App Framework: Install Splunkbase app failure

[satellite-no]

Please select the type of request

Bug

Tell us more

Describe the request

• When installing a net new app i get a failure talking about LIBARCHIVE.xattr.com.apple.quarantine. It appears to be how the app was packed on a mac. But this only started after upgrading to version 2.20 of the operator.

2023-02-27T15:50:19.006570897Z	ERROR	localScopePlaybookContext.runPlaybook	app package installation error	{"controller": "standalone", "controllerGroup": "enterprise.splunk.com", "controllerKind": "Standalone", "Standalone": {"name":"dw-mdre-lic-aio","namespace":"dw-mdre-lic"}, "namespace": "dw-mdre-lic", "name": "dw-mdre-lic-aio", "reconcileID": "255f45b9-fcb8-473c-aa05-71d9fcbcde4b", "name": "dw-mdre-lic-aio", "namespace": "dw-mdre-lic", "pod": "splunk-dw-mdre-lic-aio-standalone-0", "app name": "intsights-application-for-splunk.tgz", "error": "could not get installed app name stdOut: IntSightsAppForSplunk\n, stdErr: tar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.quarantine'\ntar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.macl'\ntar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.quarantine'\ntar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.quarantine'\ntar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.quarantine'\ntar: Ignoring unknown extended header keyword 'LIBARCHIVE.xattr.com.apple.quarantine'\n, command: tar tf /operator-staging/appframework/aioApps/intsights-application-for-splunk.tgz_0ffd5bacc076e74c613f847861b5d192-2|head -1|cut -d/ -f1"}
github.com/splunk/splunk-operator/pkg/splunk/enterprise.(*localScopePlaybookContext).runPlaybook
	/workspace/pkg/splunk/enterprise/afwscheduler.go:857

Expected behavior

• App to be installed.

Splunk setup on K8S

• Splunk is deployed in AWS EKS, Splunk instances are standalone.

Reproduction/Testing steps

• Install intsights app from Splunk base using the splunk-operator.

K8s environment

• AWS EKS

Proposed changes(optional)

• Proposed change, if any.

K8s collector data(optional)

• Please provide data collected from the K8s collectors, if any.

Additional context(optional)

• Add any other context about the problem here.