ART-14816: Add Containerfile.art for ART builds

[shruti-rh]

Problem Statement

ART needs to build external-secrets-operator images through its Konflux-based layered products pipeline. ART builds require a dedicated Containerfile.art with ART's builder images, base images, and LABEL conventions.

Related Issue

Part of ART-14816 (Onboard OAP operators to ART) and ART-14821 (Onboard External Secrets Operator to ocp-build-data).

Proposed Changes

• Add Containerfile.art to the release-1.1 branch
• Uses ART's golang builder (brew.registry.redhat.io/rh-osbs/openshift-golang-builder)
• Uses ubi9/ubi-minimal as runtime base image
• Includes required Red Hat container LABELs (com.redhat.component, name, cpe, etc.)
• Exists alongside the existing Dockerfile without modifying it

Note: Bundle Containerfile is not included in this PR — the OLM bundle is handled separately via update-csv in ART's build pipeline using the bundle/art.yaml and bundle/image-references files (already merged).

[openshift-ci-robot]

@shruti-rh: This pull request references ART-14816 which is a valid jira issue.

Details

In response to this:

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 2f874762-94d9-47fa-b864-88f4257ff843

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @shruti-rh. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[ashwindasr]

/hold

Let me take a look as well

[ashwindasr]

/unhold

[bharath-b-rh]

/lgtm

Could you please commit the changes again, for the commit to be get the verified tag. Also please add description to the PR.

We don't have a Containerfile added for bundle in this PR. Will that be in a follow up?

[bharath-b-rh]

/ok-to-test

[openshift-ci]

New changes are detected. LGTM label has been removed.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: shruti-rh
Once this PR has been reviewed and has the lgtm label, please ask for approval from bharath-b-rh. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[shruti-rh]

We don't have a Containerfile added for bundle in this PR. Will that be in a follow up?

@bharath-b-rh ART handles bundle generation differently. Instead of a separate Containerfile,
ART uses:

• update-csv in the operator's ocp-build-data image YAML
• bundle/art.yaml for string replacements
• bundle/image-references for mapping image pullspecs

Doozer is a tool that generates the bundle automatically during the operator build's rebase step. So there's no need for a separate bundle Containerfile.art.

[openshift-ci]

@shruti-rh: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.