From ad31dfbf98a560994f527ac884b32a4cc77d2913 Mon Sep 17 00:00:00 2001 From: Triona Doyle Date: Mon, 8 Jun 2026 17:04:23 +0100 Subject: [PATCH 1/2] hardcode kustomize download to bypass github api rate limits Signed-off-by: Triona Doyle --- openshift-ci/build-root/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/openshift-ci/build-root/Dockerfile b/openshift-ci/build-root/Dockerfile index 88265f09413..30fa7bc0461 100644 --- a/openshift-ci/build-root/Dockerfile +++ b/openshift-ci/build-root/Dockerfile @@ -4,6 +4,7 @@ FROM quay.io/devtools_gitops/go-toolset:1.26.2 USER root ARG OPERATOR_SDK_VERSION=1.35.0 +ARG KUSTOMIZE_VERSION=v5.8.1 # Install kubectl tool which is used in e2e-tests RUN curl -sSL -o /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \ @@ -14,8 +15,7 @@ RUN curl -sSL -o /usr/local/bin/argocd https://github.com/argoproj/argo-cd/relea chmod +x /usr/local/bin/argocd # Install Kustomize -RUN wget https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh && \ - bash install_kustomize.sh /usr/local/bin && rm install_kustomize.sh +RUN curl -sSL https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | tar -xz -C /usr/local/bin # Install operator-sdk RUN curl -L -o /usr/local/bin/operator-sdk https://github.com/operator-framework/operator-sdk/releases/download/v${OPERATOR_SDK_VERSION}/operator-sdk_linux_amd64 && \ From 4d1bbe8c113d7f8a78a68c745542f83b946d7318 Mon Sep 17 00:00:00 2001 From: Triona Doyle Date: Mon, 6 Jul 2026 09:23:19 +0100 Subject: [PATCH 2/2] update Kustomize to v5.8.1 and add SHA256 checksum verification Signed-off-by: Triona Doyle --- openshift-ci/build-root/Dockerfile | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/openshift-ci/build-root/Dockerfile b/openshift-ci/build-root/Dockerfile index 30fa7bc0461..0ae0d22bf78 100644 --- a/openshift-ci/build-root/Dockerfile +++ b/openshift-ci/build-root/Dockerfile @@ -5,6 +5,7 @@ USER root ARG OPERATOR_SDK_VERSION=1.35.0 ARG KUSTOMIZE_VERSION=v5.8.1 +ARG KUSTOMIZE_SHA256="029a7f0f4e1932c52a0476cf02a0fd855c0bb85694b82c338fc648dcb53a819d" # Install kubectl tool which is used in e2e-tests RUN curl -sSL -o /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \ @@ -14,8 +15,11 @@ RUN curl -sSL -o /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s RUN curl -sSL -o /usr/local/bin/argocd https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64 && \ chmod +x /usr/local/bin/argocd -# Install Kustomize -RUN curl -sSL https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz | tar -xz -C /usr/local/bin +# Install Kustomize with checksum validation +RUN curl -sSL -o kustomize.tar.gz https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2F${KUSTOMIZE_VERSION}/kustomize_${KUSTOMIZE_VERSION}_linux_amd64.tar.gz && \ + echo "${KUSTOMIZE_SHA256} kustomize.tar.gz" | sha256sum -c - && \ + tar -xzf kustomize.tar.gz -C /usr/local/bin && \ + rm kustomize.tar.gz # Install operator-sdk RUN curl -L -o /usr/local/bin/operator-sdk https://github.com/operator-framework/operator-sdk/releases/download/v${OPERATOR_SDK_VERSION}/operator-sdk_linux_amd64 && \