR. @tom-rm-meyer-ISST you can send the mail you discussed in the previous comments.

[SebastianBezold]

Hey @almadigabor, I think this was a bit too quick. In my opinion we will never align on HashiCorp Vault as a base image. We do aline on images, that are used for our published app images. Vault is only used (AFAIK) as supporting infrastructure component.

FYI @AngelikaWittek

[almadigabor]

Hey @SebastianBezold! Good point, but it's still draft and up to changes so can be corrected if necessary. I only looked at the comments and was already approved and wasn't merged only because of merge conflicts.