Skip to content

Commit 7a80288

Browse files
committed
fix: standardize image references in Konflux container files
Add both SHA and tags to image references. Some images were updated to new versions. Signed-off-by: Edgar Hernández <23639005+israel-hdez@users.noreply.github.com>
1 parent 50337bf commit 7a80288

7 files changed

Lines changed: 14 additions & 14 deletions

Dockerfiles/agent.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the inference-agent binary
2-
FROM registry.redhat.io/ubi9/go-toolset:1.25 AS builder
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS builder
33

44
# These built-in args are defined in the global scope, and are not automatically accessible within build stages or RUN commands.
55
# To expose these arguments inside the build stage, we need to redefine it without a value.
@@ -21,7 +21,7 @@ USER root
2121
RUN CGO_ENABLED=1 GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOFLAGS=-mod=mod GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -a -o agent ./cmd/agent
2222

2323
# Copy the inference-agent into a thin image
24-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
24+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
2525

2626
RUN microdnf install -y --disablerepo=* --enablerepo=ubi-9-baseos-rpms shadow-utils && \
2727
microdnf clean all && \

Dockerfiles/controller.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the manager binary
2-
FROM registry.redhat.io/ubi9/go-toolset:1.25 AS builder
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS builder
33

44
# These built-in args are defined in the global scope, and are not automatically accessible within build stages or RUN commands.
55
# To expose these arguments inside the build stage, we need to redefine it without a value.
@@ -22,7 +22,7 @@ USER root
2222
RUN CGO_ENABLED=1 GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOFLAGS=-mod=mod GOEXPERIMENT=strictfipsruntime go build -tags "${GOTAGS},strictfipsruntime" -a -o manager ./cmd/manager
2323

2424
# Use distroless as minimal base image to package the manager binary
25-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
25+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
2626

2727
RUN microdnf install -y --disablerepo=* --enablerepo=ubi-9-baseos-rpms shadow-utils && \
2828
microdnf clean all && \

Dockerfiles/llmisvc-controller.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the manager binary
2-
FROM registry.redhat.io/ubi9/go-toolset:1.25 AS builder
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS builder
33

44
# These built-in args are defined in the global scope, and are not automatically accessible within build stages or RUN commands.
55
# To expose these arguments inside the build stage, we need to redefine it without a value.
@@ -24,7 +24,7 @@ RUN CGO_ENABLED=1 GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOEXPERIMENT=strictfipsr
2424
COPY LICENSE LICENSE
2525

2626
# Copy the controller-manager into a thin image
27-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
27+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
2828
COPY --from=builder /go/src/github.com/kserve/kserve/manager /
2929
USER 1000:1000
3030

Dockerfiles/localmodel-agent.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the manager binary
2-
FROM registry.redhat.io/ubi9/go-toolset@sha256:d637b9dfccb16623f19b95c43fe5a65b20b722e62753c4445c5d02f9e40b807d AS deps
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS deps
33
# distro: UBI go-toolset does not add GOPATH/bin to PATH
44
ENV PATH="$PATH:/opt/app-root/src/go/bin"
55

@@ -36,7 +36,7 @@ COPY pkg/ pkg/
3636
COPY LICENSE LICENSE
3737

3838
# Copy the controller-manager into a thin image
39-
FROM registry.redhat.io/ubi9/ubi-minimal@sha256:175bafd5bc7893540ed6234bb979acfe3574fd6570e6762bbc527c757f854cea
39+
FROM registry.redhat.io/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
4040

4141
RUN microdnf install -y --disablerepo=* --enablerepo=ubi-9-baseos-rpms shadow-utils && \
4242
microdnf clean all && \

Dockerfiles/localmodel.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the manager binary
2-
FROM registry.redhat.io/ubi9/go-toolset@sha256:d637b9dfccb16623f19b95c43fe5a65b20b722e62753c4445c5d02f9e40b807d AS deps
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS deps
33
# distro: UBI go-toolset does not add GOPATH/bin to PATH
44
ENV PATH="$PATH:/opt/app-root/src/go/bin"
55

@@ -35,7 +35,7 @@ COPY pkg/ pkg/
3535
COPY LICENSE LICENSE
3636

3737
# Copy the controller-manager into a thin image
38-
FROM registry.redhat.io/ubi9/ubi-minimal@sha256:175bafd5bc7893540ed6234bb979acfe3574fd6570e6762bbc527c757f854cea
38+
FROM registry.redhat.io/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
3939

4040
RUN microdnf install -y --disablerepo=* --enablerepo=ubi-9-baseos-rpms shadow-utils && \
4141
microdnf clean all && \

Dockerfiles/router.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# Build the inference-router binary
2-
FROM registry.redhat.io/ubi9/go-toolset:1.25 AS builder
2+
FROM registry.redhat.io/ubi9/go-toolset:1.25@sha256:75ecb48dfaec6655bd589091902e3b9328c300befba34cb06fc5e7323099e17d AS builder
33

44
# These built-in args are defined in the global scope, and are not automatically accessible within build stages or RUN commands.
55
# To expose these arguments inside the build stage, we need to redefine it without a value.
@@ -21,7 +21,7 @@ USER root
2121
RUN CGO_ENABLED=1 GOOS=${TARGETOS} GOARCH=${TARGETARCH} GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -a -o router ./cmd/router
2222

2323
# Copy the inference-router into a thin image
24-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
24+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00
2525
RUN microdnf install -y --disablerepo=* --enablerepo=ubi-9-baseos-rpms shadow-utils && \
2626
microdnf clean all && \
2727
useradd kserve -m -u 1000

Dockerfiles/storage-initializer.Dockerfile.konflux

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
ARG VENV_PATH=/prod_venv
22

3-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest AS builder
3+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00 AS builder
44

55
# Install Python and dependencies
66
RUN microdnf install -y \
@@ -51,7 +51,7 @@ RUN uv pip install --no-cache krbcontext==0.10 hdfs~=2.6.0 requests-kerberos==0.
5151

5252
########################################################################
5353
# Runtime
54-
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest AS prod
54+
FROM registry.access.redhat.com/ubi9/ubi-minimal:latest@sha256:7d4e47500f28ac3a2bff06c25eff9127ff21048538ae03ce240d57cf756acd00 AS prod
5555

5656
# Activate virtual env
5757
ARG VENV_PATH

0 commit comments

Comments
 (0)