[CP 1583] fix(security): bump UBI9 base image from 9.7 to 9.8#596
Merged
spraveenio merged 2 commits intoJul 8, 2026
Conversation
* fix(security): bump UBI9 base image from 9.7 to 9.8 across all Dockerfiles
Update all UBI9 minimal base image references to the latest stable release
(9.8, confirmed via skopeo inspect on registry.access.redhat.com). Also pins
previously untagged/floating references in KMM CoreOS template Dockerfiles
for reproducible builds.
Files updated:
- Dockerfile (operator controller): 9.7 -> 9.8
- internal/utils_container/Dockerfile: 9.7 -> 9.8
- internal/remediation_config_utils_container/Dockerfile: 9.7 -> 9.8
- internal-example/driverSrcImage/Dockerfile.coreos: :latest -> 9.8
- internal/kmmmodule/dockerfiles/DockerfileTemplate.{rpm,srcimg}.coreos: untagged -> 9.8
- internal/kmmmodule/dockerfiles/DockerfileTemplate.coreos.gim: untagged -> 9.8
Co-Authored-By: Claude <noreply@anthropic.com>
* docs: add plan file for UBI9 9.8 base image bump
Plan: docs-internal/knowledge/plans/2026-07-06-ubi9-update.md
Co-Authored-By: Claude <noreply@anthropic.com>
* fix(security): bump Makefile OPERATOR_CONTROLLER_BASE_IMAGE to UBI9 9.8
Makefile was passing ubi-minimal:9.7 as build-arg to docker build,
overriding the Dockerfile ARG default. Update to 9.8 to keep the
build-arg consistent with the Dockerfile change.
Co-Authored-By: Claude <noreply@anthropic.com>
---------
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Praveen Kumar Shanmugam <58961022+spraveenio@users.noreply.github.com>
(cherry picked from commit 7939ce0a8f44408e679ae3ec91aa8cdece15bd66)
Contributor
Author
AI-Assisted Cherry-PickSource PR: #1583 The cherry-pick operation encountered merge conflicts which were resolved automatically using AI assistance. Files with conflicts (resolved by AI):
Original conflict in internal-example/driverSrcImage/Dockerfile.coreos<<<<<<< HEAD
(file deleted)
=======
FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8
(file modified: :latest -> 9.8)
>>>>>>> 7939ce0a (fix(security): bump UBI9 base image from 9.7 to 9.8)Original conflict in internal/remediation_config_utils_container/Dockerfile<<<<<<< HEAD
(file deleted)
=======
FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8
(file modified: 9.7 -> 9.8)
>>>>>>> 7939ce0a (fix(security): bump UBI9 base image from 9.7 to 9.8)Cherry-pick triggered by: ACP-Automation |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
cp of pensando/gpu-operator#1583
Source PR Description (pensando/gpu-operator#1583):
Summary
ubi9/ubi-minimalbase image references from9.7to9.8(latest stable as of 2026-07-06, confirmed viaskopeo inspect)latest), improving build reproducibilityFiles changed
Dockerfile9.79.8internal/utils_container/Dockerfile9.79.8internal/remediation_config_utils_container/Dockerfile9.79.8internal-example/driverSrcImage/Dockerfile.coreos:latest9.8internal/kmmmodule/dockerfiles/DockerfileTemplate.rpm.coreos9.8internal/kmmmodule/dockerfiles/DockerfileTemplate.srcimg.coreos9.8internal/kmmmodule/dockerfiles/DockerfileTemplate.coreos.gim9.8Test plan
Plan: docs-internal/knowledge/plans/2026-07-06-ubi9-update.md
🤖 Generated with Claude Code
Cherrypick triggered by: ACP-Automation