From e3e7412df2e0cb45807451219f4d6afc661c2ecb Mon Sep 17 00:00:00 2001
From: Zac Bergquist <zac.bergquist@goteleport.com>
Date: Tue, 2 Dec 2025 16:18:36 +0000
Subject: [PATCH] build: download Go from go.dev/dl (#61930)

Closes #61905
---
 build.assets/Dockerfile              | 2 +-
 build.assets/Dockerfile-arm          | 2 +-
 build.assets/Dockerfile-bpf          | 2 +-
 build.assets/Dockerfile-centos7      | 2 +-
 build.assets/buildbox/Dockerfile     | 2 +-
 integrations/operator/Dockerfile     | 2 +-
 integrations/operator/Dockerfile.gha | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/build.assets/Dockerfile b/build.assets/Dockerfile
index b845790da56..22b88093e73 100644
--- a/build.assets/Dockerfile
+++ b/build.assets/Dockerfile
@@ -229,7 +229,7 @@ RUN corepack enable yarn pnpm
 
 # Install Go.
 ARG GOLANG_VERSION
-RUN mkdir -p /opt && cd /opt && curl -fsSL https://storage.googleapis.com/golang/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | tar xz && \
+RUN mkdir -p /opt && cd /opt && curl -fsSL https://go.dev/dl/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | tar xz && \
     mkdir -p /go/src/github.com/gravitational/teleport && \
     chmod a+w /go && \
     chmod a+w /var/lib && \
diff --git a/build.assets/Dockerfile-arm b/build.assets/Dockerfile-arm
index 24ae7e67155..c702e2de6a7 100644
--- a/build.assets/Dockerfile-arm
+++ b/build.assets/Dockerfile-arm
@@ -63,7 +63,7 @@ RUN corepack enable yarn pnpm
 ARG GOLANG_VERSION
 RUN mkdir -p /opt && \
     cd /opt && \
-    curl -fsSL "https://storage.googleapis.com/golang/$GOLANG_VERSION.linux-$BUILDARCH.tar.gz" | tar xz && \
+    curl -fsSL "https://go.dev/dl/$GOLANG_VERSION.linux-$BUILDARCH.tar.gz" | tar xz && \
     mkdir -p /go/src/github.com/gravitational/teleport && \
     chmod a+w /go && \
     chmod a+w /var/lib && \
diff --git a/build.assets/Dockerfile-bpf b/build.assets/Dockerfile-bpf
index d988d6cbfac..4d9a5dce2b7 100644
--- a/build.assets/Dockerfile-bpf
+++ b/build.assets/Dockerfile-bpf
@@ -30,7 +30,7 @@ RUN apt -y update && \
 ARG GOLANG_VERSION
 RUN mkdir -p /opt && \
     cd /opt && \
-    curl -fsSL "https://storage.googleapis.com/golang/$GOLANG_VERSION.linux-$BUILDARCH.tar.gz" | tar xz && \
+    curl -fsSL "https://go.dev/dl/$GOLANG_VERSION.linux-$BUILDARCH.tar.gz" | tar xz && \
     mkdir -p /go/src/github.com/gravitational/teleport && \
     chmod a+w /go && \
     chmod a+w /var/lib && \
diff --git a/build.assets/Dockerfile-centos7 b/build.assets/Dockerfile-centos7
index fed0b84dd91..c28f1c2c93a 100644
--- a/build.assets/Dockerfile-centos7
+++ b/build.assets/Dockerfile-centos7
@@ -219,7 +219,7 @@ COPY --from=git2 /opt/git /
 
 # Install Go.
 ARG GOLANG_VERSION
-RUN mkdir -p /opt && cd /opt && curl -fsSL https://storage.googleapis.com/golang/${GOLANG_VERSION}.linux-${TARGETARCH}.tar.gz | tar xz && \
+RUN mkdir -p /opt && cd /opt && curl -fsSL https://go.dev/dl/${GOLANG_VERSION}.linux-${TARGETARCH}.tar.gz | tar xz && \
     mkdir -p /go/src/github.com/gravitational/teleport && \
     chmod a+w /go && \
     chmod a+w /var/lib && \
diff --git a/build.assets/buildbox/Dockerfile b/build.assets/buildbox/Dockerfile
index 0187e7a3a90..7fecf990384 100644
--- a/build.assets/buildbox/Dockerfile
+++ b/build.assets/buildbox/Dockerfile
@@ -69,7 +69,7 @@ ARG BUILDARCH
 ARG GOLANG_VERSION
 # Set BUILDARCH if not set when not using buildkit. Only works for arm64 and amd64.
 RUN BUILDARCH=${BUILDARCH:-$(uname -m | sed 's/aarch64/arm64/g; s/x86_64/amd64/g')}; \
-	curl -fsSL https://storage.googleapis.com/golang/${GOLANG_VERSION}.linux-${BUILDARCH}.tar.gz | \
+	curl -fsSL https://go.dev/dl/${GOLANG_VERSION}.linux-${BUILDARCH}.tar.gz | \
 	tar -C /opt -xz && \
 	/opt/go/bin/go version
 
diff --git a/integrations/operator/Dockerfile b/integrations/operator/Dockerfile
index c70be370603..1b136e6380e 100644
--- a/integrations/operator/Dockerfile
+++ b/integrations/operator/Dockerfile
@@ -23,7 +23,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 # Install Go.
 ARG GOLANG_VERSION
-RUN mkdir -p /opt && cd /opt && curl -fsSL https://storage.googleapis.com/golang/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | tar xz && \
+RUN mkdir -p /opt && cd /opt && curl -fsSL https://go.dev/dl/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | tar xz && \
     chmod a+w /var/lib && \
     chmod a-w /
 ENV GOPATH="/go" \
diff --git a/integrations/operator/Dockerfile.gha b/integrations/operator/Dockerfile.gha
index fd442c4f516..3b992cbe02c 100644
--- a/integrations/operator/Dockerfile.gha
+++ b/integrations/operator/Dockerfile.gha
@@ -34,7 +34,7 @@ EOT
 # Install Go.
 RUN GOLANG_VERSION=$(make -s -C /tmp/v print-go-version) && \
     mkdir -p /opt && \
-    curl -fsSL https://storage.googleapis.com/golang/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | \
+    curl -fsSL https://go.dev/dl/$GOLANG_VERSION.linux-${BUILDARCH}.tar.gz | \
       tar xz -C /opt && \
     chmod a+w /var/lib && \
     chmod a-w /