Timtech4u

Repositories Requiring Bitnami Legacy Image Updates

CRITICAL - Already Applied Live Fixes (Cluster-level patches done)

1. energywebfoundation/argocd-ecr-credentials-updater

• File: templates/cronJob.yaml
• Line: ~23
• Change: bitnami/kubectl:1.23 → bitnamisecure/kubectl:1.23
• Status: Live fix applied to clusters, repo update still needed

HIGH PRIORITY - Currently Used in Production

Timtech4u

🔍 Comprehensive Bitnami Legacy Images Audit - Energy Web Foundation

Audit Date: $(date)
Clusters Analyzed: dev-cluster, staging-k8s-misc, staging-v2-cluster
Total Namespaces Scanned: 47+ namespaces

📊 Executive Summary

Cluster	Legacy Images Found	Critical Issues	Status

Timtech4u

Bitnami Image Migration Action Plan for Energy Web Foundation

🚨 CRITICAL ISSUE IDENTIFIED

ArgoCD ECR credentials updater is failing due to bitnami/kubectl:1.23 image not found, causing authentication issues for pulling ECR images.

📊 Current Status Analysis

Dev Cluster (k8s-misc)

FAILING COMPONENTS:

• ❌ argocd-ecr-credentials-updater - CronJob using bitnami/kubectl:1.23 (CRITICAL)

Timtech4u

FROM node:8.9.4-alpine
RUN apk add --no-cache git
RUN npm install -g yo generator-hubot
RUN adduser -D hubot
USER hubot
WORKDIR /home/hubot
RUN yo hubot --owner="Tim <[email protected]>" --name="hubot" --description="Hubot for slack" --adapter="slack" --defaults
RUN npm install --save hubot-slack
RUN npm install --save hubot-google-images
RUN npm install --save hubot-google-translate

Timtech4u

confirmations:
    required: 4 # choose the number of confirmations you require
policyengine.simple:
    fixedGasPrice: null
    gasOracle:
        mode: connector

Timtech4u

steps:
  # build and push container
- name: "gcr.io/kaniko-project/executor:latest"
  args: ["--cache=true", "--cache-ttl=48h", "--destination=gcr.io/$PROJECT_ID/$REPO_NAME:$BRANCH_NAME"]
  # deploy container image to Cloud Run with env vars
- name: "gcr.io/cloud-builders/gcloud"
  args: ['run', 'deploy', '$REPO_NAME', '--image', 'gcr.io/$PROJECT_ID/$REPO_NAME:$BRANCH_NAME', '--region', 'europe-west4', '--allow-unauthenticated', '--platform', 'managed', '--update-env-vars', 'NODE_ENV=prod']
  # set full traffic to latest revision (needed if rollback was performed)
- name: "gcr.io/cloud-builders/gcloud"
  args: ['run', 'services', 'update-traffic', '$REPO_NAME', '--to-latest', '--region', 'europe-west4', '--platform', 'managed']

Timtech4u

# File: cloudbuild.yaml
steps:
    # build the container image
  - name: 'gcr.io/cloud-builders/docker'
    args: [ 'build', '-t', 'gcr.io/$PROJECT_ID/demo-app', '.' ]
    # push the container image
  - name: 'gcr.io/cloud-builders/docker'
    args: [ 'push', 'gcr.io/$PROJECT_ID/demo-app']
    # deploy to Cloud Run
  - name: "gcr.io/cloud-builders/gcloud"

Timtech4u

# File: .gitlab-ci.yml
image: docker:latest

stages:
  - deploy

deploy:
  stage: deploy
  image: google/cloud-sdk
  services:

Timtech4u

# garden.yml
kind: Project
name: flask-app
environments:
- name: dev
  providers:
  - name: kubernetes
    context: gke_fullstackgcp_us-central1-c_my-dev-cluster
    buildMode: cluster-docker
defaultEnvironment: dev

Timtech4u

# Configure GCP project
provider "google" {
  project = "terraform-cr"
}

# Deploy image to Cloud Run
resource "google_cloud_run_service" "mywebapp" {
  name     = "mywebapp"
  location = "us-central1"
  template {