Migrate away from bitnami #26

New issue

Open

opened 2025-12-08 12:51:42 +00:00 by Ghostinvisible-forgejo-org · 7 comments

Ghostinvisible-forgejo-org commented

2025-12-08 12:51:42 +00:00

Bitnami images and charts on docker hub now have rate limits, so we should migrate away or use different mirrors

TODO:

cert-manager helm chart
bitnami/nginx docker image #847 8d3c79165a be577abf3f
kube-prometheus helm chart
bitnami/git docker image

Bitnami images and charts on docker hub now have rate limits, so we should migrate away or use different mirrors - #230 - https://github.com/bitnami/charts/issues/30853 - https://code.forgejo.org/forgejo/oci-mirror/pulls/30 **TODO**: - [x] `cert-manager` helm chart - [x] `bitnami/nginx` docker image #847 8d3c79165a1edb222f6840912a8a551168eadcc4 be577abf3ff2816abf11834f63ce01a8a44f091a - [ ] `kube-prometheus` helm chart - [ ] `bitnami/git` docker image

👍 1

Ghostinvisible-forgejo-org commented

2025-12-08 12:51:42 +00:00

Author

Alternate is to mirror them to a different public registry.

viceice commented

2025-12-08 12:51:42 +00:00

this now needs higher priority because bitnami stops publishing public Images

https://github.com/bitnami/charts/issues/35164

this now needs higher priority because bitnami stops publishing public Images https://github.com/bitnami/charts/issues/35164

earl-warren commented

2025-12-08 12:51:42 +00:00

git --no-pager grep -nH -i 'bitnami' | grep -v '#'
flux/apps/charts/static-site/templates/deployment.yaml:23:          image: public.ecr.aws/bitnami/git:2.50.1
flux/apps/charts/static-site/templates/deployment.yaml:38:          image: public.ecr.aws/bitnami/nginx:1.26
flux/apps/forgejo-code/ddos.yaml:53:          image: public.ecr.aws/bitnami/nginx:1.26
flux/apps/forgejo-code/ddos.yaml:65:          image: public.ecr.aws/bitnami/nginx:1.26
flux/apps/monitoring/kube-prometheus.yaml:15:        name: bitnami-charts
flux/infrastructure/controllers/cert-manager.yaml:18:        name: bitnami-charts
flux/infrastructure/repos/bitnami-charts.yaml:4:  name: bitnami-charts
flux/infrastructure/repos/bitnami-charts.yaml:9:  url: oci://ghcr.io/visualon/bitnamicharts
flux/infrastructure/repos/kustomization.yaml:7:  - bitnami-charts.yaml
renovate.json:13:      "matchPackageNames": ["code.forgejo.org/forgejo-helm/forgejo", "ghcr.io/traefik/helm/traefik", "**{,/}bitnamicharts/*"],

``` git --no-pager grep -nH -i 'bitnami' | grep -v '#' flux/apps/charts/static-site/templates/deployment.yaml:23: image: public.ecr.aws/bitnami/git:2.50.1 flux/apps/charts/static-site/templates/deployment.yaml:38: image: public.ecr.aws/bitnami/nginx:1.26 flux/apps/forgejo-code/ddos.yaml:53: image: public.ecr.aws/bitnami/nginx:1.26 flux/apps/forgejo-code/ddos.yaml:65: image: public.ecr.aws/bitnami/nginx:1.26 flux/apps/monitoring/kube-prometheus.yaml:15: name: bitnami-charts flux/infrastructure/controllers/cert-manager.yaml:18: name: bitnami-charts flux/infrastructure/repos/bitnami-charts.yaml:4: name: bitnami-charts flux/infrastructure/repos/bitnami-charts.yaml:9: url: oci://ghcr.io/visualon/bitnamicharts flux/infrastructure/repos/kustomization.yaml:7: - bitnami-charts.yaml renovate.json:13: "matchPackageNames": ["code.forgejo.org/forgejo-helm/forgejo", "ghcr.io/traefik/helm/traefik", "**{,/}bitnamicharts/*"], ```

earl-warren commented

2025-12-08 12:51:43 +00:00

Added a link to https://code.forgejo.org/forgejo/oci-mirror/pulls/30 for cross reference purposes.

viceice commented

2025-12-08 12:51:43 +00:00

Ok, we need to move to official cert-manager chart, because the bitnami chart uses v1.18.2 which has vulnerabillities.
Will do while migrating my own.

https://github.com/cert-manager/cert-manager/releases

Ok, we need to move to official cert-manager chart, because the bitnami chart uses v1.18.2 which has vulnerabillities. Will do while migrating my own. https://github.com/cert-manager/cert-manager/releases

viceice commented

2025-12-08 12:51:43 +00:00