Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

use distroless image for garnder networking cilium extension #111

Merged
merged 1 commit into from
Jul 15, 2022
Merged

use distroless image for garnder networking cilium extension #111

merged 1 commit into from
Jul 15, 2022

Conversation

DockToFuture
Copy link
Member

How to categorize this PR?

/area networking security open-source
/kind enhancement

What this PR does / why we need it:
This PR changes the base image for networking and admission services from alpine to distroless. The processes will now use a non root user for their execution. This will reduce the attack surface of the images.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

The extension now uses `distroless` instead of `alpine` as a base image.

@DockToFuture DockToFuture requested review from a team as code owners July 15, 2022 10:42
@gardener-robot gardener-robot added needs/review Needs review area/networking Networking related area/open-source Open Source (community, enablement, contributions, conferences, CNCF, etc.) related area/security Security related kind/enhancement Enhancement, improvement, extension size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) labels Jul 15, 2022
@gardener-robot-ci-3 gardener-robot-ci-3 added reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) and removed reviewed/ok-to-test Has approval for testing (check PR in detail before setting this label because PR is run on CI/CD) labels Jul 15, 2022
ScheererJ
ScheererJ approved these changes Jul 15, 2022
View reviewed changes
Copy link
Member

@ScheererJ ScheererJ left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-robot gardener-robot added reviewed/lgtm Has approval for merging and removed needs/review Needs review labels Jul 15, 2022
@DockToFuture DockToFuture merged commit 3e694ea into gardener:master Jul 15, 2022
@gardener-robot gardener-robot added the status/closed Issue is closed (either delivered or triaged) label Jul 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ScheererJ ScheererJ ScheererJ approved these changes

Assignees
No one assigned
Labels
area/networking Networking related area/open-source Open Source (community, enablement, contributions, conferences, CNCF, etc.) related area/security Security related kind/enhancement Enhancement, improvement, extension needs/ok-to-test Needs approval for testing (check PR in detail before setting this label because PR is run on CI/CD) reviewed/lgtm Has approval for merging size/xs Size of pull request is tiny (see gardener-robot robot/bots/size.py) status/closed Issue is closed (either delivered or triaged)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@DockToFuture @ScheererJ @gardener-robot-ci-3 @gardener-robot