Merge pull request #4600 from Fish-pro/automated-cherry-pick-of-#4598…

…-upstream-release-1.7

Automated cherry pick of #4598: bump alpine to 3.19.1 to address CVE concerns

cluster/images/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18.5
+FROM alpine:3.19.1
 
 ARG BINARY
 

cluster/images/buildx.Dockerfile

@@ -1,4 +1,4 @@
-FROM alpine:3.18.5
+FROM alpine:3.19.1
 
 ARG BINARY
 ARG TARGETPLATFORM

pkg/karmadactl/cmdinit/kubernetes/deploy.go

@@ -78,7 +78,7 @@ func init() {
 	karmadaRelease = releaseVer.ReleaseVersion()
 
 	DefaultCrdURL = fmt.Sprintf("https://github.com/karmada-io/karmada/releases/download/%s/crds.tar.gz", releaseVer.ReleaseVersion())
-	DefaultInitImage = "docker.io/alpine:3.18.5"
+	DefaultInitImage = "docker.io/alpine:3.19.1"
 	DefaultKarmadaSchedulerImage = fmt.Sprintf("docker.io/karmada/karmada-scheduler:%s", releaseVer.ReleaseVersion())
 	DefaultKarmadaControllerManagerImage = fmt.Sprintf("docker.io/karmada/karmada-controller-manager:%s", releaseVer.ReleaseVersion())
 	DefualtKarmadaWebhookImage = fmt.Sprintf("docker.io/karmada/karmada-webhook:%s", releaseVer.ReleaseVersion())
@@ -579,7 +579,7 @@ func (i *CommandInitOption) kubeControllerManagerImage() string {
 // get etcd-init image
 func (i *CommandInitOption) etcdInitImage() string {
 	if i.ImageRegistry != "" && i.EtcdInitImage == DefaultInitImage {
-		return i.ImageRegistry + "/alpine:3.18.5"
+		return i.ImageRegistry + "/alpine:3.19.1"
 	}
 	return i.EtcdInitImage
 }

pkg/karmadactl/cmdinit/kubernetes/deploy_test.go

@@ -363,7 +363,7 @@ func TestEtcdInitImage(t *testing.T) {
 				ImageRegistry: "my-registry",
 				EtcdInitImage: DefaultInitImage,
 			},
-			expected: "my-registry/alpine:3.18.5",
+			expected: "my-registry/alpine:3.19.1",
 		},
 		{
 			name: "EtcdInitImage is set to a non-default value",