elastisys · lunkan93 · Jan 2, 2025 · Dec 30, 2024 · Jan 2, 2025 · Jan 2, 2025
diff --git a/changelog/0.42.md b/changelog/0.42.md
@@ -76,3 +76,13 @@ Released 2024-10-30
 - [#2309](https://github.com/elastisys/compliantkubernetes-apps/pull/2309) - bug: Fix constraint for HNC user namespaces [@anders-elastisys](https://github.com/anders-elastisys)
 - [#2314](https://github.com/elastisys/compliantkubernetes-apps/pull/2314) - bug: Fix grafana datasources and tests for multi wc [@Elias-elastisys](https://github.com/Elias-elastisys)
 - [#2326](https://github.com/elastisys/compliantkubernetes-apps/pull/2326) - bug: Fix: add label user-grafana pvc for velero [@robinAwallace](https://github.com/robinAwallace)
+
+## v0.42.1
+
+Released 2025-01-02
+
+## Changes by kind
+
+### Improvement(s)
+
+- [#2382](https://github.com/elastisys/compliantkubernetes-apps/pull/2382) - apps: Mirror Bitnami images [@aarnq](https://github.com/aarnq)
diff --git a/helmfile.d/values/gatekeeper/templates.yaml.gotmpl b/helmfile.d/values/gatekeeper/templates.yaml.gotmpl
@@ -1,3 +1,7 @@
+image:
+  repository: ghcr.io/elastisys/bitnami/kubectl
+  tag: 1.29.11
+
 waitFor:
   - k8sallowedrepos
   - k8sdisallowedtags

diff --git a/helmfile.d/values/thanos/query.yaml.gotmpl b/helmfile.d/values/thanos/query.yaml.gotmpl
@@ -1,5 +1,9 @@
 existingObjstoreSecret: thanos-objectstorage-secret-objstore-secret
 
+image:
+  registry: ghcr.io
+  repository: elastisys/bitnami/thanos
+
 query:
   networkPolicy:
     enabled: false

diff --git a/helmfile.d/values/thanos/receiver.yaml.gotmpl b/helmfile.d/values/thanos/receiver.yaml.gotmpl
@@ -1,5 +1,9 @@
 existingObjstoreSecret: thanos-objectstorage-secret-objstore-secret
 
+image:
+  registry: ghcr.io
+  repository: elastisys/bitnami/thanos
+
 query:
   enabled: false
 

diff --git a/helmfile.d/values/velero-sc.yaml.gotmpl b/helmfile.d/values/velero-sc.yaml.gotmpl
@@ -175,6 +175,10 @@ containerSecurityContext:
 
 # For kubectl containers
 kubectl:
+  image:
+    repository: ghcr.io/elastisys/bitnami/kubectl
+    tag: 1.29.11
+
   containerSecurityContext:
     allowPrivilegeEscalation: false
     runAsNonRoot: true

diff --git a/helmfile.d/values/velero-wc.yaml.gotmpl b/helmfile.d/values/velero-wc.yaml.gotmpl
@@ -181,6 +181,10 @@ containerSecurityContext:
 
 # For kubectl containers
 kubectl:
+  image:
+    repository: ghcr.io/elastisys/bitnami/kubectl
+    tag: 1.29.11
+
   containerSecurityContext:
     allowPrivilegeEscalation: false
     runAsNonRoot: true

diff --git a/images/README.md b/images/README.md
@@ -0,0 +1,10 @@
+# Images
+
+This directory contains images built for Welkin Apps.
+
+Other mirrored images includes:
+
+- `docker.io/bitnami/kubectl` -> `ghcr.io/elastisys/bitnami/kubectl`
+  - used in `gatekeeper-templates` and `velero`
+- `docker.io/bitnami/thanos` -> `ghcr.io/elastisys/bitnami/thanos`
+  - used in `thanos`