Skip to content

Commit c65b56b

Browse files
committed
chore: update go build to be fips enabled
1 parent c75e009 commit c65b56b

File tree

2 files changed

+4
-2
lines changed

2 files changed

+4
-2
lines changed

.konflux/dockerfiles/controller.Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,10 @@ WORKDIR /go/src/github.com/openshift-pipelines/manual-approval-gate
77
COPY . .
88
RUN set -e; for f in patches/*.patch; do echo ${f}; [[ -f ${f} ]] || continue; git apply ${f}; done
99
ENV GODEBUG="http2server=0"
10+
ENV GOEXPERIMENT=strictfipsruntime
1011
RUN git rev-parse HEAD > /tmp/HEAD
1112
RUN CGO_ENABLED=0 \
12-
go build -ldflags="-X 'knative.dev/pkg/changeset.rev=$(cat /tmp/HEAD)'" -mod=vendor -tags disable_gcp -v -o /tmp/manual-approval-gate-controller \
13+
go build -ldflags="-X 'knative.dev/pkg/changeset.rev=$(cat /tmp/HEAD)'" -mod=vendor -tags disable_gcp -tags strictfipsruntime -v -o /tmp/manual-approval-gate-controller \
1314
./cmd/controller
1415

1516
FROM $RUNTIME

.konflux/dockerfiles/webhook.Dockerfile

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,10 @@ WORKDIR /go/src/github.com/openshift-pipelines/manual-approval-gate
77
COPY . .
88
RUN set -e; for f in patches/*.patch; do echo ${f}; [[ -f ${f} ]] || continue; git apply ${f}; done
99
ENV GODEBUG="http2server=0"
10+
ENV GOEXPERIMENT=strictfipsruntime
1011
RUN git rev-parse HEAD > /tmp/HEAD
1112
RUN CGO_ENABLED=0 \
12-
go build -ldflags="-X 'knative.dev/pkg/changeset.rev=$(cat /tmp/HEAD)'" -mod=vendor -tags disable_gcp -v -o /tmp/manual-approval-gate-webhook \
13+
go build -ldflags="-X 'knative.dev/pkg/changeset.rev=$(cat /tmp/HEAD)'" -mod=vendor -tags disable_gcp -tags strictfipsruntime -v -o /tmp/manual-approval-gate-webhook \
1314
./cmd/webhook
1415

1516
FROM $RUNTIME

0 commit comments

Comments
 (0)