From ae3dcbb9fb90d61cbe6ace65d23bb045d4dd85f4 Mon Sep 17 00:00:00 2001 From: Mhamad Chamseddin Date: Wed, 26 Aug 2026 11:34:45 -0600 Subject: [PATCH] Migrate runtime base image to PQC variant Update runtime base image from ubi9/ubi-minimal to: registry.redhat.io/ubi9/ubi-minimal-pqc@sha256:8a842ac769de709143e4edeace516f2008dfdc431b64670ad3353fa323b44736 This migration ensures Post-Quantum Cryptography (PQC) support for RHOAI main components. Co-Authored-By: Claude Sonnet 4.5 --- argo-argoexec/Dockerfile.konflux | 2 +- argo-workflowcontroller/Dockerfile.konflux | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/argo-argoexec/Dockerfile.konflux b/argo-argoexec/Dockerfile.konflux index 6bb143e477c8..7b27d64b4616 100644 --- a/argo-argoexec/Dockerfile.konflux +++ b/argo-argoexec/Dockerfile.konflux @@ -24,7 +24,7 @@ RUN git config --global --add safe.directory /workspace RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache/go-build GIT_COMMIT=${GIT_COMMIT} GIT_TAG=${GIT_TAG} GIT_TREE_STATE=${GIT_TREE_STATE} CGO_ENABLED=0 GOTOOLCHAIN=local GOFIPS140=v1.0.0 go build -tags no_openssl -ldflags '-extldflags -static' -v -o dist/argoexec ./cmd/argoexec #################################################################################################### -FROM registry.redhat.io/ubi9/ubi-minimal@sha256:580752f96d36c4132bffd30f9c34865bf4bd87f6aa161c969d117f21732e50f7 AS workflow-controller +FROM registry.redhat.io/ubi9/ubi-minimal-pqc@sha256:8a842ac769de709143e4edeace516f2008dfdc431b64670ad3353fa323b44736 AS workflow-controller ARG CI_CONTAINER_VERSION diff --git a/argo-workflowcontroller/Dockerfile.konflux b/argo-workflowcontroller/Dockerfile.konflux index 0da01d07e52e..9bed88fc8555 100644 --- a/argo-workflowcontroller/Dockerfile.konflux +++ b/argo-workflowcontroller/Dockerfile.konflux @@ -25,7 +25,7 @@ RUN git config --global --add safe.directory /workspace RUN --mount=type=cache,target=/go/pkg/mod --mount=type=cache,target=/root/.cache/go-build GIT_COMMIT=${GIT_COMMIT} GIT_TAG=${GIT_TAG} GIT_TREE_STATE=${GIT_TREE_STATE} GOTOOLCHAIN=local CGO_ENABLED=0 GOFIPS140=v1.0.0 go build -tags no_openssl -v -o dist/workflow-controller ./cmd/workflow-controller #################################################################################################### -FROM registry.redhat.io/ubi9/ubi-minimal@sha256:580752f96d36c4132bffd30f9c34865bf4bd87f6aa161c969d117f21732e50f7 AS workflow-controller +FROM registry.redhat.io/ubi9/ubi-minimal-pqc@sha256:8a842ac769de709143e4edeace516f2008dfdc431b64670ad3353fa323b44736 AS workflow-controller ARG CI_CONTAINER_VERSION