release icon indicating copy to clipboard operation
release copied to clipboard

migrate distroless-iptables image to new golang iptables-wrapper

Open BenTheElder opened this issue 1 year ago • 9 comments

What would you like to be added:

We should adopt https://github.com/kubernetes-sigs/iptables-wrappers/pull/6 / https://github.com/kubernetes-sigs/iptables-wrappers/issues/4

Why is this needed:

This will allow us to cleanup TODOs following #2502 to minimize the image further.

We can drop the shell and related utilities and keep only adding iptables binaries and the new go-based wrapper binary.

This will reduce the vulnerability surface further.

BenTheElder avatar Apr 02 '23 19:04 BenTheElder

I want to simplify the code a little bit and then I'll tag a release, but the "API" shouldn't really change at all so you can at least test against the current HEAD (https://github.com/kubernetes-sigs/iptables-wrappers/commit/5792812d9e5a5bb7f22d79d557bbfeece253343d)

danwinship avatar Apr 03 '23 12:04 danwinship

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle stale
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Jul 02 '23 12:07 k8s-triage-robot

/remove-lifecycle stale /assign

cpanato avatar Jul 03 '23 05:07 cpanato

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle stale
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Jan 23 '24 16:01 k8s-triage-robot

/remove-lifecycle stale

xmudrii avatar Jan 23 '24 18:01 xmudrii

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle stale
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Apr 22 '24 18:04 k8s-triage-robot

/remove-lifecycle stale

xmudrii avatar Apr 22 '24 21:04 xmudrii

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue as fresh with /remove-lifecycle stale
  • Close this issue with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Jul 21 '24 22:07 k8s-triage-robot

/lifecycle frozen

xmudrii avatar Jul 22 '24 16:07 xmudrii