Image selection for the machineKey container does not work correctly about zitadel-charts

[eliobischof]

We could default setupJob.machinekeyWriterImage.repository to bitnami/kubectl.
It seems to support more version tags. However, 1.27.0 is also not available 😂
But it's also slimmer than alpine/k8s.

[eliobischof]

Probably the best is rancher/kubectl.
It's the slimmest with 49.2MB, seems to support a lot of versions, and the version is prefixed with "v"

[eliobischof]

I realized, with a scratch image and without a shell, refactoring the command will be difficult 😄

command: [ "sh","-c","until [ ! -z $(kubectl -n {{ .Release.Namespace }} get po ${POD_NAME} -o jsonpath=\"{.status.containerStatuses[?(@.name=='{{ .Chart.Name }}-setup')].state.terminated}\") ]; do echo 'waiting for {{ .Chart.Name }}-setup container to terminate'; sleep 5; done && echo '{{ .Chart.Name }}-setup container terminated' && if [ -f {{ default "/key" .Values.zitadel.configmapConfig.FirstInstance.MachineKeyPath }} ]; then kubectl -n {{ .Release.Namespace }} create secret generic {{ .Values.zitadel.configmapConfig.FirstInstance.Org.Machine.Machine.Username }} --from-file={{ .Values.zitadel.configmapConfig.FirstInstance.Org.Machine.Machine.Username }}.json={{ default "/key" .Values.zitadel.configmapConfig.FirstInstance.MachineKeyPath }}; fi;" ]

[eliobischof]

I think the best solution is to use bitnami/kubectl. They publish minor tags, like 1.25, 1.26, 1.27... The kubectl should be compatible on the minor tags for these core commands we use.

The chart and k8s compatibility improves and the image just contains the kubectl on Alpine, AFAIU. What do you think @lusu007? See #100

[lusu007]

LGTM! 😊