SREP-144: Switch to UBI9 and install Go 1.24

[joshbranham]

This PR bumps UBI8 to UBI9 for our base image template, the OLM registry image, and Boilerplate's own image used in CI and to build operators from. Additionally, this bumps Go to 1.24.

In order to make this work, we need to switch to a base UBI image and install go-toolset ourselves. The primary reason for this is there is no golang builder image with ubi9. The next bump of brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_1.23 is built with rhel9 and therefore dnf installing packages becomes a bit more annoying locally.

By switching to a plain UBI9 base image, we can control all the packages we need and utilize the UBI repos locally and in CI.

Once this merges, we will need to cut a new image for Boilerplate, and direct consumers on how to migrate.

[joshbranham]

/hold

[joshbranham]

deprecated directive

[joshbranham]

Moved from later in the file, added git, go-toolset, rsync

[openshift-ci-robot]

@joshbranham: This pull request references SREP-144 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.20.0" version, but no target version was set.

In response to this:

This PR bumps UBI8 to UBI9 for our base image template, the OLM registry image, and Boilerplate's own image used in CI and to build operators from. Additionally, this bumps Go to 1.24.

In order to make this work, we need to switch to a base UBI image and install go-toolset ourselves. The primary reason for this is there is no golang builder image with ubi9. The next bump of brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_1.23 is built with rhel9 and therefore dnf installing packages becomes a bit more annoying locally.

By switching to a plain UBI9 base image, we can control all the packages we need and utilize the UBI repos locally and in CI.

Once this merges, we will need to cut a new image for Boilerplate, and direct consumers on how to migrate.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[joshbranham]

I built aws-account-operator locally from these changes, and the binary starts without error (minus expected missing config)

 podman run --rm -it quay.io/app-sre/aws-account-operator:v0.1.1798-ga7f8766
[root@bef65e5a59bd ~]# cat /etc/os-release
NAME="Red Hat Enterprise Linux"
VERSION="9.6 (Plow)"
ID="rhel"
ID_LIKE="fedora"
VERSION_ID="9.6"
PLATFORM_ID="platform:el9"
PRETTY_NAME="Red Hat Enterprise Linux 9.6 (Plow)"
ANSI_COLOR="0;31"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:redhat:enterprise_linux:9::baseos"
HOME_URL="https://www.redhat.com/"
DOCUMENTATION_URL="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9"
BUG_REPORT_URL="https://issues.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 9"
REDHAT_BUGZILLA_PRODUCT_VERSION=9.6
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="9.6"
[root@bef65e5a59bd ~]# aws-account-operator
***** Starting with FIPS crypto enabled *****
{"level":"info","ts":1753734910.9554756,"logger":"setup","msg":"Operator Version: 0.0.1"}
{"level":"info","ts":1753734910.955501,"logger":"setup","msg":"Operator-sdk Version: 1.21"}
{"level":"info","ts":1753734910.9555166,"logger":"setup","msg":"Go Version: go1.24.4 (Red Hat 1.24.4-1.el9_6) X:boringcrypto"}
{"level":"info","ts":1753734910.9555247,"logger":"setup","msg":"Go OS/Arch: linux/arm64"}
{"level":"error","ts":1753734910.955587,"logger":"controller-runtime.client.config","msg":"unable to get kubeconfig","error":"invalid configuration: no configuration has been provided, try setting KUBERNETES_MASTER environment variable","errorCauses":[{"error":"no configuration has been provided, try setting KUBERNETES_MASTER environment variable"}],"stacktrace":"sigs.k8s.io/controller-runtime/pkg/client/config.GetConfigOrDie\n\tpkg/mod/sigs.k8s.io/controller-runtime@v0.12.1/pkg/client/config/config.go:153\nmain.main\n\tsrc/github.com/openshift/aws-account-operator/main.go:101\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:283"}
[root@bef65e5a59bd ~]# exit

And the resulting diff to build this

diff --git a/build/Dockerfile b/build/Dockerfile
index b241f670..b682e48b 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -1,4 +1,4 @@
-FROM quay.io/redhat-services-prod/openshift/boilerplate:image-v7.4.0 AS builder
+FROM localhost/boilerplate:latest AS builder

 ENV OPERATOR_PATH=/go/src/github.com/openshift/aws-account-operator
 ENV GO111MODULE=on
@@ -10,7 +10,7 @@ WORKDIR ${OPERATOR_PATH}

 RUN make go-build FIPS_ENABLED=${FIPS_ENABLED}

-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1752564239
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.6-1752587672
 ENV OPERATOR_BIN=aws-account-operator

 WORKDIR /root/

[dakotalongRH]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dakotalongRH, joshbranham

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [dakotalongRH,joshbranham]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[joshbranham]

/unhold