Distroless Image support
The Splunk Operator supports a distroless image that contains only the essential components required to run the operator, without a shell or package manager, resulting in a smaller and more secure image.
As part of enhancing security and reducing the attack surface of the Splunk Operator container, the Splunk Operator supports a distroless image. The distroless image contains only the essential components required to run the Splunk Operator, without a shell or package manager.
How to use the distroless image
You can identify the distroless image by the -distroless suffix in its tag. For example: splunk/splunk-operator:<version>-distroless.
To use the distroless image, update the manager container image in the splunk-operator-controller-manager deployment:
# Replace this with the distroless image name
image: splunk/splunk-operator:<version>-distrolessIf you use a private registry, retag and push the distroless image appropriately, and update the deployment image reference.