fix(components): Replace base image to reduce vulnerabilities

Googler · Google Cloud Pipeline Components maintainers · commit ac393fe01cba · 2023-02-09T13:21:46.000-08:00
fix(components): Limit google-api-core version to avoid timeout introduced in googleapis/python-api-core#462 PiperOrigin-RevId: 507613610
diff --git a/components/google-cloud/google_cloud_pipeline_components/container/Dockerfile b/components/google-cloud/google_cloud_pipeline_components/container/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Base image to use for this docker
-FROM gcr.io/google-appengine/python:latest
+FROM gcr.io/ml-pipeline/debian-py37:latest
 
 WORKDIR /root
 
@@ -29,6 +29,9 @@ RUN pip3 install -U google-api-python-client
 # b/238481913: Pinning the version of apache_beam to below 2.34 for now
 RUN pip3 install -U "apache_beam[gcp]<2.34.0"
 
+# b/267359259:  Pinning the version of google-api-core to below 1.34.0 for now
+RUN pip3 install -U "google-api-core<1.34.0"
+
 # Required for sklearn/train_test_split_jsonl
 RUN pip3 install -U "fsspec>=0.7.4" "gcsfs>=0.6.0" "pandas<=1.3.5" "scikit-learn<=1.0.2"
 
