Skip to content

Draft: Switch NGINX image from alpine to UBI

Mitchell Nielsen requested to merge gitlab-org/cloud-native/charts/gitlab-ingress-nginx:sh-use-ubi-for-nginx into main

UBI offers a number of advantages, though the image size is a bit larger:

  • Makes it possible for NGINX to run in a FIPS environment. The OpenSSL libraries are FIPS-validated.

  • Provides more security over Alpine. Red Hat addresses security issues faster Than Alpine.

  • Alpine's use of musl may cause slightly different behavior than glibc (e.g. with DNS).

Copied from https://github.com/kubernetes/ingress-nginx/pull/8524

Changelog: changed

Merge request reports