use RHEL7 in base images for all production images

[maxandersen]

Work on getting RHEL7 images used for base images.
Using this issue as overall tracker.

• openshiftio/openshift.io
• fabric8-auth
• keycloak
• fabric8-tenant
• fabric8-notification
• fabric8-oso-proxy
• fabric8-admin-proxy
• fabric8-wit
• fabric8-toggles
• fabric8-toggles-service
• fabric8-jenkins-idler
• fabric8-jenkins-proxy
• fabric8-online-docs

Others at https://docs.google.com/spreadsheets/d/1VHHnxeb_8ricpay6GoiRG0e3Jlg5klO5eTMMVWeTWBQ/edit#gid=1147758271

General approach should be:

• The build script has changed, make sure that there are no obvious
  mistakes, and that it continues to the same thing essentially, but
  pushes to a different place if TARGET=rhel
• There is a new Dockerfile.rhel (or Dockerfile.deploy.rhel), this
  should be compared against the existing one, based on CentOS
• The OpenShift template has been changed to parametrize the IMAGE parameter
• Make sure we are OK with the fact that by merging this PR it will be
  deployed in staging with a RHEL based container

It is somewhat a hard PR to address because the build scripts and
makefiles are generally copy/pastes from other projects with patched
parts. This is something very close to OpenShift that developers don't
usually touch.

[jmelis]

For the openshiftio/openshift.io we would also need this merge: #3323

[surajssd]

@maxandersen @jmelis aren't we porting wit service to RHEL? I don't see any rhel deploy Dockerfile there?

[maxandersen]

@maxandersen @jmelis aren't we porting wit service to RHEL? I don't see any rhel deploy Dockerfile there?

that is at fabric8-ui/fabric8-ui#2805 (just added to list above)

[kbsingh]

raising to SEV1 - has production impact
adding critical-dep for scope

[alexeykazakov]

Added fabric8-auth (done) and keycloak (currently run in prod-preview, will push to prod if no issues found in preview)

[aslakknutsen]

@maxandersen @surajssd It's here: fabric8-services/fabric8-wit#2004 updated list

[maxandersen]

@maxandersen @surajssd It's here: fabric8-services/fabric8-wit#2004 updated list

sorry for my bad copy/paste :) thanks for fixing it.

[chmouel]

Updated list for proxy/idler/online-docs

[alexeykazakov]

Keycloak has been deployed to prod. Do we still have anything left?

[cctrieloff]

Have we also changed the image the pipeline builds, or is that another issue #?

[kbsingh]

@cctrieloff were handling that as a seperate issue

[bmicklea]

Everything is checked off here, should the issue be closed?

[jmelis]

The following is a list of services that have been deployed to staging but not to prod, alongside with the PRs that will promote them to prod:

• f8-wit: Deploy RHEL based f8-wit to prod saas-openshiftio#830
• f8-jenkins-proxy: Deploy RHEL based jenkins-proxy into prod saas-openshiftio#840
• f8-notification: Deploy RHEL f8-notification in prod saas-openshiftio#832
• f8-oso-proxy: Deploy RHEL based f8-oso-proxy to prod saas-openshiftio#833
• f8-admin-proxy: Deploy RHEL based f8-adminproxy to prod saas-openshiftio#834
• f8-jenkins-idler: PR to be sent

I have unchecked those from the top as I think they should be checked only when they're deployed to prod.

[jmelis]

PR to promote jenkins-idler to prod has been sent: openshiftio/saas-openshiftio#847

As soon as that is merged, we can close this issue.

[jmelis]

All the services are now running on RHEL. Closing issue.