kubernetes-csi / external-attacher

Sidecar container that watches Kubernetes VolumeAttachment objects and triggers ControllerPublish/Unpublish against a CSI endpoint
Apache License 2.0
169 stars 187 forks source link

Upgrade external-attacher to use Debian 12 Distroless #558

Closed jhawkins1 closed 3 months ago

jhawkins1 commented 6 months ago

Since Debian 12 Distroless is available, as well as, the latest releases of Kubernetes and many of the Kubernetes related projects have moved to Debian 12, we would request that external-attacher move to Debian 12 Distroless to align with other Kubernetes components.

Benefits: Alignment of the Container OS being used to other Kubernetes Components and related Projects. Reduces fan-out of multiple OSes or different versions of OSes across components. Potential benefits as to being able to obtain OS patches for vulnerabilities where Debian has decided only to fix in latest LTS (Debian 12) release and not older LTS releases.

jsafrane commented 6 months ago

Sure, feel free to update our Dockerfiles, but please do so in all repos in https://github.com/kubernetes-csi so they're consistent. Beware, some of them are not distroless.

sdx-jkataja commented 4 months ago

It appears the gcr.io/distroless/static:latest base image has already changed to Debian 12. The change has taken place some time in between the versions:

jsafrane commented 3 months ago

/close v4.6.0 is based on Debian 12

k8s-ci-robot commented 3 months ago

@jsafrane: Closing this issue.

In response to [this](https://github.com/kubernetes-csi/external-attacher/issues/558#issuecomment-2289384239): >/close >v4.6.0 is based on Debian 12 Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.