Skip to content

Add support for Red Hat openshift compatible image#6700

Open
Rkabra7 wants to merge 2 commits into
mainfrom
ICU-18816
Open

Add support for Red Hat openshift compatible image#6700
Rkabra7 wants to merge 2 commits into
mainfrom
ICU-18816

Conversation

@Rkabra7
Copy link
Copy Markdown

@Rkabra7 Rkabra7 commented May 11, 2026

Description

This PR adds native Red Hat UBI/OpenShift image support to Boundary by consolidating the previous Dockerfile.openshift setup into the main Dockerfile as a dedicated ubi stage and integrating it with the standard CI/CD release pipeline.

Changes

Added a ubi stage based on ubi9/ubi-minimal
Added Red Hat certification labels, license files, non-root user, and OpenShift-compatible permissions
Introduced a new OpenShift entrypoint handling arbitrary UID support and permission checks
Added CI workflow to build and push multi-arch (amd64/arm64) UBI images to the Red Hat Connect registry
Registered UBI image tarballs as release artifacts
Updated .dockerignore to include LICENSE in build context

Testing

Validated successfully using a temporary build-redhat-test.yml workflow before merge.

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.
  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.
  • If applicable, I've documented the impact of any changes to security controls.
    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

@Rkabra7 Rkabra7 requested a review from a team as a code owner May 11, 2026 10:12
@hashicorp-cla-app
Copy link
Copy Markdown

hashicorp-cla-app Bot commented May 11, 2026

CLA assistant check

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes


1 out of 2 committers have signed the CLA.

  • Rkabra7
  • Raghav Kabra

Raghav Kabra seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

Have you signed the CLA already but the status is still pending? Recheck it.

@hashicorp-cla-app
Copy link
Copy Markdown

CLA assistant check

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes


Raghav Kabra seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

Have you signed the CLA already but the status is still pending? Recheck it.

@Rkabra7 Rkabra7 added this to the deferred milestone May 11, 2026
Comment thread Dockerfile
Comment thread Dockerfile Outdated
Comment thread Dockerfile Outdated
Comment thread Dockerfile Outdated
Comment thread .release/docker/ubi-docker-entrypoint.sh Outdated
Comment thread .release/docker/ubi-docker-entrypoint.sh Outdated
Comment thread Dockerfile
Comment thread .release/docker/ubi-docker-entrypoint.sh Outdated
ChandraSGadde
ChandraSGadde previously approved these changes May 15, 2026
Comment thread .github/workflows/build.yml Outdated
@moduli
Copy link
Copy Markdown
Collaborator

moduli commented May 18, 2026

Could you also sign the CLA? https://cla.hashicorp.com/hashicorp/boundary?pullRequest=6700

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants