Replace bitnamilegacy/os-shell (#1155)

michalad1 · web-flow · commit d88e675c5891 · 2025-08-22T08:02:02.000Z
diff --git a/deploy/charts/impt/chart/charts/etcd/templates/cronjob.yaml b/deploy/charts/impt/chart/charts/etcd/templates/cronjob.yaml
@@ -45,7 +45,7 @@ spec:
               image: {{ include "etcd.volumePermissions.image" . }}
               imagePullPolicy: {{ .Values.volumePermissions.image.pullPolicy | quote }}
               command:
-                - /bin/bash
+                - /bin/sh
                 - -ec
                 - |
                   find /snapshots -type d -exec chown -v {{ .Values.containerSecurityContext.runAsUser }} {} +
diff --git a/deploy/charts/impt/chart/charts/etcd/templates/statefulset.yaml b/deploy/charts/impt/chart/charts/etcd/templates/statefulset.yaml
@@ -91,7 +91,8 @@ spec:
           image: {{ include "etcd.volumePermissions.image" . }}
           imagePullPolicy: {{ .Values.volumePermissions.image.pullPolicy | quote }}
           command:
-            - /bin/bash
+            - /bin/sh
+          args:
             - -ec
             - |
               find /bitnami/etcd -type d -exec chown -v {{ .Values.containerSecurityContext.runAsUser }}:{{ .Values.podSecurityContext.fsGroup }} {} +
diff --git a/deploy/charts/impt/chart/charts/etcd/values.yaml b/deploy/charts/impt/chart/charts/etcd/values.yaml
@@ -663,9 +663,9 @@ volumePermissions:
   ## @param volumePermissions.image.digest Init container volume-permissions image digest in the way sha256:aa.... Please note this parameter, if set, will override the tag
   ##
   image:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+    registry: quay.io
+    repository: prometheus
+    name: busybox:glibc
     ## @param volumePermissions.image.pullPolicy Init container volume-permissions image pull policy
     ##
     pullPolicy: IfNotPresent
diff --git a/deploy/charts/impt/chart/charts/flyte-core/templates/admin/init-job.yaml b/deploy/charts/impt/chart/charts/flyte-core/templates/admin/init-job.yaml
@@ -291,7 +291,7 @@ spec:
         {{- end }}
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
diff --git a/deploy/charts/impt/chart/charts/flyte-core/templates/datacatalog/init-job.yaml b/deploy/charts/impt/chart/charts/flyte-core/templates/datacatalog/init-job.yaml
@@ -78,7 +78,7 @@ spec:
               mountPath: "/init"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/deploy/charts/impt/chart/charts/flyte-core/templates/flytescheduler/init-job.yaml b/deploy/charts/impt/chart/charts/flyte-core/templates/flytescheduler/init-job.yaml
@@ -82,7 +82,7 @@ spec:
               mountPath: "/init"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/deploy/charts/impt/chart/charts/flyte-core/values.yaml b/deploy/charts/impt/chart/charts/flyte-core/values.yaml
@@ -41,10 +41,10 @@ global:
     registry: quay.io
     repository: prometheus
     name: busybox:glibc
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/deploy/charts/impt/chart/charts/kafka/values.yaml b/deploy/charts/impt/chart/charts/kafka/values.yaml
@@ -878,9 +878,9 @@ volumePermissions:
   ## @param volumePermissions.image.pullSecrets Init container volume-permissions image pull secrets
   ##
   image:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+    registry: quay.io
+    repository: prometheus
+    name: busybox:glibc
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
diff --git a/deploy/charts/impt/chart/charts/lgtm-stack/charts/loki/templates/init-job.yaml b/deploy/charts/impt/chart/charts/lgtm-stack/charts/loki/templates/init-job.yaml
@@ -102,7 +102,7 @@ spec:
               value: "loki-ruler"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/deploy/charts/impt/chart/charts/lgtm-stack/charts/loki/values.yaml b/deploy/charts/impt/chart/charts/lgtm-stack/charts/loki/values.yaml
@@ -19,10 +19,10 @@ global:
   dnsService: "kube-dns"
   # -- configures DNS service namespace
   dnsNamespace: "kube-system"
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/deploy/charts/impt/chart/charts/spice-db/templates/init-job.yaml b/deploy/charts/impt/chart/charts/spice-db/templates/init-job.yaml
@@ -127,7 +127,7 @@ spec:
                   name: "{{ .Release.Namespace }}-postgresql"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext: {{ toYaml .Values.securityContext | nindent 12 }}
           resources:
             {{- toYaml .Values.initResources | nindent 12 }}
diff --git a/deploy/charts/impt/chart/charts/spice-db/values.yaml b/deploy/charts/impt/chart/charts/spice-db/values.yaml
@@ -58,10 +58,10 @@ global:
     registry: quay.io
     repository: prometheus
     name: busybox:glibc
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/deploy/charts/impt/chart/values.yaml b/deploy/charts/impt/chart/values.yaml
@@ -58,10 +58,6 @@ global:
   docker_namespace: impp
   forceNamespace:
     flyte: flyte
-  debian: 
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
   kubectl: 
     registry: docker.io
     repository: bitnamilegacy
diff --git a/interactive_ai/services/dataset_ie/chart/templates/init-job.yaml b/interactive_ai/services/dataset_ie/chart/templates/init-job.yaml
@@ -117,7 +117,7 @@ spec:
               value: "temporaryfiles"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/interactive_ai/services/dataset_ie/chart/values.yaml b/interactive_ai/services/dataset_ie/chart/values.yaml
@@ -65,10 +65,10 @@ global:
     registry: quay.io
     repository: prometheus
     name: busybox:glibc
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/interactive_ai/services/jobs/chart/templates/init-job.yaml b/interactive_ai/services/jobs/chart/templates/init-job.yaml
@@ -211,7 +211,7 @@ spec:
               value: "readWriteAnyDatabase"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/interactive_ai/services/jobs/chart/values.yaml b/interactive_ai/services/jobs/chart/values.yaml
@@ -144,7 +144,7 @@ global:
     registry: docker.io
     repository: bitnamilegacy
     name: kubectl:1.31.0
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
diff --git a/interactive_ai/services/project_ie/chart/templates/init-job.yaml b/interactive_ai/services/project_ie/chart/templates/init-job.yaml
@@ -117,7 +117,7 @@ spec:
               value: "temporaryfiles"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/interactive_ai/services/project_ie/chart/values.yaml b/interactive_ai/services/project_ie/chart/values.yaml
@@ -73,10 +73,10 @@ global:
     registry: quay.io
     repository: prometheus
     name: busybox:glibc
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/interactive_ai/services/visual_prompt/chart/templates/init-job.yaml b/interactive_ai/services/visual_prompt/chart/templates/init-job.yaml
@@ -117,7 +117,7 @@ spec:
               value: "temporaryfiles"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             allowPrivilegeEscalation: false
             runAsNonRoot: true
diff --git a/interactive_ai/services/visual_prompt/chart/values.yaml b/interactive_ai/services/visual_prompt/chart/values.yaml
@@ -66,10 +66,10 @@ global:
     registry: quay.io
     repository: prometheus
     name: busybox:glibc
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl:
     registry: docker.io
     repository: bitnamilegacy
diff --git a/platform/services/account/chart/templates/init-job.yaml b/platform/services/account/chart/templates/init-job.yaml
@@ -145,7 +145,7 @@ spec:
               mountPath: "/init"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             {{- toYaml .Values.securityContext_init | nindent 12 }}
           resources:
diff --git a/platform/services/account/chart/values.yaml b/platform/services/account/chart/values.yaml
@@ -78,10 +78,10 @@ global:
   s3_endpoint: "impt-seaweed-fs:8333"
   istio_ingress_namespace: 'istio-system'
   istio_gateway_name: 'istio-gateway'
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl: 
     registry: docker.io
     repository: bitnamilegacy
diff --git a/platform/services/credit/chart/templates/init-job.yaml b/platform/services/credit/chart/templates/init-job.yaml
@@ -159,7 +159,7 @@ spec:
               mountPath: "/init"
         {{- if not .Values.global.istio_ambient_mesh }}
         - name: "istio-sidecar-quit"
-          image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+          image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}
           resources:
diff --git a/platform/services/credit/chart/templates/rollover.yaml b/platform/services/credit/chart/templates/rollover.yaml
@@ -23,7 +23,7 @@ spec:
           serviceAccountName: {{ include "credit-system.name" . }}
           containers:
           - name: rollover
-            image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+            image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
             imagePullPolicy: IfNotPresent
             securityContext:
               {{- toYaml .Values.securityContext | nindent 14 }}
diff --git a/platform/services/credit/chart/templates/snapshot.yaml b/platform/services/credit/chart/templates/snapshot.yaml
@@ -23,7 +23,7 @@ spec:
           serviceAccountName: {{ include "credit-system.name" . }}
           containers:
           - name: snapshot
-            image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+            image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
             imagePullPolicy: IfNotPresent
             securityContext:
               {{- toYaml .Values.securityContext | nindent 14 }}
diff --git a/platform/services/credit/chart/values.yaml b/platform/services/credit/chart/values.yaml
@@ -4,10 +4,10 @@
 
 global:
   docker_namespace: geti
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r47
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   busybox:
     registry: quay.io
     repository: prometheus
diff --git a/platform/services/initial_user/chart/templates/job.yaml b/platform/services/initial_user/chart/templates/job.yaml
@@ -117,7 +117,7 @@ spec:
             mountPath: "/init"
       {{- if not .Values.global.istio_ambient_mesh }}
       - name: "istio-sidecar-quit"
-        image: "{{ .Values.global.debian.registry }}/{{ if .Values.global.debian.repository }}{{ .Values.global.debian.repository }}/{{ end }}{{ .Values.global.debian.name }}"
+        image: "{{ .Values.global.curl.registry }}/{{ if .Values.global.curl.repository }}{{ .Values.global.curl.repository }}/{{ end }}{{ .Values.global.curl.name }}"
         securityContext:
           {{- toYaml .Values.securityContext | nindent 12 }}
         command: [ "/bin/sh", "-c" ]
diff --git a/platform/services/initial_user/chart/values.yaml b/platform/services/initial_user/chart/values.yaml
@@ -26,10 +26,10 @@ global:
   docker_namespace: geti
   running_on_vm: false
   account_service_mode: "setup"
-  debian:
-    registry: docker.io
-    repository: bitnamilegacy
-    name: os-shell:12-debian-12-r42
+  curl:
+    registry: quay.io
+    repository: curl
+    name: curl:8.15.0
   kubectl: 
     registry: docker.io
     repository: bitnamilegacy
diff --git a/platform/services/installer/app/templates/control-plane-values.yaml.j2 b/platform/services/installer/app/templates/control-plane-values.yaml.j2
@@ -87,7 +87,7 @@ global:
     registry: {{ registry }}
     repository: base-images
     name: debian:12.8.1
-  debian:
+  curl:
     registry: {{ registry }}
     repository: base-images
     name: debian:12.8.1
diff --git a/platform/services/installer/app/templates/impt-values.yaml.j2 b/platform/services/installer/app/templates/impt-values.yaml.j2
@@ -102,7 +102,7 @@ global:
     registry: {{ registry }}
     repository: base-images
     name: debian:12.8.1
-  debian:
+  curl:
     registry: {{ registry }}
     repository: base-images
     name: debian:12.8.1
