Use skip-preflight-cert-check for PKO.

the scratch images can not successfully complete that check.

Author: bergmannf

.tekton/managed-node-metadata-operator-pko-pull-request.yaml

@@ -29,6 +29,8 @@ spec:
     value: 3d
   - name: path-context
     value: deploy_pko
+  - name: skip-preflight-cert-check
+    value: true
   taskRunTemplate:
     serviceAccountName: build-pipeline-managed-node-metadata-operator-pko
   workspaces:

.tekton/managed-node-metadata-operator-pko-push.yaml

@@ -27,6 +27,8 @@ spec:
     value: build/Dockerfile.pko
   - name: path-context
     value: deploy_pko
+  - name: skip-preflight-cert-check
+    value: true
   taskRunTemplate:
     serviceAccountName: build-pipeline-managed-node-metadata-operator-pko
   workspaces:

build/Dockerfile

@@ -18,7 +18,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GO111MODULE=on go build -mod=mod -a -o
 
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1764794109
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1768783948
 WORKDIR /
 COPY --from=builder /workspace/manager .
 USER nonroot:nonroot

build/Dockerfile.olm-registry

@@ -4,7 +4,7 @@ COPY ${SAAS_OPERATOR_DIR} manifests
 RUN initializer --permissive
 
 # ubi-micro does not work for clusters with fips enabled unless we make OpenSSL available
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1764794109
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.7-1768783948
 
 COPY --from=builder /bin/registry-server /bin/registry-server
 COPY --from=builder /bin/grpc_health_probe /bin/grpc_health_probe