UBI: Backport openssl gem pin to 17-3-stable

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/2012



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Add explicit controls for the OpenSSL gem in ruby, at the system level.

Using '~>3.2.0'
- Added to variables
- Added args to CI
- Added args / call in Dockerfile.build.ubi

Related to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8710

Changelog: fixed

Resolve "UID not set in UBI gitlab-container-registry container"

Closes #2067

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1960



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Andrew Patterson <apatterson@gitlab.com>

UID is set only in the build layer. It also needs
to be in the FROM ${GITLAB_BASE_IMAGE} layer.

Closes https://gitlab.com/gitlab-org/build/CNG/-/issues/2067.

Pin azcopy to 10.26.0

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1950



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Set FORCE_IMAGE_BUILDS to true on default branch pipelines

Closes #1998

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1948



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Download the azcopy binary for the target CPU architecture.

Changelog: added

Resolve "stop_buildx is blocking pipeline"

Closes #1926

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1737



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Dmitry Makovey <dmakovey@gitlab.com>

Allow failure of stop_buildx as we're cleaning them up with KubeJanitor anyway

Set ARCH_LIST to amd64 and arm64

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1954



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Dmytro Makovey <dmakovey@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

* Pin azcopy to 10.26.0 to avoid silent azcopy updates.
* Add a script to update the static URL with renovate.

Relates https://gitlab.com/gitlab-org/build/CNG/-/issues/2060

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update exiftool/exiftool from 12.89 to 12.92

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1941



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>

- Updates exiftool/exiftool from 12.89 to 12.92

Changelog: changed

Bump zoekt version to 0.8.2

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1952



Merged-by: Dmitry Gruzd <dgruzd@gitlab.com>
Approved-by: Dmitry Gruzd <dgruzd@gitlab.com>
Co-authored-by: Ravi Kumar <rkumar@gitlab.com>

Skip multi-arch builds in auto-deploy pipeline

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1945



Merged-by: Jason Plum <jplum@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

UBI: Convert to using ubi-micro as basis of final service containers

Closes gitlab-org/cloud-native/distroless/ubi#62

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1874



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Changelog: changed

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Fix skipping of sync-images-gitlab-com job in auto-deploy pipelines

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1943



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

- Use the proper escape form variable in checks for sync-images job
  in the workflow rules.

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Allow asset compilation in auto-deploy pipelines to be controlled by variables

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1942



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

- Control asset compilation in pipelines with a new environment variable.

Related https://gitlab.com/gitlab-org/build/CNG/-/issues/2057



Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Update gitlab-org/container-registry from v4.6.0-gitlab to v4.7.0-gitlab

See merge request https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1946



Merged-by: Hayley Swimelar <hswimelar@gitlab.com>
Approved-by: Pawel Rozlach <prozlach@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Co-authored-by: deps <bot@dependencies.io>