PREQUEL-2025-0111
Kubernetes Deprecated Bitnami Repository Image PullsMedium
PREQUEL-2025-0111View on GitHub
Description
- Detects Kubernetes events where container images are being pulled from the deprecated /bitnami repository on Docker Hub.
- Monitors image pull operations specifically from docker.io/bitnami/* which will be discontinued.
- Identifies usage of the deprecated Bitnami repository that requires immediate migration.
- Tracks container deployments using the legacy /bitnami path for urgent migration planning.
Cause
- Kubernetes pods being scheduled that require images from the deprecated /bitnami repository.
- Application deployments still using legacy Bitnami Helm charts pointing to docker.io/bitnami/*.
- CI/CD pipelines configured to pull from the deprecated /bitnami repository path.
- Container orchestration systems with hardcoded references to docker.io/bitnami/*.
- Development teams unaware of the deprecated repository status continuing to use legacy paths.
- Infrastructure automation scripts with outdated Bitnami image references.
Mitigation
- Immediately audit all deployments using docker.io/bitnami/* image references.
- Migrate to supported Bitnami repositories (bitnamilegacy or bitnamisecure) before August 28th, 2025.
- Update all Helm charts, Kubernetes manifests, and CI/CD pipelines to use new repository paths.
- Replace deprecated /bitnami references with supported alternatives or equivalent images.
- Implement automated scanning to detect any remaining deprecated repository usage.
- Create urgent migration plan with rollback procedures for affected services.
- Monitor for any legacy /bitnami references and update immediately upon detection.
References
- https://github.com/bitnami/containers/issues/83267 - Upcoming changes to the Bitnami catalog (effective August 28th, 2025)
- https://hub.docker.com/u/bitnamisecure - Bitnami Secure Images
- https://www.arrow.com/globalecs/uk/products/bitnami-secure-images/ - Bitnami Secure Images Enterprise
- Kubernetes event monitoring documentation
- Container image security best practices