Hello!
I'm working with a Docker based microservice that consumes pubsub messages and have run into an issue. In order to reduce the risk of malicious activity in our pods we have removed setuptools and pip amongst other things from the Dockerimage. This does however create a problem when using packages that depend on the google.core_api since it has a dependency on pkg_resources. At the moment this forces us to have setuptools installed in the pods running google services dependent on the core api.
Would it be possible to remove the few dependencies on pkg_resources in the core-api?
Thanks in advance!
Hello!
I'm working with a Docker based microservice that consumes pubsub messages and have run into an issue. In order to reduce the risk of malicious activity in our pods we have removed
setuptoolsandpipamongst other things from the Dockerimage. This does however create a problem when using packages that depend on thegoogle.core_apisince it has a dependency onpkg_resources. At the moment this forces us to havesetuptoolsinstalled in the pods running google services dependent on the core api.Would it be possible to remove the few dependencies on
pkg_resourcesin the core-api?Thanks in advance!