Merge pull request #34 from VaishnaviHire/sync_2.25

Sync changes for 2.25 release

Author: VaishnaviHire

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Each line is a file pattern followed by one or more owners.
+
+# These owners will be the default owners for everything in
+# the repo. Unless a later match takes precedence,
+* @cdoern @derekhiggins @Elbehery @leseb @mfleader @nathan-weinberg @rhdedgar @rhuss @skamenan7 @VaishnaviHire

.github/workflows/code-coverage.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
         with:
-          go-version: '1.21'
+          go-version-file: go.mod
 
       - name: Set up limgo
         uses: GoTestTools/limgo-action@d4a725a46ab3bdbbf23186bbbe54b4ff4a35d5a7 # v1.0.2

.github/workflows/generate-release.yml

@@ -19,7 +19,6 @@ permissions:
 env:
   GIT_USER_NAME: github-actions[bot]
   GIT_USER_EMAIL: github-actions[bot]@users.noreply.github.com
-  GO_VERSION: '1.23'
 
 jobs:
   generate-release:
@@ -91,9 +90,9 @@ jobs:
           fi
 
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v 5.5.0
         with:
-          go-version: ${{ env.GO_VERSION }}
+          go-version-file: go.mod
 
       - name: Prepare release files
         shell: bash
@@ -244,9 +243,9 @@ jobs:
           GH_TOKEN: ${{ github.token }}
 
       - name: Set up Go
-        uses: actions/setup-go@a26af69be951a213d495a4c3e4e4022e16d87065
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
         with:
-          go-version: ${{ env.GO_VERSION }}
+          go-version-file: go.mod
 
       - name: Build release image
         shell: bash

.github/workflows/main-build-image.yml

@@ -13,14 +13,14 @@ jobs:
     if: github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'main'
     runs-on: ubuntu-24.04
     steps:
-      - name: Set up Go 1.23
-        uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495 # v3.6.1
-        with:
-          go-version: '1.23'
-
       - name: Checkout code
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
 
+      - name: Set up Go 1.24
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+        with:
+          go-version-file: go.mod
+
       - name: Login to Quay.io
         uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0
         with:

.github/workflows/odh-build-image.yml

@@ -13,14 +13,14 @@ jobs:
   build-latest-image:
     runs-on: ubuntu-24.04
     steps:
-      - name: Set up Go 1.23
-        uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495
-        with:
-          go-version: '1.23'
-
       - name: Checkout code
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
 
+      - name: Set up Go 1.24
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+        with:
+          go-version-file: go.mod
+
       - name: Login to Quay.io
         uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
         with:

.github/workflows/release-image.yml

@@ -20,10 +20,10 @@ jobs:
   build-release-image:
     runs-on: ubuntu-24.04
     steps:
-      - name: Set up Go 1.23
-        uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495 # v3.6.1
+      - name: Set up Go 1.24
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
         with:
-          go-version: '1.23'
+          go-version-file: go.mod
 
       - name: Checkout code
         uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0

.github/workflows/run-e2e-test.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
         with:
-          go-version: '1.21'
+          go-version-file: go.mod
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1

Dockerfile

@@ -1,10 +1,12 @@
 # Build the manager binary
-ARG GOLANG_VERSION=1.23
+ARG GOLANG_VERSION=1.24
 
-FROM registry.access.redhat.com/ubi8/go-toolset:${GOLANG_VERSION} as builder
+FROM registry.access.redhat.com/ubi9/go-toolset:${GOLANG_VERSION} as builder
 ARG TARGETOS=linux
 ARG TARGETARCH
-ARG CGO_ENABLED=0
+ARG CGO_ENABLED=1
+ARG GOTAGS=strictfipsruntime,openssl
+ENV GOEXPERIMENT=strictfipsruntime
 
 WORKDIR /workspace
 # Copy the Go Modules manifests
@@ -26,14 +28,15 @@ USER root
 
 # GOARCH is intentionally left empty to automatically detect the host architecture
 # This ensures the binary matches the platform where image-build is executed
-RUN CGO_ENABLED=${CGO_ENABLED} GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -a -o manager main.go
+RUN CGO_ENABLED=${CGO_ENABLED} GOOS=${TARGETOS} GOARCH=${TARGETARCH} go build -a -tags=${GOTAGS} -o manager main.go
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
 WORKDIR /
 COPY --from=builder /workspace/manager .
 COPY --from=builder /workspace/controllers/manifests ./manifests/
+RUN microdnf install -y openssl && microdnf clean all
 USER 1001
 
 ENTRYPOINT ["/manager"]

Makefile

@@ -151,11 +151,11 @@ test-e2e: ## Run e2e tests
 GOLANGCI_LINT_TIMEOUT ?= 5m0s
 .PHONY: lint
 lint: golangci-lint ## Run golangci-lint against code.
-	$(GOLANGCI_LINT) run --timeout=$(GOLANGCI_LINT_TIMEOUT) --sort-results
+	$(GOLANGCI_LINT) run --timeout=$(GOLANGCI_LINT_TIMEOUT)
 
 .PHONY: lint-fix
 lint-fix: golangci-lint ## Run golangci-lint fix against code.
-	$(GOLANGCI_LINT) run --fix --sort-results
+	$(GOLANGCI_LINT) run --fix
 
 ##@ Build
 

README.md

@@ -109,7 +109,7 @@ kubectl apply -f config/samples/example-with-configmap.yaml
 ### Prerequisites
 
 - Kubernetes cluster (v1.20 or later)
-- Go version **go1.23**
+- Go version **go1.24**
 - operator-sdk **v1.39.2** (v4 layout) or newer
 - kubectl configured to access your cluster
 - A running inference server: