-
Story
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
None
-
False
-
-
False
-
None
-
3
-
None
-
None
-
None
The goal of this user story is to change the base image for ExternalDNS operand and operator to use UBI-minimal variant. The change concerns both downstream and Konflux Containerfiles. Upstream Dockerfile is out of scope. Corresponding renovate config has to be updated too.
Quote from the email which initiated the ask:
Action Required: Transitioning Red Hat Operator Base Image to UBI-minimal by OCP 4.21 GA
We're launching an important initiative to enhance the security posture of our products and improve the customer experience.
To significantly reduce CVE noise stemming from packages in the current base image, we will be transitioning all Red Hat OLM-managed operators and operand images to UBI9-minimal as their base image.
This project is a key step in addressing customer feedback regarding vulnerability scan output and needs to be completed by the OCP 4.21 GA date (currently planned for February 2026).
Note that the tag expected is latest with a digest pinned to a concrete version (FAQ).
- blocks
-
-
- Closed
-
- links to
- mentioned on
(1 links to, 14 mentioned on)