Timtech4u

Automated Bitnami Migration PR Creation

Quick Start

I've created a comprehensive bash script that will help you create all 18 PRs for the bitnami migration across the energywebfoundation organization.

Prerequisites

1. GitHub CLI installed and authenticated:

Timtech4u

Bitnami Legacy Images Migration - Pull Request Action Plan

Total PRs Required: 18 across energywebfoundation organization
Migration Pattern: bitnami/[service] → bitnamisecure/[service]

🚨 IMMEDIATE PRIORITY (1 PR)

PR #1: argocd-ecr-credentials-updater

Repository: energywebfoundation/argocd-ecr-credentials-updater
Branch: fix/migrate-to-bitnamisecure-kubectl

Timtech4u

Complete Bitnami Legacy Images Audit - energywebfoundation Organization

Total Files Found: 26 files containing bitnami image references
Repositories Affected: 18 repositories
Search Scope: All public and accessible private repositories in energywebfoundation org

COMPLETE REPOSITORY LIST REQUIRING UPDATES

1. argocd-ecr-credentials-updater ⚠️ CRITICAL - LIVE FIXED

• File: templates/cronJob.yaml

Timtech4u

Repositories Requiring Bitnami Legacy Image Updates

CRITICAL - Already Applied Live Fixes (Cluster-level patches done)

1. energywebfoundation/argocd-ecr-credentials-updater

• File: templates/cronJob.yaml
• Line: ~23
• Change: bitnami/kubectl:1.23 → bitnamisecure/kubectl:1.23
• Status: Live fix applied to clusters, repo update still needed

HIGH PRIORITY - Currently Used in Production

Timtech4u

🔍 Comprehensive Bitnami Legacy Images Audit - Energy Web Foundation

Audit Date: $(date)
Clusters Analyzed: dev-cluster, staging-k8s-misc, staging-v2-cluster
Total Namespaces Scanned: 47+ namespaces

📊 Executive Summary

Cluster	Legacy Images Found	Critical Issues	Status

Timtech4u

Bitnami Image Migration Action Plan for Energy Web Foundation

🚨 CRITICAL ISSUE IDENTIFIED

ArgoCD ECR credentials updater is failing due to bitnami/kubectl:1.23 image not found, causing authentication issues for pulling ECR images.

📊 Current Status Analysis

Dev Cluster (k8s-misc)

FAILING COMPONENTS:

• ❌ argocd-ecr-credentials-updater - CronJob using bitnami/kubectl:1.23 (CRITICAL)

Timtech4u

FROM node:8.9.4-alpine
RUN apk add --no-cache git
RUN npm install -g yo generator-hubot
RUN adduser -D hubot
USER hubot
WORKDIR /home/hubot
RUN yo hubot --owner="Tim <timothy@fireflies.ai>" --name="hubot" --description="Hubot for slack" --adapter="slack" --defaults
RUN npm install --save hubot-slack
RUN npm install --save hubot-google-images
RUN npm install --save hubot-google-translate

Timtech4u

confirmations:
    required: 4 # choose the number of confirmations you require
policyengine.simple:
    fixedGasPrice: null
    gasOracle:
        mode: connector

Timtech4u

steps:
  # build and push container
- name: "gcr.io/kaniko-project/executor:latest"
  args: ["--cache=true", "--cache-ttl=48h", "--destination=gcr.io/$PROJECT_ID/$REPO_NAME:$BRANCH_NAME"]
  # deploy container image to Cloud Run with env vars
- name: "gcr.io/cloud-builders/gcloud"
  args: ['run', 'deploy', '$REPO_NAME', '--image', 'gcr.io/$PROJECT_ID/$REPO_NAME:$BRANCH_NAME', '--region', 'europe-west4', '--allow-unauthenticated', '--platform', 'managed', '--update-env-vars', 'NODE_ENV=prod']
  # set full traffic to latest revision (needed if rollback was performed)
- name: "gcr.io/cloud-builders/gcloud"
  args: ['run', 'services', 'update-traffic', '$REPO_NAME', '--to-latest', '--region', 'europe-west4', '--platform', 'managed']

Timtech4u

# File: cloudbuild.yaml
steps:
    # build the container image
  - name: 'gcr.io/cloud-builders/docker'
    args: [ 'build', '-t', 'gcr.io/$PROJECT_ID/demo-app', '.' ]
    # push the container image
  - name: 'gcr.io/cloud-builders/docker'
    args: [ 'push', 'gcr.io/$PROJECT_ID/demo-app']
    # deploy to Cloud Run
  - name: "gcr.io/cloud-builders/gcloud"