chore(*) update base image for kuma-dp

[lobkovilya]

Summary

Update base image to alpine:3.14

Full changelog

• update base image

Issues resolved

N/A

Documentation

N/A

Testing

• Unit tests
• E2E tests
• Manual testing on Universal
• Manual testing on Kubernetes

Backwards compatibility

• Add backport-to-stable label if the code is backwards compatible. Otherwise, list breaking changes.

[jpeach]

Why glibc? What is the origin and support policy for the image?

[jakubdyszkiewicz]

@jpeach it's the base image that envoy-alipne uses, so we were using it implicitly already.

[jpeach]

@jpeach it's the base image that envoy-alipne uses, so we were using it implicitly already.

I'm pretty uncomfortable depending on a base image where we don't know the origin and maintainer, or have any information about its quality of provenance. Its one thing for envoy to take on that risk, it's another thing for us to take it on without any analysis that I can see.

Do we expect this change to be permanent? I see that the base image for envoy-alpine is updated in main, so we would get this change for free with envoy 1.20.

Finally, was any comparison made with other base images? Ubuntu doesn't look like it would be substantially smaller and would improve the ability to troubleshoot envoy containers. Google distroless would be substantially smaller.

$ docker images
REPOSITORY                        TAG       IMAGE ID       CREATED        SIZE
ubuntu                            latest    597ce1600cf4   3 days ago     72.8MB
envoyproxy/envoy-alpine           v1.18.4   2497804fd5d4   5 weeks ago    84.6MB
gcr.io/distroless/base-debian11   latest    96c9f71abf99   51 years ago   20.3MB
gcr.io/distroless/base            latest    96c9f71abf99   51 years ago   20.3MB
gcr.io/distroless/base-debian10   latest    4b3996585481   51 years ago   19.2MB

[jpeach]

Well, I underestimated the size of the envoy binary:

$ docker images
REPOSITORY                    TAG       IMAGE ID       CREATED       SIZE
envoyproxy/envoy-alpine       v1.19.1   dedc47289dc0   5 weeks ago   84.2MB
envoyproxy/envoy-distroless   v1.19.1   416825efe80a   5 weeks ago   83.3MB
envoyproxy/envoy              v1.19.1   ccc78547fdb0   5 weeks ago   134MB