UPSTREAM: <carry>: Add OpenShift tooling, images, configs and docs

hack/lib/golang.sh

@@ -318,7 +318,7 @@ readonly KUBE_ALL_TARGETS=(
 )
 readonly KUBE_ALL_BINARIES=("${KUBE_ALL_TARGETS[@]##*/}")
 
-readonly KUBE_STATIC_LIBRARIES=()
+readonly KUBE_STATIC_BINARIES=()
 
 # Fully-qualified package names that we want to instrument for coverage information.
 readonly KUBE_COVERAGE_INSTRUMENTED_PACKAGES=(
@@ -348,9 +348,7 @@ kube::golang::is_statically_linked() {
   if [[ -n "${KUBE_CGO_OVERRIDES_LIST:+x}" ]]; then
     for e in "${KUBE_CGO_OVERRIDES_LIST[@]}"; do [[ "${1}" == *"/${e}" ]] && return 1; done;
   fi
-  if [[ -n "${KUBE_STATIC_LIBRARIES:+x}" ]]; then
-    for e in "${KUBE_STATIC_LIBRARIES[@]}"; do [[ "${1}" == *"/${e}" ]] && return 0; done;
-  fi
+  for e in "${KUBE_STATIC_BINARIES[@]}"; do [[ "${1}" == *"/${e}" ]] && return 0; done;
   if [[ -n "${KUBE_STATIC_OVERRIDES_LIST:+x}" ]]; then
     for e in "${KUBE_STATIC_OVERRIDES_LIST[@]}"; do [[ "${1}" == *"/${e}" ]] && return 0; done;
   fi

test/typecheck/main.go

@@ -63,7 +63,9 @@ func newConfig(platform string) *packages.Config {
 		mode = mode | packages.NeedTypesInfo
 	}
 	env := append(os.Environ(),
-		"CGO_ENABLED=1",
+		// OpenShift doesn't build with CGO, since we use host-provided SSL
+		// binaries for FIPS compatibility.
+		// "CGO_ENABLED=1",
 		fmt.Sprintf("GOOS=%s", goos),
 		fmt.Sprintf("GOARCH=%s", goarch))
 	tagstr := "selinux"