Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save Timtech4u/b5f60d626e3246a760d1a81e1bafdfa9 to your computer and use it in GitHub Desktop.
Save Timtech4u/b5f60d626e3246a760d1a81e1bafdfa9 to your computer and use it in GitHub Desktop.
Complete energywebfoundation Organization Bitnami Audit - 18 Repositories, 26 Files Need Updates

Complete Bitnami Legacy Images Audit - energywebfoundation Organization

Total Files Found: 26 files containing bitnami image references
Repositories Affected: 18 repositories
Search Scope: All public and accessible private repositories in energywebfoundation org

COMPLETE REPOSITORY LIST REQUIRING UPDATES

1. argocd-ecr-credentials-updater ⚠️ CRITICAL - LIVE FIXED

  • File: templates/cronJob.yaml
  • Issue: bitnami/kubectl:1.23
  • Status: Live cluster fix applied, repository PR still needed
  • Priority: HIGH (documentation/consistency)

2. erpc-helm ⚠️ HIGH PRIORITY

  • Files: values.yaml, README.md
  • Issues: bitnami/kubectl:1.21 in kubectl section
  • Priority: HIGH (production Helm chart)

3. operating-envelope-dle-node ⚠️ HIGH PRIORITY

  • File: helm/sandbox/substrate-node-0/values.yaml
  • Issue: bitnami/kubectl:latest
  • Priority: HIGH (production use)

4. did-auth-proxy 🔧 DEVELOPMENT

  • Files:
    • nginx/Dockerfile
    • docker-compose.yaml
    • docker-compose.dev.yaml
    • docker-compose.two-backends.yaml
  • Issues: bitnami/nginx, bitnami/redis
  • Priority: MEDIUM (development/local use)

5. did-auth-proxy-helm 📦 HELM CHART

  • Files:
    • values-nginx.yaml.disabled
    • values-redis.yaml.disabled
    • index.yaml
  • Issues: bitnami/nginx, bitnami/redis
  • Priority: MEDIUM (Helm chart templates)

6. ewx-infrastructure 🏗️ TERRAFORM

  • Files:
    • testnet-us-east-1-resources/helm.tf
    • infra-tooling-us-east-1-resources/helm.tf
    • mainnet-us-east-1-resources/helm.tf
  • Issues: bitnami/sealed-secrets-controller
  • Priority: HIGH (infrastructure as code)

7. terraform-projects-us-east-1-secops 🏗️ TERRAFORM

  • File: resources/k8s_sealed_secrets.tf
  • Issue: bitnami/sealed-secrets-controller
  • Priority: HIGH (security infrastructure)

8. terraform-projects-us-west-2 🏗️ TERRAFORM

  • File: resources/ew_dos_sealed_secrets.tf
  • Issue: bitnami/sealed-secrets-controller
  • Priority: HIGH (infrastructure)

9. ddhub-aemo-deployment 📋 DEPLOYMENT CONFIG

  • File: DDHub/QA/postgres/values.yaml
  • Issue: bitnami/postgresql
  • Priority: MEDIUM (deployment configuration)

10. ddhub-deployments 📋 DEPLOYMENT CONFIG

  • Files:
    • messagebroker/ddhub-messagebroker-dev/values-auth.yaml
    • messagebroker/ddhub-messagebroker-demo/values-auth.yaml
  • Issues: bitnami/redis
  • Priority: MEDIUM (deployment configurations)

11. argo-cd ⚙️ CONFIG FILES

  • Files:
    • aws/us-west-2/k8s-misc/argocd-install/argocd/values.yaml
    • azure/west-us-2/aemo-aks-cluster-dev/argocd-install/argocd/values.yaml
  • Issues: bitnami/redis
  • Priority: MEDIUM (ArgoCD configurations)

12. ewx-dev-network-deployments 🚀 DEV DEPLOYMENTS

  • File: dev/staking-dapp/values.yaml
  • Issue: bitnami/nginx
  • Priority: MEDIUM (development deployments)

13. km-monorepo 🔐 KEY MANAGEMENT

  • File: devops/helm-charts/key-management/values.yaml
  • Issues: bitnami/postgresql, bitnami/redis
  • Priority: MEDIUM (Helm chart)

14. generic-microservices-helm 📦 HELM CHART

  • File: index.yaml
  • Issue: References to bitnami charts
  • Priority: LOW (Helm chart index)

15. gpsaas-helm-chart 📦 HELM CHART

  • File: index.yaml
  • Issue: References to bitnami charts
  • Priority: LOW (Helm chart index)

16. ew-ecosystem-gitbook 📚 DOCUMENTATION

  • File: energy-solutions/.../deploy-postgres-using-a-helm-chart.md
  • Issue: bitnami/postgresql in documentation
  • Priority: LOW (documentation)

17. ew-saas 🔧 DEVELOPMENT

  • File: Tiltfile
  • Issue: registry.hub.docker.com/bitnami/ reference
  • Priority: LOW (development tooling)

18. ggp-deployments & marketplace-deployments 📋 DEPLOYMENT

  • Files: postgres/Chart.yaml (both repos)
  • Issue: Bitnami PostgreSQL Helm chart dependency
  • Priority: MEDIUM (deployment dependencies)

MIGRATION PRIORITY MATRIX

🚨 IMMEDIATE (Already Fixed Live, Repo Updates Needed)

  1. argocd-ecr-credentials-updater - Repository consistency

🔴 HIGH PRIORITY (Production Impact)

  1. erpc-helm - Production Helm chart
  2. operating-envelope-dle-node - Production substrate node
  3. ewx-infrastructure - Infrastructure Terraform (3 files)
  4. terraform-projects-us-east-1-secops - Security infrastructure
  5. terraform-projects-us-west-2 - Core infrastructure

🟡 MEDIUM PRIORITY (Deployment Configs)

  1. ddhub-aemo-deployment - QA environment
  2. ddhub-deployments - Message broker configs
  3. argo-cd - ArgoCD configurations
  4. ewx-dev-network-deployments - Dev network
  5. km-monorepo - Key management Helm chart
  6. ggp-deployments & marketplace-deployments - PostgreSQL dependencies

🟢 LOW PRIORITY (Development/Documentation)

  1. did-auth-proxy - Docker compose files
  2. did-auth-proxy-helm - Disabled Helm values
  3. generic-microservices-helm & gpsaas-helm-chart - Helm indexes
  4. ew-ecosystem-gitbook - Documentation
  5. ew-saas - Development tooling

SUMMARY STATISTICS

Category Repositories Files Priority Level
Infrastructure/Terraform 3 6 HIGH
Helm Charts 6 8 HIGH-MEDIUM
Deployment Configs 5 7 MEDIUM
Development Tools 3 4 LOW
Documentation 1 1 LOW
TOTAL 18 26 -

MIGRATION PATTERN

All repositories should migrate from:

  • bitnami/[service]bitnamisecure/[service]
  • Consider official upstream images where appropriate
  • Update Helm chart dependencies to use bitnamisecure registry

NEXT ACTIONS

  1. Create PRs for HIGH priority repositories (6 repos)
  2. Plan maintenance windows for MEDIUM priority (6 repos)
  3. Schedule LOW priority updates (6 repos)
  4. Set up automated scanning to prevent future legacy image usage
  5. Monitor bitnamisecure registry for any future migrations

Status: 18 repositories identified requiring bitnami image updates across the entire energywebfoundation organization.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment