Skip to content

OCPBUGS-87353: Updating openshift-enterprise-console-container image to be consistent with ART for 5.0 #16558

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
openshift-bot wants to merge 1 commit into
base: main
Choose a base branch
from
+3 −3
Open

OCPBUGS-87353: Updating openshift-enterprise-console-container image to be consistent with ART for 5.0 #16558

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
##################################################
#
# go backend build
FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.25-openshift-4.22 AS gobuilder
FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.26-openshift-5.0 AS gobuilder
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot Jun 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

Use approved Red Hat base image source for all modified stages.

At Dockerfile Line 4, Line 13, and Line 26, the updated FROM images use registry.ci.openshift.org/..., but the container policy requires base images from catalog.redhat.com (UBI minimal or distroless). Please switch these stage bases to approved catalog-backed images while keeping the same functional toolchain/runtime targets.

As per coding guidelines, "Base image: UBI minimal or distroless from catalog.redhat.com".

Also applies to: 13-13, 26-26

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@Dockerfile` at line 4, Replace any FROM lines that reference
registry.ci.openshift.org with the approved catalog.redhat.com UBI minimal or
distroless images that provide the same toolchain/runtime (e.g., use a
catalog.redhat.com UBI image that matches golang 1.26 for the gobuilder stage).
Update the three build stage bases (the gobuilder stage and the two other FROM
stages introduced at lines 13 and 26) to use equivalent catalog.redhat.com UBI
minimal or distroless images while keeping the same functionality and tool
versions; ensure stage names like "gobuilder" remain unchanged and that any
downstream steps still work with the new base images.

Source: Coding guidelines

RUN mkdir -p /go/src/github.com/openshift/console/
ADD . /go/src/github.com/openshift/console/
WORKDIR /go/src/github.com/openshift/console/
Expand All @@ -10,7 +10,7 @@ RUN ./build-backend.sh
##################################################
#
# nodejs frontend build
FROM registry.ci.openshift.org/ocp/builder:rhel-9-base-nodejs-openshift-4.22 AS nodebuilder
FROM registry.ci.openshift.org/ocp/builder:rhel-9-base-nodejs-openshift-5.0 AS nodebuilder

ADD . .
USER 0
Expand All @@ -23,7 +23,7 @@ RUN container-entrypoint ./build-frontend.sh
##################################################
#
# actual base image for final product
FROM registry.ci.openshift.org/ocp/4.22:base-rhel9
FROM registry.ci.openshift.org/ocp/5.0:base-rhel9
RUN mkdir -p /opt/bridge/bin
COPY --from=gobuilder /go/src/github.com/openshift/console/bin/bridge /opt/bridge/bin
COPY --from=nodebuilder /opt/app-root/src/frontend/public/dist /opt/bridge/static
Expand Down