New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
use new distroless kube-proxy image #111060
Conversation
/cc @rikatz |
/test |
@aojea: The
The following commands are available to trigger optional jobs:
Use
In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
/test pull-kubernetes-e2e-gci-gce-ingress |
it seems it is working, also for ipvs cc @rikatz |
/test pull-kubernetes-e2e-gci-gce-ingress |
/assign @thockin |
I missed @wespanther's comment above and already created kubernetes/release#2613.
Agree that that is a good goal but I don't think we currently have that for any of our images today, and it seems like it could be difficult to implement? Maybe it doesn't need to be a blocker for this specific PR. |
ah, yeah, I was thinking out loud 😄 |
/retest |
oh, we have to wait until the image is promoted https://prow.k8s.io/view/gs/kubernetes-jenkins/logs/post-release-push-image-distroless-iptables/1550021249864830976 |
/retest |
/retest |
@aojea: The following test failed, say
Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here. |
/retest |
/lgtm |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Really great to see this!!
FYI @kubernetes/release-engineering
/lgtm
/approve
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: aojea, justaugustus The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Thanks all!! |
Where is the something that builds this image? I want to understand it and how it pulls together and which tools it includes. |
My suggestion for the release note: For Linux, `kube-proxy` uses a new “distroless” container image, instead of an image based on Debian. I assume that Windows |
done, thanks |
/kind cleanup
What this PR does / why we need it:
Debian based images require a lot of maintainance patching CVE, kube-proxy just need a few binaries to work only,
Fixes: #109406