fix(components): Replace base image to reduce vulnerabilities

Googler · Google Cloud Pipeline Components maintainers · commit 3e44099d010d · 2023-02-07T15:13:04.000-08:00
fix(components): Limit google-api-core version to avoid timeout introduced in googleapis/python-api-core#462 PiperOrigin-RevId: 507613610
diff --git a/components/google-cloud/google_cloud_pipeline_components/container/Dockerfile b/components/google-cloud/google_cloud_pipeline_components/container/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Base image to use for this docker
-FROM gcr.io/google-appengine/python:latest
+FROM gcr.io/ml-pipeline/debian-py37:latest
 
 WORKDIR /root
 
@@ -30,7 +30,7 @@ RUN pip3 install -U google-api-python-client
 RUN pip3 install -U "apache_beam[gcp]<2.34.0"
 
 # Required for sklearn/train_test_split_jsonl
-RUN pip3 install -U "fsspec>=0.7.4" "gcsfs>=0.6.0" "pandas<=1.3.5" "scikit-learn<=1.0.2"
+RUN pip3 install -U "fsspec>=0.7.4" "gcsfs>=0.6.0" "pandas<=1.3.5" "scikit-learn<=1.0.2" "google-api-core<=1.33.2"
 
 # Install main package (switch to using pypi package for official release)
 RUN pip3 install "git+https://github.com/kubeflow/pipelines.git#egg=google-cloud-pipeline-components&subdirectory=components/google-cloud"
