Skip to content

Conversation

@stanley-cheung
Copy link
Contributor

@stanley-cheung stanley-cheung commented May 24, 2023

Sergii noticed that the GCP Observability Integration testing docker image in the microsvcs-testing project popped up on the vulnerabilities dashboard. So we need to fix which base docker image we use. Similar to the fix in #10191

  • Perform software update so that we install patches for latest vulnerabilities.

@stanley-cheung
Copy link
Contributor Author

Adhoc test run to make sure the Observability Integration tests are still green: http://sponge/2e8c6d78-8f55-4d2a-baf7-4ba04c1f41ad

@stanley-cheung
Copy link
Contributor Author

FYI @sergiitk

WORKDIR /grpc-java
COPY . .

# Intentionally after the app COPY to force the update on each build.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This doesn't do what you think it does, because this isn't part of the final image.

COPY . .

# Intentionally after the app COPY to force the update on each build.
# Update Ubuntu system packages:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes - this needs to be moved to the second stage of the build.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done. Thanks for the comment.

@ejona86 ejona86 requested a review from sergiitk May 25, 2023 22:26
Copy link
Member

@sergiitk sergiitk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just one question.

@ejona86 ejona86 merged commit 4277867 into grpc:master May 30, 2023
@stanley-cheung stanley-cheung deleted the o11y-testing-integration-dev branch May 30, 2023 17:25
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 29, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants