RHCLOUD-37638: Bump image to ubi9 & apply custom spicedb image to eph…

…em template (#358)

* RHCLOUD-37638: Bump image to ubi9

* Apply custom SpiceDB image to ephemeral template

Dockerfile

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1179 AS builder
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155 AS builder
 
 ARG TARGETARCH
 USER root
@@ -15,7 +15,7 @@ RUN make build
 # adds fips-detect tool for FIPS validation -- likely not needed long term
 RUN mkdir /tmp/go && GOPATH=/tmp/go GOCACHE=/tmp/go go install github.com/acardace/fips-detect@latest
 
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1179
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155
 
 # installs RHEL fork of go to be able to validate with go tools for FIPS -- likely not needed long term
 RUN microdnf install -y go-toolset

api/Dockerfile

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1154 AS builder
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155 AS builder
 
 ARG TARGETARCH
 USER root
@@ -17,7 +17,7 @@ RUN go install github.com/go-kratos/kratos/cmd/protoc-gen-go-http/v2@latest
 # Install Buf
 RUN go install github.com/bufbuild/buf/cmd/buf@latest
 
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-1154
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5-1736404155
 
 
 COPY --from=builder /root/go/bin/protoc-gen-go /usr/local/bin/protoc-gen-go

deploy/kessel-relations.yaml

@@ -202,4 +202,4 @@ parameters:
     value: '1'
   - description: SpiceDB Image
     name: SPICEDB_IMAGE
-    value: ghcr.io/authzed/spicedb:v1.31.0
+    value: quay.io/redhat-services-prod/project-kessel-tenant/kessel-relations/spicedb:latest