update base images in dockerfile and go unit test

securesign · Nov 28, 2024 · 66117d8 · 66117d8
1 parent a89b7da
commit 66117d8
Show file tree

Hide file tree

Showing 19 changed files with 80 additions and 8 deletions.
diff --git a/.tekton/createctconfig-pull-request.yaml b/.tekton/createctconfig-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/createctconfig-push.yaml b/.tekton/createctconfig-push.yaml
@@ -37,6 +37,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -58,6 +60,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/ctlog-managectroots-pull-request.yaml b/.tekton/ctlog-managectroots-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/ctlog-managectroots-push.yaml b/.tekton/ctlog-managectroots-push.yaml
@@ -37,6 +37,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -58,6 +60,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/fulcio-createcerts-pull-request.yaml b/.tekton/fulcio-createcerts-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/fulcio-createcerts-push.yaml b/.tekton/fulcio-createcerts-push.yaml
@@ -37,6 +37,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -58,6 +60,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/trillian-createdb-pull-request.yaml b/.tekton/trillian-createdb-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/trillian-createdb-push.yaml b/.tekton/trillian-createdb-push.yaml
@@ -37,6 +37,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -58,6 +60,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/trillian-createtree-pull-request.yaml b/.tekton/trillian-createtree-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/trillian-createtree-push.yaml b/.tekton/trillian-createtree-push.yaml
@@ -37,6 +37,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -58,6 +60,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/tuf-server-pull-request.yaml b/.tekton/tuf-server-pull-request.yaml
@@ -40,6 +40,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -61,6 +63,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/.tekton/tuf-server-push.yaml b/.tekton/tuf-server-push.yaml
@@ -38,6 +38,8 @@ spec:
     value: true
   - name: go_test_command
     value: go test $(go list ./... | grep -v 'third_party/VENDOR-LICENSE/github.com/letsencrypt/boulder/goodkey')
+  - name: go_base_image
+    value: brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7
   taskRunSpecs:
     - pipelineTaskName: prefetch-dependencies
       stepSpecs:
@@ -59,6 +61,10 @@ spec:
             limits:
               cpu: '3'
               memory: 3Gi
+      serviceAccountName: appstudio-pipeline
+      podTemplate:
+        imagePullSecrets:
+        - name: brew-registry-pull-secret
   pipelineRef:
     resolver: git
     params:

diff --git a/Dockerfile.createctconfig.rh b/Dockerfile.createctconfig.rh
@@ -1,5 +1,5 @@
 # Build the createctconfig binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /createctconfig
 RUN git config --global --add safe.directory /createctconfig
 

diff --git a/Dockerfile.ctlog-managectroots.rh b/Dockerfile.ctlog-managectroots.rh
@@ -1,5 +1,5 @@
 # Build the managectroots binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /ctlog-managectroots
 RUN git config --global --add safe.directory /ctlog-managectroots
 

diff --git a/Dockerfile.ctlog-verifyfulcio.rh b/Dockerfile.ctlog-verifyfulcio.rh
@@ -1,5 +1,5 @@
 # Build the verifyfulcio binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /ctlog-verifyfulcio
 RUN git config --global --add safe.directory /ctlog-verifyfulcio
 

diff --git a/Dockerfile.fulcio-createcerts.rh b/Dockerfile.fulcio-createcerts.rh
@@ -1,5 +1,5 @@
 # Build the createcerts binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /createcerts
 RUN git config --global --add safe.directory /createcerts
 

diff --git a/Dockerfile.trillian-createdb.rh b/Dockerfile.trillian-createdb.rh
@@ -1,5 +1,5 @@
 # Build the createdb binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /createdb
 RUN git config --global --add safe.directory /createdb
 

diff --git a/Dockerfile.trillian-createtree.rh b/Dockerfile.trillian-createtree.rh
@@ -1,5 +1,5 @@
 # Build the createtree binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /createtree
 RUN git config --global --add safe.directory /createtree
 

diff --git a/Dockerfile.tuf-server.rh b/Dockerfile.tuf-server.rh
@@ -1,5 +1,5 @@
 # Build the tuf server binary
-FROM registry.redhat.io/rhel9/go-toolset@sha256:04be9e51263ab743cbcb778921b23527a3e35d493136fd353a90670d84ac457f AS build-env
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder@sha256:b4242f87696cf168b1fc733a969ef60ee53716dd3c551b02303d76f9d42a53d7 AS build-env
 WORKDIR /tuf-server
 RUN git config --global --add safe.directory /tuf-server
 
@@ -9,7 +9,7 @@ RUN go mod vendor
 RUN make build-tuf-server
 
 # Install server
-FROM registry.access.redhat.com/ubi9-minimal@sha256:1b6d711648229a1c987f39cfdfccaebe2bd92d0b5d8caa5dbaa5234a9278a0b2
+FROM registry.access.redhat.com/ubi9-minimal@sha256:8b6978d555746877c73f52375f60fd7b6fd27d6aca000eaed27d0995303c13de
 COPY --from=build-env /tuf-server/server /usr/local/bin/tuf-server
 RUN chown root:0 /usr/local/bin/tuf-server && chmod g+wx /usr/local/bin/tuf-server