Skip to content

Commit

Permalink
chore: update distroless-iptables to v0.5.4 (#1351)
Browse files Browse the repository at this point in the history
Signed-off-by: Anish Ramasekar <[email protected]>
  • Loading branch information
aramase committed May 14, 2024
1 parent 5ad840f commit 30acced
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 3 deletions.
3 changes: 1 addition & 2 deletions .pipelines/templates/scan-images.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,7 @@ steps:
tar zxvf trivy_${TRIVY_VERSION:-0.24.4}_Linux-64bit.tar.gz
# show all vulnerabilities in the logs
./trivy image --reset
# TODO(aramase): add proxy-init image after https://github.com/kubernetes/release/issues/3593 is fixed
for IMAGE_NAME in "proxy" "webhook"; do
for IMAGE_NAME in "proxy" "proxy-init" "webhook"; do
./trivy image "${REGISTRY}/${IMAGE_NAME}:${IMAGE_VERSION}-linux-amd64"
./trivy image --exit-code 1 --ignore-unfixed --severity MEDIUM,HIGH,CRITICAL "${REGISTRY}/${IMAGE_NAME}:${IMAGE_VERSION}-linux-amd64" || exit 1
done
Expand Down
2 changes: 1 addition & 1 deletion docker/proxy-init.Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.5.2
FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.5.4

COPY ./init/init-iptables.sh /bin/
RUN chmod +x /bin/init-iptables.sh
Expand Down

0 comments on commit 30acced

Please sign in to comment.