CLOUDP-196136: Use UBI micro base image instead of minimal (#1099)

* Use micro base image instead of minimal

* Make E2E & int tests manually runnable

* Add Dockerfile to the path filter, such that cloud tests
are run when it's changed.

* Copy internal dir into docker builder step

* Add Root CAs to micro UBI

.github/workflows/paths-filter.yml

@@ -21,6 +21,7 @@ jobs:
               production-code-changed:
                 - 'cmd/**/!(*_test.go)'
                 - 'pkg/**/!(*_test.go)'
+                - 'Dockerfile'
         # run only if 'production-code' files were changed
         - name: production code changed
           if: steps.filter.outputs.production-code-changed == 'true'

.github/workflows/test-e2e.yml

@@ -7,6 +7,7 @@ on:
         type: boolean
         required: false
         default: false
+  workflow_dispatch:
 
 jobs:
   prepare-e2e:

.github/workflows/test-int.yml

@@ -7,6 +7,7 @@ on:
         type: boolean
         required: false
         default: false
+  workflow_dispatch:
 
 jobs:
   int-test:

Dockerfile

@@ -14,6 +14,7 @@ RUN go install golang.org/x/tools/cmd/goimports@latest
 COPY cmd/manager/main.go cmd/manager/main.go
 COPY .git/ .git/
 COPY pkg/ pkg/
+COPY internal/ internal/
 COPY Makefile Makefile
 COPY config/ config/
 COPY hack/ hack/
@@ -27,18 +28,7 @@ ENV TARGET_OS=${TARGETOS}
 
 RUN make manager
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2
-
-RUN microdnf install -y yum &&\
-  yum -y update &&\
-  yum -y upgrade &&\
-  yum clean all &&\
-  dnf remove python3-pip -y &&\
-  microdnf clean all
-
-#FROM registry.access.redhat.com/ubi8/ubi
-#
-#RUN dnf -y update-minimal --security --sec-severity=Important --sec-severity=Critical
+FROM registry.access.redhat.com/ubi9/ubi-micro:9.2
 
 LABEL name="MongoDB Atlas Operator" \
   maintainer="[email protected]" \
@@ -56,6 +46,7 @@ LABEL name="MongoDB Atlas Operator" \
 WORKDIR /
 COPY --from=builder /workspace/bin/manager .
 COPY hack/licenses licenses
+COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
 
 USER 1001:0
 ENTRYPOINT ["/manager"]