search

kubernetes / release

Release infrastructure for Kubernetes and related components
Apache License 2.0
485 stars 502 forks source link

migrate distroless-iptables image to new golang iptables-wrapper #2992

Open BenTheElder opened 1 year ago

BenTheElder commented 1 year ago

What would you like to be added:

We should adopt https://github.com/kubernetes-sigs/iptables-wrappers/pull/6 / https://github.com/kubernetes-sigs/iptables-wrappers/issues/4

Why is this needed:

This will allow us to cleanup TODOs following #2502 to minimize the image further.

We can drop the shell and related utilities and keep only adding iptables binaries and the new go-based wrapper binary.

This will reduce the vulnerability surface further.

danwinship commented 1 year ago

I want to simplify the code a little bit and then I'll tag a release, but the "API" shouldn't really change at all so you can at least test against the current HEAD (https://github.com/kubernetes-sigs/iptables-wrappers/commit/5792812d9e5a5bb7f22d79d557bbfeece253343d)

k8s-triage-robot commented 1 year ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

cpanato commented 1 year ago

/remove-lifecycle stale /assign

k8s-triage-robot commented 9 months ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

xmudrii commented 9 months ago

/remove-lifecycle stale

k8s-triage-robot commented 6 months ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

xmudrii commented 6 months ago

/remove-lifecycle stale

k8s-triage-robot commented 3 months ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

You can:

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

xmudrii commented 3 months ago

/lifecycle frozen

BenTheElder commented 1 month ago

@danwinship pointed out that we may want https://github.com/kubernetes-sigs/iptables-wrappers/pull/7 as a pre-requisite to ensure the go version is tested.