Bug: tf-state-backup CronJob — bitnami/kubectl:1.31 image removed from Docker Hub

bug-tf-state-backup-image-dead Todo

bug resolved

Problem

The tf-state-backup CronJob (PR #39) uses bitnami/kubectl:1.31 which Bitnami has removed from Docker Hub. Pods fail with ImagePullBackOff:

Root Cause

Bitnami removed all Docker Hub images (same pattern as Keycloak). The bitnami/kubectl image no longer exists at docker.io.

Fix

  • Replace bitnami/kubectl:1.31 with an alternative image that provides bash, kubectl, and curl
  • Options: alpine/k8s:1.31.4, or plain alpine:3.20 with kubectl binary download alongside the existing mc download
  • File: terraform/main.tf line 1704

Impact

TF state backups are not running. The daily 02:00 UTC CronJob creates pods that immediately fail. No state backups are being created in MinIO tf-state-backups bucket.

Acceptance Criteria

  • CronJob pods start successfully (no ImagePullBackOff)
  • Manual trigger produces backup files in MinIO tf-state-backups bucket
  • Automated daily backups resume
  • plan-pal-e-platform — Phase 6.1 (state backup)
  • PR #39 — original implementation
  • PR #39 QA nit: "image pin"