Skip to content

Conversation

Copy link
Contributor

Copilot AI commented Sep 19, 2025

Since we are only using latest tags here, we can use bitnamisecure instead of bitnamilegacy

Changes Made

django-secret-init/job.yaml: Changed bitnamilegacy/kubectl:latestbitnamisecure/kubectl:latest
sse-secret-init/job.yaml: Changed bitnami/kubectl:latestbitnamisecure/kubectl:latest

Both files are Kubernetes Job templates that use kubectl containers to create secrets during pre-install/pre-upgrade hooks. The changes are minimal and surgical - only the image references were updated. The functionality remains exactly the same, but now uses the secure image variant.

Impact

  • ✅ No functional changes to the chart behavior
  • ✅ Improved security through use of secure image variants
  • ✅ Maintains backward compatibility
  • ✅ No breaking changes for existing deployments

The secret creation logic and kubectl commands remain identical - only the container image source has been updated to use the more secure variant.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Copilot AI changed the title [WIP] Replace use of bitnamilegacy/kubectl:latest or bitnami/kubectl:latest with bitnamisecure/kubectl:latest Replace kubectl images with bitnamisecure/kubectl:latest for enhanced security Sep 19, 2025
Copilot AI requested a review from gagantrivedi September 19, 2025 02:35
Copilot finished work on behalf of gagantrivedi September 19, 2025 02:35
Copilot AI requested a review from gagantrivedi September 19, 2025 02:46
Copilot finished work on behalf of gagantrivedi September 19, 2025 02:46
Copilot AI requested a review from gagantrivedi September 19, 2025 02:52
Copilot finished work on behalf of gagantrivedi September 19, 2025 02:52
@gagantrivedi gagantrivedi changed the title Replace kubectl images with bitnamisecure/kubectl:latest for enhanced security fix: fetch kubectl from bitnamisecure Sep 19, 2025
@gagantrivedi gagantrivedi marked this pull request as ready for review September 19, 2025 03:11
@gagantrivedi gagantrivedi requested a review from a team as a code owner September 19, 2025 03:11
@gagantrivedi gagantrivedi enabled auto-merge (squash) September 19, 2025 07:41
@gagantrivedi gagantrivedi merged commit e96b4ec into main Sep 19, 2025
5 of 7 checks passed
@gagantrivedi gagantrivedi deleted the copilot/fix-4402710d-6c44-4fc0-a881-1c7a617b7408 branch September 19, 2025 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants