Skip to content

Conversation

@vbuddhavarapu-infoblox
Copy link
Contributor

@vbuddhavarapu-infoblox vbuddhavarapu-infoblox commented Jan 7, 2026

  • Updated values.yaml: docker.io/bitnami/etcd:3.6.4-debian-12-r4
  • Updated values-production.yaml: docker.io/bitnami/etcd:3.6.4-debian-12-r4
  • Updated Chart.lock with helm dependency update

Note: Bitnami has removed most public bitnami/* images from Docker Hub,
including bitnami/etcd.
Using legacy images that are still available on Docker Hub.

Vulnerabilities scan results -
before changes
Critical - 17
High - 73
Total - 90

After changes
Critical - 0
High - 32
Total - 32

Total 52 vulns got reduced

- Updated etcd image from docker.io/bitnami/etcd to quay.io/coreos/etcd:v3.6.7
- Updated both values.yaml (3.5.25-debian-12-r0 -> v3.6.7) and values-production.yaml (3.4.14-debian-10-r0 -> v3.6.7)
- Updated comments to reference CoreOS etcd repository
- Refreshed Chart.lock with helm dependency update
- Addresses reviewer feedback to use first-party etcd image
@vbuddhavarapu-infoblox vbuddhavarapu-infoblox requested a review from a team as a code owner January 7, 2026 10:17
@vbuddhavarapu-infoblox vbuddhavarapu-infoblox requested review from Calebjh and kd7lxl and removed request for Calebjh January 7, 2026 10:22
@vbuddhavarapu-infoblox vbuddhavarapu-infoblox changed the title PTCI-3293: Switch from Bitnami etcd to CoreOS first-party etcd image PTCI-3293: Update etcd to Bitnami 3.6.4-debian-12-r4 (legacy) Jan 7, 2026
@vbuddhavarapu-infoblox vbuddhavarapu-infoblox changed the title PTCI-3293: Update etcd to Bitnami 3.6.4-debian-12-r4 (legacy) PTCI-3293: Fixing vulns update etcd to Bitnami 3.6.4-debian-12-r4 (legacy) Jan 7, 2026
Copy link
Contributor

@kd7lxl kd7lxl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This differs from what you said you were going to do: #568 (comment)

- Updated values.yaml: docker.io/bitnami/etcd:3.6.4-debian-12-r4
- Updated values-production.yaml: docker.io/bitnami/etcd:3.6.4-debian-12-r4
- Updated Chart.lock with helm dependency update

Note: Bitnami has removed most public bitnami/* images from Docker Hub,
including bitnami/etcd.
Using legacy images that are still available on Docker Hub.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants