Skip to content

add Containerfile.art for ART build pipeline#3

Open
shruti-rh wants to merge 2 commits into
openshift:release-1.1from
shruti-rh:release-1.1
Open

add Containerfile.art for ART build pipeline#3
shruti-rh wants to merge 2 commits into
openshift:release-1.1from
shruti-rh:release-1.1

Conversation

@shruti-rh

@shruti-rh shruti-rh commented Jun 11, 2026

Copy link
Copy Markdown

Problem Statement

The ART (Automated Release Tooling) team needs to build external-secrets images through its
Konflux-based layered products pipeline. ART builds require a dedicated Containerfile.art that uses ART's builder images, base images, and LABEL conventions.

Related Issue

Part of ART-14816 (Onboard OAP operators to ART) and ART-14821 (Onboard External Secrets Operator to ocp-build-data).

Proposed Changes

Add Containerfile.art to the release-1.1 branch. This Containerfile:

  • Uses ART's golang builder
    (brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25)
  • Uses ubi9/ubi-minimal as the runtime base image
  • Includes required Red Hat container LABELs (com.redhat.component, name, etc.)
  • Builds with FIPS-compliant flags (strictfipsruntime,openssl)
  • Exists alongside the existing Dockerfile without modifying it

Checklist

  • I have read the contribution
    guidelines
  • All commits are signed with git commit --signoff
  • My changes have reasonable test coverage
  • All tests pass with make test
  • I ensured my PR is ready for review with make reviewable

fbladilo added 2 commits April 7, 2026 15:27
Signed-off-by: Franco Bladilo <fbladilo@redhat.com>

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants