Backport of security: update alpine base image to 3.19 into release/1…

….4.x (#4020) backport of commit 45c71ab Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
hashicorp · May 24, 2024 · da624f4 · da624f4
1 parent 780b8e5
commit da624f4
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/.changelog/4016.txt b/.changelog/4016.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+Bump Dockerfile base image for `consul-k8s-control-plane` to `alpine:3.19`.
+```
diff --git a/control-plane/Dockerfile b/control-plane/Dockerfile
@@ -23,7 +23,7 @@ RUN CGO_ENABLED=0 go install github.com/hashicorp/go-discover/cmd/discover@21457
 # dev copies the binary from a local build
 # -----------------------------------
 # BIN_NAME is a requirement in the hashicorp docker github action 
-FROM alpine:3.18 AS dev
+FROM alpine:3.19 AS dev
 
 # NAME and VERSION are the name of the software in releases.hashicorp.com
 # and the version to download. Example: NAME=consul VERSION=1.2.3.
@@ -79,7 +79,7 @@ CMD /bin/${BIN_NAME}
 # We don't rebuild the software because we want the exact checksums and
 # binary signatures to match the software and our builds aren't fully
 # reproducible currently.
-FROM alpine:3.18 AS release-default
+FROM alpine:3.19 AS release-default
 
 ARG BIN_NAME=consul-k8s-control-plane
 ARG CNI_BIN_NAME=consul-cni