FIPS: move to UBI 8.9
Summary
Update images to UBI 8.9
This matches our current UBI base image version used in CNG (related MR).
Closes #15
Previous update: !14 (merged)
Test plan
Test images in an environment:
Images from job: https://gitlab.com/gitlab-org/cloud-native/charts/gitlab-ingress-nginx/-/jobs/6235655348:
-
UBI: registry.gitlab.com/gitlab-org/cloud-native/charts/gitlab-ingress-nginx/staging/controller:e0d72175-ubi8@sha256:9dc3b73d7fa845a2b2279985f525bbc01985419f605e15509cab7b45a2c93930
-
FIPS: registry.gitlab.com/gitlab-org/cloud-native/charts/gitlab-ingress-nginx/staging/controller:e0d72175-fips@sha256:d8f25a50d236d7139cb1e83738b83f56fd7ab3de0d1dc76c012e8adb92d42fc1
Steps taken in each scenario:
- Confirm Ingress objects are picked up by NGINX.
- Log in.
- Create a project.
- Edit a file and push the change.
- Create an issue with an image.
UBI
$ cat build/test.values.yaml
nginx-ingress:
controller:
image:
repository: registry.gitlab.com/gitlab-org/cloud-native/charts/gitlab-ingress-nginx/staging/controller
tag: e0d72175-ubi8
digest: sha256:9dc3b73d7fa845a2b2279985f525bbc01985419f605e15509cab7b45a2c93930
$ kubectl get ingress
NAME CLASS HOSTS ADDRESS PORTS AGE
gitlab-kas gitlab-nginx kas.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 9m7s
gitlab-minio gitlab-nginx minio.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 9m7s
gitlab-registry gitlab-nginx registry.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 9m7s
gitlab-webservice-default gitlab-nginx gitlab.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 9m7s
FIPS
$ cat build/test.values.yaml
nginx-ingress:
controller:
image:
repository: registry.gitlab.com/gitlab-org/cloud-native/charts/gitlab-ingress-nginx/staging/controller
tag: e0d72175-fips
digest: sha256:d8f25a50d236d7139cb1e83738b83f56fd7ab3de0d1dc76c012e8adb92d42fc1
$ kubectl get ingress
NAME CLASS HOSTS ADDRESS PORTS AGE
gitlab-kas gitlab-nginx kas.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 15m
gitlab-minio gitlab-nginx minio.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 15m
gitlab-registry gitlab-nginx registry.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 15m
gitlab-webservice-default gitlab-nginx gitlab.gke.mnielsen-sandbox.com 34.123.173.205 80, 443 15m
Edited by Mitchell Nielsen