Bitnami Image/Helm Chart Deprecation Plan

[Adam-D-Lewis]

With the deprecation of Bitnami images, the short term migration plan is to use bitnami legacy containers. I've opened this issue to discuss longer term plans around the issue.

The Bitnami images running on a current GCP deployment from main are listed below:

Pod Name	Image
prod/keycloak-postgresql-0	docker.io/bitnamilegacy/postgresql:11.14.0
prod/nebari-conda-store-minio-86bb5878c9-ddnm5	docker.io/bitnamilegacy/minio:2021.4.22
prod/nebari-conda-store-postgresql-postgresql-0	docker.io/bitnamilegacy/postgresql:11.14.0
prod/nebari-conda-store-redis-master-0	docker.io/bitnamilegacy/redis:7.0.4-debian-11-r4
prod/nebari-loki-minio-6bd587bb56-bbbw4	docker.io/bitnamilegacy/minio:2021.4.22

So really, just 3 services in nebari core (plugins like https://github.com/nebari-dev/nebari-mlflow-plugin can also be affected, but are not handled here)

• postgres
• minio
• redis

Postgres

Looks like alternatives exist e.g. https://opensource.zalando.com/ and https://github.com/cloudnative-pg/cloudnative-pg both have permissive licenses

Minio

We've been stuck on a 2021 version since before the license change, but should look at alternatives for this.

Redis

Perhaps we should switch to valkey. Looks like they are creating their own official helm chart - valkey-io/valkey#2371, https://github.com/valkey-io/valkey-helm

[viniciusdc]

I vote to remove Minio as soon as possible, rather than replacing it with Docker. For Redis, I'm not familiar with Vakkey. Still, I would be hesitant to replace it since it's a widely adopted standard, making it easier to find documentation on the web for integrating services and components within it.

For PostgreSQL if we keep it, we need to attest:

• guaranteeing conda-store works with the latest available
• Upgrade Keycloak to also work with the latest

If we replace it with another image, that also might be fine. I don't have any points against it, besides the possibility that this is a security flag from airgapped deployments.... those images need to be listed as accepted resources/tools