feat: use distroless-iptables for proxy-init (#816)

Signed-off-by: Anish Ramasekar <[email protected]>
Azure · May 2, 2023 · 08a3ef1 · 08a3ef1
1 parent 45187cd
commit 08a3ef1
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/docker/proxy-init.Dockerfile b/docker/proxy-init.Dockerfile
@@ -1,10 +1,7 @@
-ARG BASEIMAGE=registry.k8s.io/build-image/debian-iptables:bullseye-v1.5.5
+ARG BASEIMAGE=registry.k8s.io/build-image/distroless-iptables:v0.2.3
 
 FROM --platform=${TARGETPLATFORM:-linux/amd64} ${BASEIMAGE}
 
-RUN apt update && \
-    apt upgrade -y && \
-    clean-install ca-certificates
 COPY ./init/init-iptables.sh /bin/
 RUN chmod +x /bin/init-iptables.sh
 # Kubernetes runAsNonRoot requires USER to be numeric