TRT-2776: Replace ubi9/nginx-120 with ubi9-minimal + nginx package#14
Conversation
ART's OCP 5.0 build rebases container images onto RHEL 10 base layers. The ubi9/nginx-120 pre-built image loses its nginx binary after this rebase, causing CreateContainerError and CVO Failing=True on all TechPreview clusters. Switch to ubi9-minimal and install nginx explicitly via microdnf so the package is pulled from the target RHEL repos during the build, surviving the ART rebase. This follows the pattern used by openshift/lightspeed-agentic-console. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
openshift-ci-robot
added
the
jira/valid-reference
|
@jhadvig: This pull request references TRT-2776 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the bug to target the "5.0.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: jhadvig The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
approved
|
/lgtm |
The OKD CI config overrides the base image to base-stream9 (CentOS Stream) which has dnf but not microdnf. Switch to dnf which works on both ubi9-minimal and base-stream9, following the pattern from openshift/networking-console-plugin. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
I see the okd-scos-images test is failing because of |
The OCP CI build uses ubi9-minimal (has microdnf), while the OKD CI overrides the base to base-stream9 (has dnf). Use a fallback chain so the install works on both. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
@jhadvig: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/verified by CI |
openshift-ci-robot
added
the
verified
|
@jhadvig: This PR has been marked as verified by DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
/lgtm |
3 participants
Summary
ubi9/nginx-120:latestbase image withubi9-minimal+microdnf install nginxWhy
ART's OCP 5.0 build rebases container images onto RHEL 10 base layers. The
ubi9/nginx-120pre-built image loses itsnginxbinary after this rebase, causingCreateContainerError→ProgressDeadlineExceeded→ CVOFailing=Trueon all TechPreview clusters.This was one of two issues that caused the revert of CVO#1398 and blocked 5.0 nightly payloads for 69+ hours (TRT-2776).
Installing nginx explicitly via
microdnfensures the package is pulled from the target RHEL repos during the build, surviving the ART rebase. This follows the pattern used by openshift/lightspeed-agentic-console.Test plan
docker build .succeeds locally🤖 Generated with Claude Code