From 23469d6b04a3a9a2bb9e99eac5719b4765b7c2e0 Mon Sep 17 00:00:00 2001 From: Yuwen Ma Date: Fri, 12 Apr 2019 15:59:23 -0700 Subject: [PATCH] Rebase etcd-empty-dir-cleanup to debian-base Busybox has more severe CVE issues. This is part of the effort described in kep kubernetes/enhancements#900, we can't change the ibase image to distroless directly since a bash script is used. Moved to debian-base and put it as a temp exception for now. --- cluster/images/etcd-empty-dir-cleanup/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cluster/images/etcd-empty-dir-cleanup/Dockerfile b/cluster/images/etcd-empty-dir-cleanup/Dockerfile index 4eb59960214..7398f4e4642 100644 --- a/cluster/images/etcd-empty-dir-cleanup/Dockerfile +++ b/cluster/images/etcd-empty-dir-cleanup/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM busybox +FROM k8s.gcr.io/debian-base:v1.0.0 COPY etcdctl etcd-empty-dir-cleanup.sh / RUN chmod a+rx /etcdctl /etcd-empty-dir-cleanup.sh