Skip to content

Conversation

@grzpiotrowski
Copy link

@grzpiotrowski grzpiotrowski commented Jul 2, 2025

Change RHEL8 builder and base image to UBI9.

UBI9 enables to retain FIPS compliance as well and it is the image that is going to be used for the Konflux built component.

@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 2, 2025
@openshift-ci openshift-ci bot requested review from Miciah and rohara July 2, 2025 11:19
@grzpiotrowski
Copy link
Author

Konflux pipeline failed because of the Dockerfile drift. I'll need to update that.

@grzpiotrowski grzpiotrowski force-pushed the update-base-image-rhel9 branch from bc48e81 to 7552e16 Compare July 3, 2025 10:42
@grzpiotrowski
Copy link
Author

/retitle OCPBUGS-46442: UPSTREAM: : Use UBI9 for base and builder openshift images

@openshift-ci openshift-ci bot changed the title [WIP] UPSTREAM: <carry>: Use RHEL9 for base and building openshift images OCPBUGS-46442: UPSTREAM: <carry>: Use UBI9 for base and builder openshift images Jul 3, 2025
@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jul 3, 2025
@openshift-ci-robot openshift-ci-robot added jira/severity-moderate Referenced Jira bug's severity is moderate for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Jul 3, 2025
@openshift-ci-robot
Copy link

@grzpiotrowski: This pull request references Jira Issue OCPBUGS-46442, which is invalid:

  • expected the bug to target the "4.20.0" version, but no target version was set

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

In response to this:

Change RHEL version to RHEL9 for building and base images.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@grzpiotrowski
Copy link
Author

/jira refresh

@openshift-ci-robot openshift-ci-robot added jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. and removed jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Jul 3, 2025
@openshift-ci-robot
Copy link

@grzpiotrowski: This pull request references Jira Issue OCPBUGS-46442, which is valid. The bug has been moved to the POST state.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (4.20.0) matches configured target version for branch (4.20.0)
  • bug is in the state ASSIGNED, which is one of the valid states (NEW, ASSIGNED, POST)

Requesting review from QA contact:
/cc @ShudiLi

In response to this:

/jira refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested a review from ShudiLi July 3, 2025 10:58
@openshift-ci-robot
Copy link

@grzpiotrowski: This pull request references Jira Issue OCPBUGS-46442, which is valid.

3 validation(s) were run on this bug
  • bug is open, matching expected state (open)
  • bug target version (4.20.0) matches configured target version for branch (4.20.0)
  • bug is in the state POST, which is one of the valid states (NEW, ASSIGNED, POST)

Requesting review from QA contact:
/cc @ShudiLi

In response to this:

Change RHEL8 builder and base image to UBI9.

UBI9 enables to retain FIPS compliance as well and it is the image that is going to be used for the Konflux built component.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@grzpiotrowski
Copy link
Author

sast-coverity-check failed due to a parsing error in the Containerfile which is addressed as part of #45.
It is not relevant here.

@alebedev87
Copy link

/retest

@grzpiotrowski
Copy link
Author

I think I'd need to rebase to have the fix from #45 to the Containerfile, for the Konflux pipeline to pass.

This commit fixes OCPBUGS-46442
https://issues.redhat.com//browse/OCPBUGS-46442

* Dockerfile.openshift:
  Change builder image from OpenShift RHEL8 to RHEL9 builder.
  Change runtime image from RHEL8.6 ELS to UBI9 base image.
* drift-cache/Dockerfile.openshift: Update drift cache Dockerfile.
* .ci-operator.yaml: Update the image tag accordingly.
@grzpiotrowski grzpiotrowski force-pushed the update-base-image-rhel9 branch from 22059b2 to b7501a1 Compare July 9, 2025 22:36
@grzpiotrowski
Copy link
Author

Misclicked in Github 🙄 Properly rebased now to include the fix for the Containerfile and let the Konflux tests pass.

@openshift-ci
Copy link

openshift-ci bot commented Jul 9, 2025

@grzpiotrowski: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@alebedev87
Copy link

/lgtm
/approve

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jul 10, 2025
@openshift-ci
Copy link

openshift-ci bot commented Jul 10, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: alebedev87

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 10, 2025
@openshift-merge-bot openshift-merge-bot bot merged commit bd66227 into openshift:main Jul 10, 2025
5 checks passed
@openshift-ci-robot
Copy link

@grzpiotrowski: Jira Issue OCPBUGS-46442: All pull requests linked via external trackers have merged:

Jira Issue OCPBUGS-46442 has been moved to the MODIFIED state.

In response to this:

Change RHEL8 builder and base image to UBI9.

UBI9 enables to retain FIPS compliance as well and it is the image that is going to be used for the Konflux built component.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/severity-moderate Referenced Jira bug's severity is moderate for the branch this PR is targeting. jira/valid-bug Indicates that a referenced Jira bug is valid for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants