RedHat UBI as the Base Image for All Containerized Applications

[rksharma95]

Feature Request

I propose that we adopt RedHat Universal Base Image (UBI) as our standard base image for all containerized applications (KubeArmor, KubeArmor-Init, KubeArmor Controller, and KubeArmor Relay) going forward. We've already built and get certified the Redhat UBI based Container Images for KubeArmor and KubeArmor-Init.

UBI, a minimal, but comprehensive, operating system image designed to be used as a base image for building container images that are portable and certified to work with Red Hat software. Adopting UBI as base image brings advantages:

• Security: UBI inherits most features of RHEL and follows updates lifecycle for the packages same as RHEL.
• Support: Red Hat provides support for UBI and a large community to get help with any issues.
• Licensing: UBI ensure compliance with Red Hat's open source licensing requirements.

for more information please refer
what is redhat ubi and
red-hat-developer-ubi_ebook.pdf

Tasks

Preview Give feedback

1. Identify requirements (packages and capabilities) for each application.
2. Build and Test UBI based Container Images (except kubearmor) on Docker, CRI-O and Containerd
3. Build Container Image to be run as non-root user. (It's one of the requirements to get certified by redhat)
4. Update CI workflow to Build and Push UBI based images
5. Get Container Images Certified by RedHat.
6. chore(build): update dockerfile to use redhat ubi as base image kubearmor-relay-server#35
   +0
7. chore(build):Update Dockerfiles to use redhat ubi as base image #1348
   +0
8. Add CI workflow to test KubeArmor UBI image to be tested on bpflsm-crio env