Add nftables binary to the distroless-iptables image

dependencies.yaml

@@ -468,7 +468,7 @@ dependencies:
       match: "DEBIAN_BASE_VERSION: 'bookworm-v((([0-9]+)\\.([0-9]+)\\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?)'"
 
   - name: "registry.k8s.io/build-image/distroless-iptables"
-    version: v0.3.3
+    version: v0.4.0
     refPaths:
     - path: images/build/distroless-iptables/Makefile
       match: IMAGE_VERSION\ \?=\ v((([0-9]+)\.([0-9]+)\.([0-9]+)(?:-([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?)

images/build/distroless-iptables/Makefile

@@ -18,7 +18,7 @@ REGISTRY?="gcr.io/k8s-staging-build-image"
 IMAGE=$(REGISTRY)/distroless-iptables
 
 TAG ?= $(shell git describe --tags --always --dirty)
-IMAGE_VERSION ?= v0.3.3
+IMAGE_VERSION ?= v0.4.0
 CONFIG ?= distroless
 BASEIMAGE ?= debian:bookworm-slim
 GORUNNER_VERSION ?= v2.3.1-go1.21.2-bookworm.0

images/build/distroless-iptables/distroless/Dockerfile

@@ -31,6 +31,7 @@ RUN apt -y update && \
     ebtables    \
     ipset       \
     iptables    \
+    nftables    \
     kmod        && \
     `# below binaries and dash are used by iptables-wrapper-installer.sh` \
     /stage-binary-and-deps.sh "${STAGE_DIR}" /bin/dash \

images/build/distroless-iptables/variants.yaml

@@ -1,5 +1,5 @@
 variants:
   distroless:
     CONFIG: 'distroless'
-    IMAGE_VERSION: 'v0.3.3'
+    IMAGE_VERSION: 'v0.4.0'
     GORUNNER_VERSION: 'v2.3.1-go1.21.2-bookworm.0'