Add support for linux/ppc64le (UBI only) (#1325)

* VAULT-48280 ppc64le image push to icr and quay

* VAULT-48280 Change log update

* VAULT-48280 Fixed code duplication and reused s390x bock

* VAULT-48280 Split ibm related images as seperate job

Author: vijayavelsekar

.github/workflows/build.yaml

@@ -122,7 +122,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        arch: ["arm64", "amd64", "s390x"]
+        arch: ["arm64", "amd64", "s390x", "ppc64le"]
       fail-fast: true
     steps:
       - name: Checkout
@@ -207,7 +207,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        arch: ["arm64", "amd64", "s390x"]
+        arch: ["arm64", "amd64"]
     env:
       repo: ${{github.event.repository.name}}
       version: ${{needs.get-product-version.outputs.product-version}}
@@ -219,7 +219,6 @@ jobs:
         run: |
           make ci-build-scripts-dir GOARCH="${{ matrix.arch }}"
       - name: Docker Build (Action)
-        if: ${{ matrix.arch != 's390x' }}
         uses: hashicorp/actions-docker-build@v2
         env:
           VERSION: ${{ needs.get-product-version.outputs.product-version }}
@@ -233,21 +232,7 @@ jobs:
             docker.io/hashicorp/${{env.repo}}:${{env.image_tag}}
             public.ecr.aws/hashicorp/${{env.repo}}:${{env.image_tag}}
             icr.io/cpopen/ibm-vault/${{env.repo}}:${{env.image_tag}}
-      - name: Docker Build (Action) s390x
-        if: ${{ matrix.arch == 's390x' }}
-        uses: hashicorp/actions-docker-build@v2
-        env:
-          VERSION: ${{ needs.get-product-version.outputs.product-version }}
-          GO_VERSION: ${{ needs.build-pre-checks.outputs.go-version }}
-        with:
-          version: ${{env.version}}
-          target: release-ubi
-          arch: ${{matrix.arch}}
-          redhat_tag: quay.io/redhat-isv-containers/64b072322e2773c28d30d988:${{env.image_tag}}
-          tags: |
-            icr.io/cpopen/ibm-vault/${{env.repo}}:${{env.image_tag}}
       - name: Check binary version in container ${{ matrix.arch }}
-        if: ${{ matrix.arch != 's390x' }}
         shell: bash
         run: |
           version_output=$(docker run --platform linux/${{matrix.arch}} hashicorp/${{env.repo}}:${{env.image_tag}} --version --output=json)
@@ -259,6 +244,39 @@ jobs:
             exit 1
           fi
 
+  build-docker-ubi-ibm:
+    name: UBI IBM ${{ matrix.arch }} build
+    needs:
+      - get-product-version
+      - build-pre-checks
+      - build
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        arch: ["s390x", "ppc64le"]
+    env:
+      repo: ${{github.event.repository.name}}
+      version: ${{needs.get-product-version.outputs.product-version}}
+      image_tag: ${{needs.get-product-version.outputs.product-version}}-ubi
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Setup scripts directory
+        shell: bash
+        run: |
+          make ci-build-scripts-dir GOARCH="${{ matrix.arch }}"
+      - name: Docker Build (Action)
+        uses: hashicorp/actions-docker-build@v2
+        env:
+          VERSION: ${{ needs.get-product-version.outputs.product-version }}
+          GO_VERSION: ${{ needs.build-pre-checks.outputs.go-version }}
+        with:
+          version: ${{env.version}}
+          target: release-ubi
+          arch: ${{matrix.arch}}
+          redhat_tag: quay.io/redhat-isv-containers/64b072322e2773c28d30d988:${{env.image_tag}}
+          tags: |
+            icr.io/cpopen/ibm-vault/${{env.repo}}:${{env.image_tag}}
+
   chart-upgrade-tests:
     runs-on: ubuntu-latest
     needs:
@@ -452,6 +470,7 @@ jobs:
       - build
       - build-docker
       - build-docker-ubi
+      - build-docker-ubi-ibm
       - chart-upgrade-tests
       - unit-tests
       - latest-vault

.release/vault-secrets-operator-artifacts.hcl

@@ -7,15 +7,18 @@ artifacts {
     "vault-secrets-operator_${version}_linux_amd64.zip",
     "vault-secrets-operator_${version}_linux_arm64.zip",
     "vault-secrets-operator_${version}_linux_s390x.zip",
+    "vault-secrets-operator_${version}_linux_ppc64le.zip",
   ]
   container = [
     "vault-secrets-operator_release-default_linux_amd64_${version}_${commit_sha}.docker.tar",
     "vault-secrets-operator_release-default_linux_arm64_${version}_${commit_sha}.docker.tar",
     "vault-secrets-operator_release-ubi_linux_amd64_${version}_${commit_sha}.docker.redhat.tar",
     "vault-secrets-operator_release-ubi_linux_arm64_${version}_${commit_sha}.docker.redhat.tar",
     "vault-secrets-operator_release-ubi_linux_s390x_${version}_${commit_sha}.docker.redhat.tar",
+    "vault-secrets-operator_release-ubi_linux_ppc64le_${version}_${commit_sha}.docker.redhat.tar",
     "vault-secrets-operator_release-ubi_linux_amd64_${version}_${commit_sha}.docker.tar",
     "vault-secrets-operator_release-ubi_linux_arm64_${version}_${commit_sha}.docker.tar",
     "vault-secrets-operator_release-ubi_linux_s390x_${version}_${commit_sha}.docker.tar",
+    "vault-secrets-operator_release-ubi_linux_ppc64le_${version}_${commit_sha}.docker.tar",
   ]
 }

CHANGELOG.md

@@ -1,3 +1,8 @@
+## Unreleased
+
+Build:
+* Add `ppc64le` (IBM Power) architecture support: build and publish UBI-based images to `icr.io/cpopen/ibm-vault` and `quay.io/redhat-isv-containers` ([#1325](https://github.com/hashicorp/vault-secrets-operator/pull/1325))
+
 ## 1.5.0 (July 23rd, 2026)
 
 BREAKING CHANGES: