Updating baseimage to pick up assorted security fixes.

[cheftako]

Going from Debian11 to Debian12 base image.

[cheftako]

/assign @justinsb

[justinsb]

Thanks for doing this.

I was confused myself so looked it up, and the static images contain no binaries:

https://github.com/GoogleContainerTools/distroless/blob/main/base/README.md

Statically compiled applications (Go) that do not require libc can use the gcr.io/distroless/static image, which contains:

ca-certificates
A /etc/passwd entry for a root user
A /tmp directory
tzdata

But of course the ca-certificates do occasionally change.

/approve
/lgtm

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cheftako, justinsb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [cheftako]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment