Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(kuma-init): use distroless image #5945

Merged
merged 9 commits into from
Oct 22, 2024
11 changes: 2 additions & 9 deletions tools/releases/dockerfiles/kuma-init.Dockerfile
Original file line number Diff line number Diff line change
@@ -1,21 +1,14 @@
# until there is a distroless iptables image we have to use something else
FROM ubuntu:jammy-20240808@sha256:adbb90115a21969d2fe6fa7f9af4253e16d45f8d4c1e930182610c4731962658
FROM gcr.io/k8s-staging-build-image/distroless-iptables:v0.6.4
ARG ARCH

RUN apt-get update && \
apt-get install --no-install-recommends -y iptables=1.8.7-1ubuntu5.2 iproute2=5.15.0-1ubuntu2 && \
jijiechen marked this conversation as resolved.
Show resolved Hide resolved
rm -rf /var/lib/apt/lists/*

COPY /build/artifacts-linux-$ARCH/kumactl/kumactl /usr/bin

# this will be from a base image once it is done
COPY /tools/releases/templates/LICENSE \
/tools/releases/templates/README \
/kuma/

COPY /tools/releases/templates/NOTICE /kuma/NOTICE

RUN adduser --system --disabled-password --group kumactl --uid 5678
COPY /tools/releases/templates/NOTICE-kumactl /kuma/NOTICE

slonka marked this conversation as resolved.
Show resolved Hide resolved
ENTRYPOINT ["/usr/bin/kumactl"]
CMD ["install", "transparent-proxy"]
Loading