Skip to content
代码片段 群组 项目
未验证 提交 088c2eb7 编辑于 作者: Luke Young's avatar Luke Young 提交者: GitHub
浏览文件

chore(deps): [security] bump docker/prod/confluentinc/cc-base from...

chore(deps): [security] bump docker/prod/confluentinc/cc-base from v17.0.0-jdk-17-adoptium to v18.9.0-jdk-17 (#6845)

*TL;DR This pull-request upgrades the base operating system (docker) image used by your service to reduce security vulnerabilities/risk.*

## What
This change updates your service's `Dockerfile` base image to the _latest_ [cc-base](https://golinks.io/cc-base-upgrade) image:

Bumps docker/prod/confluentinc/cc-base from v17.0.0-jdk-17-adoptium to v18.9.0-jdk-17,
which updates the JDK from 17.0.3 to 17.0.4.

## Details
You can find the full changelog for the various cc-base images at:
* [cc-base-alpine](https://github.com/confluentinc/cc-base-alpine/releases)
* [cc-base-debian](https://github.com/confluentinc/cc-base-debian/releases)
* [cc-base-ubuntu](https://github.com/confluentinc/cc-base-ubuntu/releases) 
* [cc-base (JDK)](https://github.com/confluentinc/cc-docker-base/releases)

Sumit Sharma provisioned a kafka cluster in cpd with the new image and
sanity checked the behavior. We will rely on the nightly cloud limits
given that it's a jdk patch update.

Reviewers: Ismael Juma <ismael@juma.me.uk>, Sumit Sharma <ssharma@confluent.io>
上级 ecda999b
No related branches found
No related tags found
无相关合并请求
......@@ -30,7 +30,7 @@ RUN tar -xzvf /home/gradle/core/build/distributions/kafka_*-ce.tgz --strip-compo
# Specify linux/amd64 directly for crossbuild via m1 macs.
# This is necessary because cc-rollingupgrade-ctl is amd64 only.
FROM --platform=linux/amd64 519856050701.dkr.ecr.us-west-2.amazonaws.com/docker/prod/confluentinc/cc-base:v17.0.0-jdk-17-adoptium
FROM --platform=linux/amd64 519856050701.dkr.ecr.us-west-2.amazonaws.com/docker/prod/confluentinc/cc-base:v18.9.0-jdk-17
ARG version
ARG confluent_version
......
0% 加载中 .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册