Merge pull request #4380 from zhzhuang-zju/automated-cherry-pick-of-#…

…4376-upstream-release-1.7

Automated cherry pick of #4376: bump alpine to 3.18.5 to address CVE concerns

cluster/images/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18.3
+FROM alpine:3.18.5
 
 ARG BINARY
 

cluster/images/buildx.Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18.3
+FROM alpine:3.18.5
 
 ARG BINARY
 ARG TARGETPLATFORM

pkg/karmadactl/cmdinit/kubernetes/deploy.go

@@ -78,7 +78,7 @@ func init() {
 	karmadaRelease = releaseVer.ReleaseVersion()
 
 	DefaultCrdURL = fmt.Sprintf("https://github.com/karmada-io/karmada/releases/download/%s/crds.tar.gz", releaseVer.ReleaseVersion())
-	DefaultInitImage = "docker.io/alpine:3.15.1"
+	DefaultInitImage = "docker.io/alpine:3.18.5"
 	DefaultKarmadaSchedulerImage = fmt.Sprintf("docker.io/karmada/karmada-scheduler:%s", releaseVer.ReleaseVersion())
 	DefaultKarmadaControllerManagerImage = fmt.Sprintf("docker.io/karmada/karmada-controller-manager:%s", releaseVer.ReleaseVersion())
 	DefualtKarmadaWebhookImage = fmt.Sprintf("docker.io/karmada/karmada-webhook:%s", releaseVer.ReleaseVersion())
@@ -579,7 +579,7 @@ func (i *CommandInitOption) kubeControllerManagerImage() string {
 // get etcd-init image
 func (i *CommandInitOption) etcdInitImage() string {
 	if i.ImageRegistry != "" && i.EtcdInitImage == DefaultInitImage {
-		return i.ImageRegistry + "/alpine:3.15.1"
+		return i.ImageRegistry + "/alpine:3.18.5"
 	}
 	return i.EtcdInitImage
 }

pkg/karmadactl/cmdinit/kubernetes/deploy_test.go

@@ -363,7 +363,7 @@ func TestEtcdInitImage(t *testing.T) {
 				ImageRegistry: "my-registry",
 				EtcdInitImage: DefaultInitImage,
 			},
-			expected: "my-registry/alpine:3.15.1",
+			expected: "my-registry/alpine:3.18.5",
 		},
 		{
 			name: "EtcdInitImage is set to a non-default value",