@leverege/build-tools 2.80.1 → 2.82.0

package/.vscode/launch.json

@@ -0,0 +1,22 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "type": "node",
+      "request": "launch",
+      "name": "Test",
+      "runtimeExecutable": "npm",
+      "runtimeArgs": [
+        "run",
+        "testNoTimeout"
+      ],
+      "resolveSourceMapLocations": [
+        "${workspaceFolder}/**",
+        "!**/node_modules/**"
+      ],
+      "env": {
+      },
+      "outputCapture": "std"
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "2.80.1",
+  "version": "2.82.0",
   "description": "A collection of build / support tools for Leverege developers",
   "main": "index.js",
   "repository": {
@@ -42,6 +42,7 @@
     "helminit": "src/helmup.sh",
     "helmwhat": "src/helmup.sh",
     "hook-and-release": "src/hook-and-release.mjs",
+    "init-my-chart": "src/init-my-chart.mjs",
     "k8scale": "src/k8scale.sh",
     "k8x": "src/k8x.sh",
     "klog": "src/klog.sh",
@@ -64,7 +65,7 @@
   "license": "SEE LICENSE IN LICENSE.md",
   "dependencies": {
     "@leverege/jsdoc-template": "^1.0.1",
-    "chalk": "^5.4.1",
+    "chalk": "^5.5.0",
     "command-line-args": "^6.0.1",
     "command-line-usage": "^7.0.3",
     "commander": "^14.0.0",
@@ -74,11 +75,11 @@
     "glob": "^11.0.3",
     "handlebars": "^4.7.8",
     "ignore": "^7.0.5",
-    "inquirer": "^12.7.0",
+    "inquirer": "^12.9.0",
     "js-yaml": "^4.1.0",
     "jsdoc": "^4.0.4",
     "ms": "^2.1.3",
-    "npm-registry-fetch": "^18.0.2",
+    "npm-registry-fetch": "^19.0.0",
     "ora": "^8.2.0",
     "p-limit": "^6.2.0",
     "package-up": "^5.0.0",
@@ -88,10 +89,10 @@
     "simple-git": "^3.28.0",
     "sloc": "^0.3.2",
     "toml": "^3.0.0",
-    "zx": "^8.7.1"
+    "zx": "^8.8.0"
   },
   "devDependencies": {
     "@leverege/eslint-config-leverege": "^5.0.1",
-    "npm": "^11.4.2"
+    "npm": "^11.5.2"
   }
 }

package/src/Utils.mjs

@@ -14,7 +14,7 @@ import YAML from 'js-yaml'
 
 // __dirname goes away with ESM so we take this approach instead and
 // this assumes this file lives in the src dir of the build-tools repo
-export const BUILD_TOOLS_ROOT = path.dirname( url.fileURLToPath( import.meta.url ) )
+export const BUILD_TOOLS_ROOT = process.env.BUILD_TOOLS_ROOT || path.dirname( url.fileURLToPath( import.meta.url ) )
 
 let debugEnabled = process.env.BUILD_TOOLS_DEBUG === '1'
 
@@ -565,7 +565,7 @@ export const analyzeRepository = async ( giveGuidance ) => {
   // if the build tools version is still undefined then assume we are using a globally installed bt
   if ( buildToolsVersion === undefined ) {
     const fromBuildTools = await shellCmd( 'build-tools --version' )
-    buildToolsVersion = fromBuildTools.match( /\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?$/ )[0]
+    buildToolsVersion = fromBuildTools.match( /\d+\.\d+\.\d+(?:-[a-zA-Z0-9.-]+)?$/ )[0] // eslint-disable-line security/detect-unsafe-regex
   }
  
   const containerName = closestPackageJson?.name.replace( /^@[^/]+\//, '' ) || rootPyProjectToml?.project.name

package/src/bash-funcs

@@ -149,6 +149,27 @@ REPOADD
   helm repo update &> $DEVNULL
 }
 
+# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
+# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
+# *** DEPRECATED *** REMOVE AFTER BITNAMI ERADICATED ***
+#
+function addBitnamiRepo() {
+  if [ ! -z "$BITNAMI_LATEST" ] || [ "$1" == "latest" ];
+  then
+    BITNAMI_URL="https://charts.bitnami.com/bitnami"
+  else
+    cat<<CATNAMI
+    Using the pre 2022 legacy charts from bitnami. To use latest run:
+
+        `color y "BITNAMI_LATEST=1 $HELMUP_ARGS"`
+
+CATNAMI
+    BITNAMI_URL="https://raw.githubusercontent.com/bitnami/charts/eb5f9a9513d987b519f0ecd732e7031241c50328/bitnami"
+  fi
+
+  addHelmRepo bitnami $BITNAMI_URL
+}
+
 function removeHelmRepo(){
   [ ! -z "$SKIP_RM_HELM_REPO" ] && return
   helm repo remove $1 &> $DEVNULL

package/src/bitnami-audit.mjs

@@ -0,0 +1,169 @@
+#!/usr/bin/env node
+//
+// This script is used to scan all of the projects in the auditProject array
+// to look for any deployments that are still using the bitnami images. The
+// output from this script can then be imported / upload / replace existing in
+// the BitnamiImageRegistry gsheet to show progess on the migration effort.
+//
+import fs from 'node:fs'
+import chalk from 'chalk'
+import semver from 'semver'
+
+import {
+  debug,
+  log,  
+  shellCmd,
+} from './Utils.mjs'
+
+const auditProjects = [
+  'dev-controltek',
+  'dev-cox-health',
+  'dev-pitcrew',
+  'xxx-bogus', // expect warning
+  'dev-recovr-auto',
+  'dev-schnucks',
+  'dev-tpi',
+  'discount-tire-prd',
+  'discount-tire-stg',
+  'leverege-cnpg-20240729',
+  'leverege-ops-20250730',
+  'leverege-demo', // expect warning
+  'leverege-elastic',
+  'leverege-onboarding',
+  'leverege-sandbox',
+  'nimbelink-demo',
+  'prd-controltek',
+  'prd-cox-health',
+  'prd-generic-kudelski',
+  'prd-les-schwab',
+  'prd-recovr-auto',
+  'prd-skymirr',
+  'prd-tpi',
+  'prd-valvoline',
+  'qa-cox-health', // expect warning
+  'siren-marine-dev',
+  'siren-marine-prd',
+  'siren-marine-staging',
+  'siren-marine-test',
+  'stg-cox-health',
+  'stg-generic-kudelski',
+  'stg-recovr-auto',
+  'stg-recovr-perf',
+]
+
+const gitCheckoutCleanBranch = async ( branch = 'bootstrap-k8s' ) => {
+  // find and remove cruft, like generated values.yaml files
+  await shellCmd( 'find . -not \\( -path \\*junk -prune -o -path \\*helm-elasticsearch -prune \\) -name values.yaml -exec rm {} \\;' )
+
+  // start with a clean baseline
+  await shellCmd( 'git checkout bootstrap-k8s' )
+  await shellCmd( 'git clean -d --force' )
+
+  // checkout the target branch
+  await shellCmd( `git checkout ${branch}` )
+}
+
+const setK8sContext = async ( project ) => {
+  await shellCmd( 'overwhelm --fetchctx' )
+  await shellCmd( 'overwhelm --matchk8s' )
+}
+
+const prepareContext = async ( project ) => {
+  await gitCheckoutCleanBranch( project )
+  await setK8sContext( project )
+}
+
+const filterBitnamiImages = ( project, imagesJSON ) => {
+  const data = JSON.parse( imagesJSON )
+  const seen = new Set()
+
+  for ( const item of data.items ) {
+    const ns = item.metadata.namespace
+    let service = item.metadata.name
+
+    // Collapse services
+    service = service.replace( /elasticsearch8-(coordinating|data|master|ingest)/, 'elasticsearch' )
+    service = service.replace( /redis-(master|replicas)/, 'redis' )
+    service = service.replace( /valkey-(primary|replicas)/, 'valkey' )
+
+    const containers = item.spec?.template?.spec?.containers || []
+    for ( const c of containers ) {
+      let img = c.image
+
+      // Only keep bitnami images
+      if ( !/bitnami/.test( img ) ) continue
+
+      // Registry decluttering
+      img = img.replace( /^docker\.io\/bitnami/, 'bitnami' )
+      img = img.replace( /^us-docker\.pkg\.dev\/leverege-registry\/bitnami-mirror\/images/, 'leverege' )
+      img = img.replace( /^us-docker\.pkg\.dev\/leverege-registry\/system\/images/, 'leverege/system' )
+
+      const [ image, fullVersion = 'latest' ] = img.split( ':' )
+      const displayVersion = fullVersion.replace( /-debian-.*$/, '' )
+
+      const row = [ project, ns, service, image, displayVersion, fullVersion ].join( ',' )
+      if ( !seen.has( row ) ) {
+        debug( row )
+        seen.add( row )
+      }
+    }
+  }
+  return seen
+}
+
+const imageSummary = new Map()
+
+const runner = async ( projects ) => {
+  const CSV_FILE = '../BitnamiImageRegistry.csv'
+  const fd = fs.openSync( CSV_FILE, 'w' )
+  fs.writeSync( fd, 'Project,Namespace,Service,Image,Version,Tag\n' )
+
+  for ( const project of projects ) {
+    log( `Project [${project}]` )
+    try {
+      await prepareContext( project ) // eslint-disable-line no-await-in-loop
+    } catch ( error ) {
+      log( `Project or context is invalid, skipping [${chalk.redBright( project )}]` )
+      continue
+    }
+
+    // eslint-disable-next-line no-await-in-loop
+    const k8sImageDump = await shellCmd( 'kubectl get deploy,statefulset -A -o json' )
+    const bitnamiImages = filterBitnamiImages( project, k8sImageDump )
+    
+    for ( const line of bitnamiImages ) {
+      fs.writeSync( fd, `${line}\n` )
+
+      const [ , , , image, version, tag ] = line.split( ',' )
+      if ( /^leverege/.test( image ) ) continue // we don't need leverege in the summary
+
+      if ( !imageSummary.has( image ) ) {
+        imageSummary.set( image, { version : new Set(), tag : new Set() } )
+      }
+      imageSummary.get( image ).version.add( version )
+      imageSummary.get( image ).tag.add( tag )
+    }
+  }
+  fs.closeSync( fd )
+
+  log( '\n==== Bitnami Image Summary ====\n' )
+
+  log( 'IMAGES=(' )
+
+  for ( const [ image, { tag, version } ] of imageSummary.entries() ) {
+    const sortedTags = Array.from( tag ).sort( semver.rcompare )
+    for ( const t of sortedTags.slice( 0, 15 ) ) {
+      log( `  "${image}:${t}"` )
+    }
+
+    // Optional: also log a human-friendly display version list
+    const sortedVersions = Array.from( version ).sort( semver.rcompare )
+    log( `  # Display versions: ${sortedVersions.join( ', ' )}` )
+  }
+
+  log( ')' )
+
+  gitCheckoutCleanBranch() // back to clean bootstrap-k8s
+}
+
+await runner( auditProjects )

package/src/bitnami-audit.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+
+BITNAMI_CTX=(
+  dev-controltek
+  dev-cox-health
+  dev-pitcrew
+  dev-recovr-auto
+  dev-schnucks
+  dev-tpi
+  discount-tire-prd
+  discount-tire-stg
+  leverege-cnpg-20240729
+  leverege-ops-20250730
+  leverege-demo
+  leverege-elastic
+  leverege-onboarding
+  leverege-sandbox
+  nimbelink-demo
+  prd-controltek
+  prd-cox-health
+  prd-generic-kudelski
+  prd-les-schwab
+  prd-recovr-auto
+  prd-skymirr
+  prd-tpi
+  prd-valvoline
+  qa-cox-health
+  siren-marine-dev
+  siren-marine-prd
+  siren-marine-staging
+  siren-marine-test
+  stg-cox-health
+  stg-generic-kudelski
+  stg-recovr-auto
+  stg-recovr-perf
+)
+
+function gitCheckoutCleanBranch() {
+  # find the cruft, namely any values.yaml files which tend to block the
+  # cleaning of subdirs that contain them (values.yaml aren't tracked in git)
+  find . -not \( -path \*junk -prune -o -path \*helm-elasticsearch -prune \) -name values.yaml -exec rm {} \;
+  git ko bootstrap-k8s &> /dev/null
+  git clean -d --force &> /dev/null
+
+  local branch=${1:bootstrap-k8s}
+  git ko "$branch" &> /dev/null
+}
+
+# create a clean sheet with headers
+CSV_FILE="../BitnamiImageRegistry.csv"
+rm -f $CSV_FILE
+echo 'project,namespace,service,image,version' > $CSV_FILE
+
+gitCheckoutCleanBranch # start clean
+
+for CTX in "${BITNAMI_CTX[@]}";
+do
+  gitCheckoutCleanBranch $CTX
+
+  if [[ $? -eq 0 ]];
+  then
+    overwhelm -f
+    overwhelm -m
+    if [[ $? -ne 0 ]];
+    then
+      echo "Project [${CTX}] is valid, but the k8s context is not - skipping..."
+      continue
+    fi
+    echo "Context GOOD [$CTX]"
+    kubectl get deploy,statefulset -A -o json | bitnami-k8s-parse $CTX >> $CSV_FILE
+  fi
+  find . -not \( -path \*junk -prune -o -path \*helm-elasticsearch -prune \) -name values.yaml -exec rm {} \;
+done
+
+gitCheckoutCleanBranch # end clean

package/src/bitnami-to-leverege-artifacts.sh

@@ -0,0 +1,140 @@
+#!/bin/bash
+#
+# This script was used to bootstrap the leverege-registry bitnmai-mirror
+# folder with initial images and charts needed for the migration away from
+# bitnami. I left it here as an artifact and can be deleted once the entire
+# migration is complete.
+#
+# CONFIGURATION
+PROJECT_ID="leverege-registry"
+REGION="us" # adjust if needed
+MIRROR_ROOT="${REGION}-docker.pkg.dev/${PROJECT_ID}/bitnami-mirror"
+DOCKER_PREFIX="${MIRROR_ROOT}/images"
+CHARTS_PREFIX="oci://${MIRROR_ROOT}/charts"
+
+# Images to mirror
+IMAGES=(
+  "bitnami/postgresql:11.14.0-debian-10-r28"
+  "bitnami/postgresql:11.7.0-debian-10-r99"
+  # Display versions: 11.14.0, 11.7.0
+  "bitnami/postgres-exporter:0.10.0-debian-10-r172"
+  "bitnami/postgres-exporter:0.8.0-debian-10-r106"
+  # Display versions: 0.10.0, 0.8.0
+  "bitnami/redis:7.4.3-debian-12-r0"
+  "bitnami/redis:7.4.2-debian-12-r2"
+  "bitnami/redis:7.4.1-debian-12-r0"
+  "bitnami/redis:7.2.5-debian-12-r2"
+  "bitnami/redis:7.2.5-debian-12-r0"
+  "bitnami/redis:7.2.4-debian-12-r12"
+  "bitnami/redis:7.2.3-debian-11-r1"
+  "bitnami/redis:7.0.12-debian-11-r34"
+  "bitnami/redis:7.0.11-debian-11-r12"
+  "bitnami/redis:7.0.8-debian-11-r0"
+  "bitnami/redis:6.2.1-debian-10-r36"
+  "bitnami/redis:6.0.3-debian-10-r2"
+  # Display versions: 7.4.3, 7.4.2, 7.4.1, 7.2.5, 7.2.4, 7.2.3, 7.0.12, 7.0.11, 7.0.8, 6.2.1, 6.0.3
+  "bitnami/redis-exporter:1.70.0-debian-12-r2"
+  "bitnami/redis-exporter:1.67.0-debian-12-r7"
+  "bitnami/redis-exporter:1.63.0-debian-12-r1"
+  "bitnami/redis-exporter:1.61.0-debian-12-r2"
+  "bitnami/redis-exporter:1.61.0-debian-12-r0"
+  "bitnami/redis-exporter:1.58.0-debian-12-r7"
+  "bitnami/redis-exporter:1.55.0-debian-11-r2"
+  "bitnami/redis-exporter:1.52.0-debian-11-r25"
+  "bitnami/redis-exporter:1.50.0-debian-11-r13"
+  "bitnami/redis-exporter:1.45.0-debian-11-r26"
+  "bitnami/redis-exporter:1.20.0-debian-10-r16"
+  "bitnami/redis-exporter:1.6.1-debian-10-r7"
+  # Display versions: 1.70.0, 1.67.0, 1.63.0, 1.61.0, 1.58.0, 1.55.0, 1.52.0, 1.50.0, 1.45.0, 1.20.0, 1.6.1
+  "bitnami/elasticsearch:8.18.0-debian-12-r2"
+  "bitnami/elasticsearch:8.17.3-debian-12-r0"
+  "bitnami/elasticsearch:8.16.1-debian-12-r0"
+  "bitnami/elasticsearch:8.15.2-debian-12-r2"
+  "bitnami/elasticsearch:8.12.2-debian-12-r0"
+  "bitnami/elasticsearch:8.12.1-debian-11-r2"
+  "bitnami/elasticsearch:8.12.1-debian-11-r1"
+  "bitnami/elasticsearch:8.12.0-debian-11-r1"
+  "bitnami/elasticsearch:8.11.1-debian-11-r0"
+  "bitnami/elasticsearch:8.10.3-debian-11-r1"
+  "bitnami/elasticsearch:8.9.1-debian-11-r2"
+  # Display versions: 8.18.0, 8.17.3, 8.16.1, 8.15.2, 8.12.2, 8.12.1, 8.12.0, 8.11.1, 8.10.3, 8.9.1
+  "bitnami/sealed-secrets-controller:0.29.0-debian-12-r1"
+  "bitnami/valkey:8.1.3-debian-12-r1"
+  # Display versions: 8.1.30
+)
+
+# Charts to mirror (chart:version)
+CHARTS=(
+  "bitnamicharts/elasticsearch:22.1.0"
+  "bitnamicharts/elasticsearch:21.6.3"
+  "bitnamicharts/elasticsearch:21.3.20"
+  "bitnamicharts/elasticsearch:19.17.6"
+# "bitnamicharts/postgresql:10.16.2" # pulled manually from ancient bitnami source
+  "bitnamicharts/redis:20.13.4"
+  "bitnamicharts/valkey:3.0.22"
+)
+
+echo "🔑 Authenticating to Artifact Registry..."
+gcloud auth configure-docker ${REGION}-docker.pkg.dev -q &> /dev/null
+gcloud auth application-default print-access-token | helm registry login \
+  -u oauth2accesstoken --password-stdin ${REGION}-docker.pkg.dev
+
+echo "📦 Ensuring Artifact Registry repos exist..."
+gcloud artifacts repositories create bitnami-mirror \
+  --repository-format=docker \
+  --location=${REGION} \
+  --project=${PROJECT_ID} \
+  --description="Mirror of Bitnami images/charts" &> /dev/null \
+  || echo "✅ Docker repo already exists."
+
+# Check if crane is available (brew install crane)
+if command -v crane &>/dev/null;
+then
+  echo "🚀 Using crane for image copies (fast + multi-arch safe)"
+  USE_CRANE=true
+else
+  echo "🐳 crane not found, falling back to Docker CLI"
+  USE_CRANE=false
+fi
+
+echo "⬇️ Pulling & pushing container images..."
+for IMAGE in "${IMAGES[@]}"; do
+  SRC_IMAGE="docker.io/${IMAGE}"
+  NAME=$(echo "${IMAGE}" | cut -d: -f1 | awk -F/ '{print $NF}')
+  TAG=$(echo "${IMAGE}" | cut -d: -f2)
+  DEST_IMAGE="${DOCKER_PREFIX}/${NAME}:${TAG}"
+
+  echo "Mirroring ${SRC_IMAGE} → ${DEST_IMAGE}"
+
+  if [ "$USE_CRANE" = true ];
+  then
+    # crane copies the whole manifest list (multi-arch safe)
+    cat<<CRANE_CAT
+    crane copy "${SRC_IMAGE}" "${DEST_IMAGE}"
+CRANE_CAT
+    crane copy "${SRC_IMAGE}" "${DEST_IMAGE}"
+  else
+    docker pull --platform linux/amd64 "${SRC_IMAGE}"
+    docker tag "${SRC_IMAGE}" "${DEST_IMAGE}"
+    docker push "${DEST_IMAGE}"
+
+    # clean up local docker - the || true ensures the script won’t fail if the
+    # image was already removed or the tag isn’t present
+    docker rmi -f "${SRC_IMAGE}" "${DEST_IMAGE}" || true
+  fi
+done
+
+echo "⬇️ Pulling & pushing Helm charts..."
+for ENTRY in "${CHARTS[@]}"; do
+  CHART=$(echo $ENTRY | cut -d: -f1)
+  VERSION=$(echo $ENTRY | cut -d: -f2)
+  echo "Mirroring chart ${CHART}:${VERSION}"
+  #cat<<CHART_MOVER
+  helm pull oci://registry-1.docker.io/${CHART} --version ${VERSION}
+  CHART_TARBALL=$(basename ${CHART})-${VERSION}.tgz
+  helm push "${CHART_TARBALL}" ${CHARTS_PREFIX}
+  rm -f "${CHART_TARBALL}"
+#CHART_MOVER
+done
+
+echo "✅ Mirror complete."

package/src/count-lines-of-code.mjs

@@ -2,6 +2,8 @@
 import path from 'node:path'
 import { $, fs, chalk, argv } from 'zx'
 
+import { log } from './Utils.mjs'
+
 const srcOnly = argv.srcOnly
 
 const $$ = $( {
@@ -21,10 +23,10 @@ if ( !hasWorkspace ) {
     for ( let i = 0; i < dirs.length; i++ ) {
       const dir = dirs[i]
 
-      await getLinesOfCodeForDirectory( path.join( rootDir, 'packages', dir ) )
+      await getLinesOfCodeForDirectory( path.join( rootDir, 'packages', dir ) ) // eslint-disable-line no-await-in-loop
     }
   } else {
-    console.log( chalk.redBright( 'No workspace directories for which to count code' ) )
+    log( chalk.redBright( 'No workspace directories for which to count code' ) )
   }
 }
 
@@ -33,13 +35,13 @@ async function getLinesOfCodeForDirectory( directory ) {
   const hasSrc = await fs.exists( srcDir )
   
   if ( hasSrc ) {
-    console.log( `${chalk.greenBright( srcOnly ? srcDir : directory )}:` )
+    log( `${chalk.greenBright( srcOnly ? srcDir : directory )}:` )
     if ( srcOnly ) {
       await $$`sloc ${srcDir} --format cli-table`
     } else {
       await $$`sloc ${directory} --format cli-table -i '^(src|test)/.*' -e node_modules`
     }
   } else {
-    console.log( chalk.redBright( `No src directory at ${directory}` ) )
+    log( chalk.redBright( `No src directory at ${directory}` ) )
   }
 }

package/src/crane-lift.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+#
+# just a simple wrapper round crane docker lifter
+#
+IMAGE_WITH_TAG="${1}" # like valkey:8.1.3-debian-12-r1
+
+REGISTRY_LEVEREGE="us-docker.pkg.dev/leverege-registry/bitnami-mirror/images"
+REGISTRY_BITNAMI="docker.io/bitnami"
+
+crane copy "${REGISTRY_BITNAMI}/${IMAGE_WITH_TAG}" \
+           "${REGISTRY_LEVEREGE}"/${IMAGE_WITH_TAG}"

package/src/helm-charts/argocd/helmup.bootstrap

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo "--- BOOT ME BABY! $SERVICE"

package/src/helm-charts/argocd/helmup.plugin

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo "---->>> helmup.plugin"

package/src/helm-charts/cnpg-db-pgbench/helmup.bootstrap

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+BOOTSTRAP="cnpg-operator/operand.bootstrap"
+
+if [ ! -f "$BOOTSTRAP" ];
+then
+  printf "\n  `color r '***ERROR:'` the cnpg-operator must be installed first\n\n"
+  return 1
+fi
+
+. "$BOOTSTRAP" "$SERVICE"

package/src/helm-charts/cnpg-db-psql-stack/helmup.bootstrap

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+BOOTSTRAP="cnpg-operator/operand.bootstrap"
+
+if [ ! -f "$BOOTSTRAP" ];
+then
+  printf "\n  `color r '***ERROR:'` the cnpg-operator must be installed first\n\n"
+  return 1
+fi
+
+. "$BOOTSTRAP" "$SERVICE"

package/src/helm-charts/cnpg-db-psql-stack/helmup.plugin

@@ -1,6 +1,6 @@
 #!/bin/bash
 
 # ensures the PG_PASSWORD secret exists and correct
-ensureCnpgSecret PG_PASSWORD $SERVICE-postgres-pw
+synchronizeSecrets PG_PASSWORD $SERVICE-postgres-pw
 
 kubectl apply -f cnpg-db-psql-stack/cluster.yaml $K8S_WHAT

package/src/helm-charts/cnpg-db-recovery/helmup.bootstrap

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+BOOTSTRAP="cnpg-operator/operand.bootstrap"
+
+if [ ! -f "$BOOTSTRAP" ];
+then
+  printf "\n  `color r '***ERROR:'` the cnpg-operator must be installed first\n\n"
+  return 1
+fi
+
+. "$BOOTSTRAP" "$SERVICE"

package/src/helm-charts/cnpg-db-recovery/helmup.plugin

@@ -1,6 +1,6 @@
 #!/bin/bash
 
 # ensures the PG_PASSWORD secret exists and correct
-# ensureCnpgSecret PG_PASSWORD $SERVICE-postgres-pw
+# synchronizeSecrets PG_PASSWORD $SERVICE-postgres-pw
 
 kubectl apply -f cnpg-db-recovery/cluster.yaml $K8S_WHAT

package/src/helm-charts/cnpg-db-tsdb-basic/helmup.bootstrap

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+BOOTSTRAP="cnpg-operator/operand.bootstrap"
+
+if [ ! -f "$BOOTSTRAP" ];
+then
+  printf "\n  `color r '***ERROR:'` the cnpg-operator must be installed first\n\n"
+  return 1
+fi
+
+. "$BOOTSTRAP" "$SERVICE"

package/src/helm-charts/cnpg-db-tsdb-basic/helmup.plugin

@@ -1,6 +1,6 @@
 #!/bin/bash
 
 # ensures the TSDB_PASSWORD secret exists and correct
-ensureCnpgSecret TSDB_PASSWORD $SERVICE-postgres-pw
+synchronizeSecrets TSDB_PASSWORD $SERVICE-postgres-pw
 
 kubectl apply -f cnpg-db-tsdb-basic/cluster.yaml $K8S_WHAT

package/src/helm-charts/cnpg-db-tsdb-dense/helmup.bootstrap

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+BOOTSTRAP="cnpg-operator/operand.bootstrap"
+
+if [ ! -f "$BOOTSTRAP" ];
+then
+  printf "\n  `color r '***ERROR:'` the cnpg-operator must be installed first\n\n"
+  return 1
+fi
+
+. "$BOOTSTRAP" "$SERVICE"

package/src/helm-charts/cnpg-db-tsdb-dense/helmup.plugin

@@ -1,6 +1,6 @@
 #!/bin/bash
 
 # ensures the TSDB_DENSE_PASSWORD secret exists and correct
-ensureCnpgSecret TSDB_DENSE_PASSWORD $SERVICE-postgres-pw
+synchronizeSecrets TSDB_DENSE_PASSWORD $SERVICE-postgres-pw
 
 kubectl apply -f cnpg-db-tsdb-dense/cluster.yaml $K8S_WHAT