kubernetes / kubernetes/release
migrate distroless-iptables image to new golang iptables-wrapper
Open
area/release-eng
kind/feature
lifecycle/frozen
needs-priority
sig/release
- Dominant language
- Go
- Stars
- 504
- Forks
- 556
- Avg merge
- 18h 43m
- Merged PRs (30d)
- 33
Description
#### What would you like to be added:
We should adopt https://github.com/kubernetes-sigs/iptables-wrappers/pull/6 / https://github.com/kubernetes-sigs/iptables-wrappers/issues/4
#### Why is this needed:
This will allow us to cleanup TODOs following #2502 to minimize the image further.
We can drop the shell and related utilities and keep only adding iptables binaries and the new go-based wrapper binary.
This will reduce the vulnerability surface further.
Contributor guide
Assessment
This issue has not been assessed yet.