CBP-31849 | Upgraded the distorless image

Dockerfile

@@ -54,7 +54,7 @@ USER ${UID}:${GID}
 ENTRYPOINT ["/manager"]
 
 
-FROM gcr.io/distroless/base-debian12:latest@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8 AS distroless
+FROM gcr.io/distroless/base-debian12:latest@sha256:347a41e7f263ea7f7aba1735e5e5b1439d9e41a9f09179229f8c13ea98ae94cf AS distroless
 ARG UID
 ARG GID
 

Dockerfile-refresher

@@ -54,7 +54,7 @@ USER ${UID}:${GID}
 ENTRYPOINT ["/manager"]
 
 
-FROM gcr.io/distroless/base-debian12:latest@sha256:9e9b50d2048db3741f86a48d939b4e4cc775f5889b3496439343301ff54cdba8 AS distroless
+FROM gcr.io/distroless/base-debian12:latest@sha256:347a41e7f263ea7f7aba1735e5e5b1439d9e41a9f09179229f8c13ea98ae94cf AS distroless
 ARG UID
 ARG GID
 

deploy/charts/imagepullsecrets/Chart.yaml

@@ -9,5 +9,5 @@ maintainers:
 sources:
 - https://github.com/banzaicloud/backyards
 
-version: 0.3.16
-appVersion: 0.3.16
+version: 0.3.17
+appVersion: 0.3.17

deploy/charts/imagepullsecrets/values.yaml

@@ -20,7 +20,7 @@ securityContext:
       - ALL
 image:
   repository: ghcr.io/banzaicloud/imagepullsecrets
-  tag: v0.3.16
+  tag: v0.3.17
   pullPolicy: IfNotPresent
 
 imagePullSecrets: []

scripts/install_envtest.sh

@@ -22,6 +22,28 @@ if [ ! -e bin/"${target_dir_name}" ]; then
     if [ "$os" == "darwin" ] && [ "$arch" == "arm64" ]; then
         arch="amd64"
     fi
-    curl -sSL "https://go.kubebuilder.io/test-tools/$version/$os/$arch" | tar -xz -C /tmp/
-    mv "/tmp/kubebuilder" bin/"${target_dir_name}"
-fi
+    # Download to temp file first and validate before extracting
+    temp_file=$(mktemp)
+    if curl -sSL "https://go.kubebuilder.io/test-tools/$version/$os/$arch" -o "$temp_file" && file "$temp_file" | grep -q "gzip compressed"; then
+        tar -xz -C /tmp/ -f "$temp_file"
+        mv "/tmp/kubebuilder" bin/"${target_dir_name}"
+    else
+        # Fallback: try setup-envtest to obtain the binaries if the download fails or is not a valid gzip file
+        if go install sigs.k8s.io/controller-runtime/tools/setup-envtest@latest 2>/dev/null && setup-envtest use ${version} --bin-dir /tmp/envtest 2>/dev/null; then
+            mkdir -p bin/"${target_dir_name}/bin"
+            find /tmp/envtest -name "etcd" -o -name "kube-apiserver" -o -name "kubectl" | while read -r binary; do
+                cp "${binary}" bin/"${target_dir_name}/bin/"
+            done
+            chmod -R 755 /tmp/envtest 2>/dev/null || true
+            rm -rf /tmp/envtest
+        else
+            # Fail explicitly when we can't obtain real binaries
+            echo "ERROR: Failed to install envtest tools. Both download and setup-envtest failed."
+            echo "This likely means:"
+            echo "1. The kubebuilder.io URL is not accessible or returns invalid data"
+            echo "2. setup-envtest tool installation/execution failed"
+            exit 1
+        fi
+    fi
+    rm -f "$temp_file"
+fi