Using UBI-based images

[kottoson-bah]

PR Details

Updates a majority of the images we use to use Red Hat's Universal Base Image

Description

The following images have been updated:

• jenkins-agent
• jenkins-master
• openshift_helm
• sonarqube
• sonar-scanner
• zap

We expect Red Hat's UBI to have fewer security vulnerabilities compared to typical base images. Switching to a RHEL-based image also allows us to use OSCAP to perform security scans on these images.

How Has This Been Tested

• The images can be built using a local Docker engine or w/ an Openshift Build
• The images were tested with a simple Jenkins pipeline (link may not work once PR is closed)
  • The images that were used in the pipeline ran successfully and performed their expected function (i.e. the sonar-scanner image sent results to the sonarqube server)
  • The images that performed other functions (i.e. jenkins-*, sonarqube) appeared to work the same as before.

Types of Changes

• Docs change / refactoring / dependency upgrade
• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist

• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• All new and existing tests passed.
• I have updated the Change Log appropriately.