kubectl: convert to distroless
Summary
As part of FY24Q4 Distroless two GitLab first-party UBI co... (gitlab-org&11826), our best targets includes the kubectl
container.
The kubectl
container serves a very simple purpose, has few requirements, and does not contain a specific GitLab first-party component. It is a key part of the cloud native deployment, which can quickly be moved to a thoroughly minimized, and converted to use distroless patterns.
Acceptance
-
All requirements for the intended function of the container are determined -
The containers contents are the bare minimum required to meet these requirements -
The containers are based upon a 'distroless' base -
ubi-micro -
(optional) debian(ish) (this may be a deboostrap
, or other means such as Google's distroless base)
-
Edited by Clemens Beck