PREQUEL-2025-0106
Kubernetes Bitnami Image Pull EventsMedium
PREQUEL-2025-0106View on GitHub
Description
- Detects Kubernetes events where Bitnami container images are being pulled from Docker Hub.
- Monitors image pull operations for Bitnami images across all namespaces.
- Identifies usage of Bitnami images that may be affected by upcoming catalog changes.
- Tracks container deployments using Bitnami images for migration planning.
Cause
- Kubernetes pods being scheduled that require Bitnami container images.
- Application deployments using Bitnami Helm charts or container images.
- CI/CD pipelines pulling Bitnami images for new deployments.
- Container orchestration systems pulling Bitnami images from docker.io/bitnami.
- Development teams using Bitnami images for application stacks.
- Infrastructure automation pulling Bitnami images for service deployment.
Mitigation
- Review all Bitnami image usage and plan migration before August 28th, 2025.
- Consider migrating to Bitnami Secure Images for production workloads.
- Update CI/CD pipelines to use alternative image sources where possible.
- Implement image scanning to identify all Bitnami dependencies.
- Create migration timeline for affected applications and services.
- Monitor Bitnami catalog changes and update image references accordingly.
- Consider using Bitnami Legacy repository as temporary workaround if needed.
References
- https://github.com/bitnami/containers/issues/83267 - Upcoming changes to the Bitnami catalog (effective August 28th, 2025)
- https://hub.docker.com/u/bitnamisecure - Bitnami Secure Images
- https://www.arrow.com/globalecs/uk/products/bitnami-secure-images/ - Bitnami Secure Images Enterprise
- Kubernetes event monitoring documentation
- Container image security best practices