Switching autoscaler-webhook to utilize distroless as base Image (#3276)

* Migrating autoscaler-webhook to utilize Distroless as Base Image

* Necessary changes

* autoscaler-webhook tag increased

---------

Co-authored-by: Mark Mandel <markmandel@google.com>

examples/autoscaler-webhook/Dockerfile

@@ -14,22 +14,16 @@
 
 # Gather dependencies and build the executable
 FROM golang:1.20.4 as builder
-WORKDIR /go/src/autoscaler-webhook
+WORKDIR /go/src
+COPY . agones.dev/agones
 
-COPY examples/autoscaler-webhook/main.go .
-COPY . /go/src/agones.dev/agones
-RUN go mod init && go mod tidy
+WORKDIR /go/src/agones.dev/agones/examples/autoscaler-webhook
 RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o server .
 
 # Create the final image that will run the webhook server for FleetAutoscaler webhook policy
-FROM alpine:3.14
-RUN adduser -D -u 1000 server
+FROM gcr.io/distroless/static-debian11:nonroot
 
-COPY --from=builder /go/src/autoscaler-webhook \
-                    /home/server
-
-RUN chown -R server /home/server && \
-    chmod o+x /home/server/server
-
-USER 1000
-ENTRYPOINT /home/server/server
+COPY --from=builder /go/src/agones.dev/agones/examples/autoscaler-webhook/server /
+
+USER nonroot:nonroot
+ENTRYPOINT ["/server"]

examples/autoscaler-webhook/Makefile

@@ -27,7 +27,7 @@ REPOSITORY = us-docker.pkg.dev/agones-images/examples
 
 mkfile_path := $(abspath $(lastword $(MAKEFILE_LIST)))
 project_path := $(dir $(mkfile_path))
-autoscaler_webhook_tag = $(REPOSITORY)/autoscaler-webhook:0.6
+autoscaler_webhook_tag = $(REPOSITORY)/autoscaler-webhook:0.7
 root_path = $(realpath $(project_path)/../..)
 
 #   _____                    _

examples/autoscaler-webhook/autoscaler-service-tls.yaml

@@ -54,7 +54,7 @@ spec:
           secretName: autoscalersecret
       containers:
       - name: autoscaler-webhook
-        image: us-docker.pkg.dev/agones-images/examples/autoscaler-webhook:0.6
+        image: us-docker.pkg.dev/agones-images/examples/autoscaler-webhook:0.7
         imagePullPolicy: Always
         volumeMounts:
         - mountPath: /home/service/certs

examples/autoscaler-webhook/autoscaler-service.yaml

@@ -50,7 +50,7 @@ spec:
       #serviceAccount: autoscaler-webhook
       containers:
       - name: autoscaler-webhook
-        image: us-docker.pkg.dev/agones-images/examples/autoscaler-webhook:0.6
+        image: us-docker.pkg.dev/agones-images/examples/autoscaler-webhook:0.7
         imagePullPolicy: Always
         ports:
         - name: autoscaler

examples/autoscaler-webhook/go.mod

@@ -0,0 +1,50 @@
+module autoscaler-webhook
+
+go 1.20
+
+require agones.dev/agones v1.33.0
+
+require (
+	github.com/fsnotify/fsnotify v1.6.0 // indirect
+	github.com/go-logr/logr v1.2.3 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/protobuf v1.5.2 // indirect
+	github.com/google/gofuzz v1.1.0 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.15.2 // indirect
+	github.com/hashicorp/hcl v1.0.0 // indirect
+	github.com/joonix/log v0.0.0-20180502111528-d2d3f2f4a806 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/magiconair/properties v1.8.1 // indirect
+	github.com/mattbaird/jsonpatch v0.0.0-20171005235357-81af80346b1a // indirect
+	github.com/mitchellh/mapstructure v1.4.1 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/pelletier/go-toml v1.2.0 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/sirupsen/logrus v1.8.1 // indirect
+	github.com/spf13/afero v1.2.2 // indirect
+	github.com/spf13/cast v1.3.0 // indirect
+	github.com/spf13/jwalterweatherman v1.0.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/spf13/viper v1.7.0 // indirect
+	github.com/subosito/gotenv v1.2.0 // indirect
+	golang.org/x/net v0.8.0 // indirect
+	golang.org/x/sys v0.6.0 // indirect
+	golang.org/x/text v0.8.0 // indirect
+	google.golang.org/genproto v0.0.0-20230301171018-9ab4bdc49ad5 // indirect
+	google.golang.org/grpc v1.53.0 // indirect
+	google.golang.org/protobuf v1.28.1 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/ini.v1 v1.51.0 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	k8s.io/api v0.26.6 // indirect
+	k8s.io/apimachinery v0.26.6 // indirect
+	k8s.io/client-go v0.26.6 // indirect
+	k8s.io/klog/v2 v2.90.1 // indirect
+	k8s.io/utils v0.0.0-20221107191617-1a15be271d1d // indirect
+	sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+	sigs.k8s.io/yaml v1.3.0 // indirect
+)
+
+replace agones.dev/agones => ../../