Upcoming changes to Bitnami images and charts

[felpasl]

https://github.com/bitnami/charts/issues/35164

Important Notice: Upcoming Changes to the Bitnami Catalog

Bitnami has announced a transition to Bitnami Secure Images. As part of this change, the etcd Bitnami container images will no longer be available after 28/08.

Please consider this when planning deployments or updates that rely on the current Bitnami etcd images.

[brunopadz]

It turns out they postponed it to Sep 29th.

An insecure workaroud is to use the etcd image from bitnamilegacy repository.

etcd:
  enabled: true
  image:
    repository: bitnamilegacy/etcd

[manueljishi]

Hey! While using the bitnamilegacy repository could be an option to keep this chart alive for some time, those bitnami images won't be getting any security updates or application updates, meaning in the long run it will be unsafe to run this apisix helm charts. Are there any plans to migrate to another etcd distribution? Thank you

[nickswiss]

Bumping this, we are passed the date and etcd has began failing pulling due to this issue.

[manueljishi]

To mitigate the issue i've developed a custom etcd kustomize service. Maybe we could use those templates to fix the helm chart? Or create a new etcd helm chart that apisix uses?

[brunopadz]

I think creating a new Helm Chart is a good approach, not only for APISix but also for the broader community.

[joshdcu]

Note that:

• the source code for the Helm chart itself will continue to be available under the Apache 2 license...

Q: What will happen to the Helm charts source code? A: No changes are being made to the helm chart source code on https://github.com/bitnami/charts. It continues to be available under the Apache 2 license. - [bitnami/charts#35164]

• images for etcd are published to quay.io/coreos/etcd based on the official documentation.

So the work will primarily be to:

• refactor the open source Bitnami Helm chart to be suitable for this different image.
• package the refactored Helm chart and publish it to a Helm repository / OCI registry for easy access.
• repeat the above steps depending on changes to the image/Helm chart.

[brunopadz]

Hey @joshdcu, thanks for putting together this task list! 🙂

Do you think it'd make sense to create a GitHub org so we can keep everything organized from the start? I can also create a Discord server if that helps us involve more people interested in contributing.

Let me know what you think, happy to help push this forward!

[joshdcu]

Hi @brunopadz, I took a step back today and searched the web to see if the online community has already worked on a Helm chart for etcd. I found a bunch of alternatives available on Artifact Hub.

In particular, this one looks promising! It's open source (licensed under Apache 2) and claims to work out of the box with the official etcd images.

Interestingly, the organization behind this (and other) Helm charts is positioning these Helm charts as a free and open source alternative to Bitnami's Helm charts. See their blog posts here and here.

With this new information, I think we should redirect our efforts to adopting and contributing to this project instead. How does this sound? Would also love to know what the APSIX maintainers like @Baoyuantop think!

[brunopadz]

Awesome!

Yeah, that totally makes sense. Let’s put some effort into adapting this alternative into the APISIX Helm Chart then.