fix: namespace GHCR images under scality/zenko/ to avoid permission conflicts

The pre-existing ghcr.io/scality/mongodb-sharded package was linked to
the old scality/mongodb-sharded repository, causing 403 Forbidden on
push from Zenko CI.

Move all images under the Zenko repo namespace:
- ghcr.io/scality/zenko/mongodb-sharded
- ghcr.io/scality/zenko/mongodb-exporter
- ghcr.io/scality/zenko/os-shell

Also update upstream vendoring references from the defunct
scality/mongodb-sharded repo to bitnami/containers.

Author: benzekrimaha

.github/workflows/build-mongodb-images.yaml

@@ -36,22 +36,22 @@ jobs:
         include:
           - name: mongodb-sharded-8.0
             context: solution-base/images/mongodb-sharded/8.0/debian-12
-            image: scality/mongodb-sharded
+            image: scality/zenko/mongodb-sharded
             semver_tag: "8.0.13"
             minor_tag: "8.0"
           - name: mongodb-sharded-8.2
             context: solution-base/images/mongodb-sharded/8.2/debian-12
-            image: scality/mongodb-sharded
+            image: scality/zenko/mongodb-sharded
             semver_tag: "8.2.6"
             minor_tag: "8.2"
           - name: mongodb-exporter
             context: solution-base/images/mongodb-sharded/mongodb-exporter/0/debian-12
-            image: scality/mongodb-exporter
+            image: scality/zenko/mongodb-exporter
             semver_tag: "0.49.0"
             minor_tag: ""
           - name: os-shell
             context: solution-base/images/mongodb-sharded/os-shell/12/debian-12
-            image: scality/os-shell
+            image: scality/zenko/os-shell
             semver_tag: "12"
             minor_tag: ""
     steps:

solution-base/deps.yaml

@@ -3,13 +3,13 @@
 # yq eval 'sortKeys(.)' -i deps.yaml
 mongodb-sharded:
   sourceRegistry: ghcr.io
-  image: scality/mongodb-sharded
+  image: scality/zenko/mongodb-sharded
   tag: "8.0.13"
 mongodb-sharded-exporter:
   sourceRegistry: ghcr.io
-  image: scality/mongodb-exporter
+  image: scality/zenko/mongodb-exporter
   tag: "0.49.0"
 mongodb-shell:
   sourceRegistry: ghcr.io
-  image: scality/os-shell
+  image: scality/zenko/os-shell
   tag: "12"

solution-base/images/mongodb-sharded/README.md

@@ -7,10 +7,10 @@ while we transition to the official MongoDB images.
 
 | Image | Directory | Registry | Tags |
 |-------|-----------|----------|------|
-| mongodb-sharded 8.0 | `8.0/debian-12/` | `ghcr.io/scality/mongodb-sharded` | `8.0.13`, `8.0` |
-| mongodb-sharded 8.2 | `8.2/debian-12/` | `ghcr.io/scality/mongodb-sharded` | `8.2.6`, `8.2` |
-| mongodb-exporter | `mongodb-exporter/0/debian-12/` | `ghcr.io/scality/mongodb-exporter` | `0.49.0` |
-| os-shell | `os-shell/12/debian-12/` | `ghcr.io/scality/os-shell` | `12` |
+| mongodb-sharded 8.0 | `8.0/debian-12/` | `ghcr.io/scality/zenko/mongodb-sharded` | `8.0.13`, `8.0` |
+| mongodb-sharded 8.2 | `8.2/debian-12/` | `ghcr.io/scality/zenko/mongodb-sharded` | `8.2.6`, `8.2` |
+| mongodb-exporter | `mongodb-exporter/0/debian-12/` | `ghcr.io/scality/zenko/mongodb-exporter` | `0.49.0` |
+| os-shell | `os-shell/12/debian-12/` | `ghcr.io/scality/zenko/os-shell` | `12` |
 
 ## Directory Structure
 
@@ -42,20 +42,20 @@ solution-base/images/mongodb-sharded/
 ## Vendored Scripts
 
 The `prebuildfs/` and `rootfs/` directories are vendored from
-`https://github.com/scality/mongodb-sharded` and committed to Git.
+`https://github.com/bitnami/containers` and committed to Git.
 The Dockerfiles depend on them (`COPY prebuildfs /`, `COPY rootfs /`).
 
 To re-vendor after upstream changes:
 
 ```bash
-git clone --depth 1 https://github.com/scality/mongodb-sharded.git /tmp/mongodb-sharded
+git clone --depth 1 https://github.com/bitnami/containers.git /tmp/bitnami-containers
 
-# Copy for each image (example for 8.0):
-cp -r /tmp/mongodb-sharded/8.0/debian-12/prebuildfs solution-base/images/mongodb-sharded/8.0/debian-12/
-cp -r /tmp/mongodb-sharded/8.0/debian-12/rootfs     solution-base/images/mongodb-sharded/8.0/debian-12/
-# Repeat for 8.2, mongodb-exporter, os-shell as needed
+# Copy for each image (example for 8.2):
+cp -r /tmp/bitnami-containers/bitnami/mongodb-sharded/8.2/debian-12/prebuildfs solution-base/images/mongodb-sharded/8.2/debian-12/
+cp -r /tmp/bitnami-containers/bitnami/mongodb-sharded/8.2/debian-12/rootfs     solution-base/images/mongodb-sharded/8.2/debian-12/
+# Repeat for other images as needed
 
-rm -rf /tmp/mongodb-sharded
+rm -rf /tmp/bitnami-containers
 git diff   # review changes
 ```
 
@@ -64,22 +64,22 @@ git diff   # review changes
 ```bash
 # MongoDB 8.0
 docker build \
-  -t ghcr.io/scality/mongodb-sharded:8.0.13 \
+  -t ghcr.io/scality/zenko/mongodb-sharded:8.0.13 \
   solution-base/images/mongodb-sharded/8.0/debian-12
 
 # MongoDB 8.2
 docker build \
-  -t ghcr.io/scality/mongodb-sharded:8.2.6 \
+  -t ghcr.io/scality/zenko/mongodb-sharded:8.2.6 \
   solution-base/images/mongodb-sharded/8.2/debian-12
 
 # MongoDB Exporter
 docker build \
-  -t ghcr.io/scality/mongodb-exporter:0.49.0 \
+  -t ghcr.io/scality/zenko/mongodb-exporter:0.49.0 \
   solution-base/images/mongodb-sharded/mongodb-exporter/0/debian-12
 
 # OS Shell
 docker build \
-  -t ghcr.io/scality/os-shell:12 \
+  -t ghcr.io/scality/zenko/os-shell:12 \
   solution-base/images/mongodb-sharded/os-shell/12/debian-12
 ```
 
@@ -89,7 +89,7 @@ For multi-arch builds (amd64 + arm64):
 docker buildx build \
   --platform linux/amd64,linux/arm64 \
   --push \
-  -t ghcr.io/scality/mongodb-sharded:8.0.13 \
+  -t ghcr.io/scality/zenko/mongodb-sharded:8.0.13 \
   solution-base/images/mongodb-sharded/8.0/debian-12
 ```
 
@@ -100,7 +100,7 @@ builds and pushes multi-arch images automatically.
 
 - **Trigger**: Push to paths under `solution-base/images/mongodb-sharded/**`,
   or manual `workflow_dispatch`.
-- **Registry**: `ghcr.io/scality/`
+- **Registry**: `ghcr.io/scality/zenko/`
 - **Base image**: `minideb:bookworm` is pinned by digest — update it manually
   when needed by changing the `FROM` line in each Dockerfile.
 
@@ -119,17 +119,17 @@ builds and pushes multi-arch images automatically.
    ```yaml
    mongodb-sharded:
      sourceRegistry: ghcr.io
-     image: scality/mongodb-sharded
+     image: scality/zenko/mongodb-sharded
      tag: "8.0.14"
    ```
 4. Run CI or wait for push trigger.
 5. Validate with Zenko e2e/CTST.
 
 ### Vendoring upstream script changes
 
-1. Check changes at `https://github.com/scality/mongodb-sharded/commits/main/`.
-2. Clone the upstream repo and copy the updated `prebuildfs/` / `rootfs/`
-   directories (see "Vendored Scripts" section above).
+1. Check changes at `https://github.com/bitnami/containers/tree/main/bitnami/mongodb-sharded`.
+2. Compare upstream changes against our vendored scripts and copy relevant
+   updated `prebuildfs/` / `rootfs/` files.
 3. Review `git diff` for relevant changes.
 4. Commit, push, test.
 

solution-base/mongodb/how_to_upgrade.md

@@ -27,15 +27,15 @@ Image sources live under `solution-base/images/mongodb-sharded/`.
    ```yaml
    mongodb-sharded:
      sourceRegistry: ghcr.io
-     image: scality/mongodb-sharded
+     image: scality/zenko/mongodb-sharded
      tag: "<NEW_VERSION>"
    ```
 5. Validate with Zenko e2e/CTST before merging.
 
 ### Re-vendoring upstream Bitnami scripts
 
-When `scality/mongodb-sharded` upstream changes need to be pulled in,
-clone the repo and copy the updated `prebuildfs/` / `rootfs/` directories
+When upstream Bitnami script changes need to be pulled in,
+compare `bitnami/containers` and copy the updated `prebuildfs/` / `rootfs/` directories
 into the corresponding image directories. See
 `solution-base/images/mongodb-sharded/README.md` for the detailed steps.
 
@@ -78,7 +78,7 @@ our use case.
 
 9. When bumping the Helm chart, also check whether the image Dockerfile or
 Bitnami scripts changed for that chart version. If so, re-vendor the scripts
-from `scality/mongodb-sharded` and rebuild the images before deploying the
+from `bitnami/containers` and rebuild the images before deploying the
 new chart (see `solution-base/images/mongodb-sharded/README.md`).
 
 10. Passing CI tests is not enough, you must also perform an upgrade check with