From 8a2eb45a68660cc5d8c736dc77a3dc03fe5cf5ca Mon Sep 17 00:00:00 2001 From: Hugo Shaka Date: Thu, 25 May 2023 11:25:31 +0200 Subject: [PATCH] Update CHANGELOG.md to include Helm image change (#26822) * Update CHANGELOG.md to include Helm image change * Apply suggestions from code review Co-authored-by: Paul Gottschling --------- Co-authored-by: Paul Gottschling --- CHANGELOG.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 78e0fb2fd16..383a6257938 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -172,6 +172,23 @@ Teleport container images are no longer being published to it. Users should use the public ECR registry: https://goteleport.com/docs/installation/#docker. +#### Helm chart uses `distroless`-based container image by default + +Starting with Teleport 13, the Helm charts `teleport-cluster` and `teleport-kube-agent` +are deploying distroless Teleport images by default. Those images are slimmer +and more secure but contain less tooling (e.g. neither `bash` nor +`apt` are available). + +The Debian-based images are deprecated and will be removed in Teleport 14. +The chart image can be reverted back to the Debian-based images by setting: +```yaml +image: "public.ecr.aws/gravitational/teleport" +``` + +For debugging purposes, a "debug" image is available and contains BusyBox, +which includes a shell and most common POSIX executables: +`public.ecr.aws/gravitational/teleport-distroless`. + ## 12.3.0 (05/01/23) This release of Teleport contains multiple improvements and bug fixes.