Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gcp observability: Update Docker images to eclipse-temurin #10218

Merged
merged 2 commits into from
May 30, 2023

Conversation

stanley-cheung
Copy link
Contributor

@stanley-cheung stanley-cheung commented May 24, 2023

Sergii noticed that the GCP Observability Integration testing docker image in the microsvcs-testing project popped up on the vulnerabilities dashboard. So we need to fix which base docker image we use. Similar to the fix in #10191

  • Perform software update so that we install patches for latest vulnerabilities.

@stanley-cheung
Copy link
Contributor Author

Adhoc test run to make sure the Observability Integration tests are still green: http://sponge/2e8c6d78-8f55-4d2a-baf7-4ba04c1f41ad

@stanley-cheung
Copy link
Contributor Author

FYI @sergiitk


WORKDIR /grpc-java
COPY . .

# Intentionally after the app COPY to force the update on each build.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't do what you think it does, because this isn't part of the final image.


WORKDIR /grpc-java
COPY . .

# Intentionally after the app COPY to force the update on each build.
# Update Ubuntu system packages:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes - this needs to be moved to the second stage of the build.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done. Thanks for the comment.

@ejona86 ejona86 requested a review from sergiitk May 25, 2023 22:26
Copy link
Member

@sergiitk sergiitk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just one question.

buildscripts/observability-test/Dockerfile Show resolved Hide resolved
@ejona86 ejona86 merged commit 4277867 into grpc:master May 30, 2023
@stanley-cheung stanley-cheung deleted the o11y-testing-integration-dev branch May 30, 2023 17:25
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 29, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants