SAP-archive / karydia

Kubernetes Security Walnut
Other
77 stars 10 forks source link

Minimal base-image for production #80

Closed dacappo closed 5 years ago

dacappo commented 5 years ago

Description

Instead of using a Debian-based image for our release, the base-image should be reduced to the absolute minimum. This reduces the risk of known vulnerabilities in included libraries and reduced the size of the image.

User Story

As a user of karydia I expect a small image to save cost and a secure image that follows best-practice guides for container security.

Implementation idea

Maybe the image can solely exist of the karydia binary only leveraging the underlying kernel.