## Summary Related: https://gitlab.com/gitlab-org/build/CNG/-/merge_requests/1086 We snagged on Alpine updating the internal certificates package version, and removing an older one we pinned to. Let's _stop_ doing that. Instead, let us build the patterns on top of `gitlab-base`. All operational service containers will share this layer set, so it will actually end up in an efficiency boost to Pod instantiation / startup time. ## Related issues https://gitlab.com/gitlab-org/charts/gitlab/-/issues/1222 ## Actionable - [x] :construction: Build `certficates` container, with the scripting patterns from `alpine-certificate`, but based upon `gitlab-base` - [ ] :warning: This image will be tagged based on the CNG's tag _directly_ (`15.5.0`, `6-4-stable`, ...). This provides release consistency lacking in the current implementation. - [ ] :grey_question: Mirror `certificates` tag to `alpine-certificates` - [ ] :loudspeaker: Announce replacement (~"release post item") as consumers who mirror need to update behaviors - [ ] :warning: Ensure DSOP is updated to include / replace - [ ] :tools: Replace the `alpine-certificates` container in charts with this by default - [ ] :loud_sound: Announce deprecation (~"release post item::deprecation") as consumers who mirror need to update behaviors - [ ] :no_entry: Remove `alpine-certificates`