From ff5c6cc2e5c2ed3912ed3e0c79e68c9a481a707f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Carlos=20Rodr=C3=ADguez=20Hern=C3=A1ndez?= Date: Wed, 1 Jul 2026 10:20:10 +0200 Subject: [PATCH] Deprecate kiam (#95059) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Carlos Rodríguez Hernández ai-assisted=no --- bitnami/kiam/4/debian-12/Dockerfile | 57 ---------- .../opt/bitnami/licenses/licenses.txt | 2 - .../prebuildfs/usr/sbin/install_packages | 27 ----- .../debian-12/prebuildfs/usr/sbin/run-script | 24 ----- .../prebuildfs/usr/sbin/uninstall_packages | 26 ----- bitnami/kiam/README.md | 100 ------------------ 6 files changed, 236 deletions(-) delete mode 100644 bitnami/kiam/4/debian-12/Dockerfile delete mode 100644 bitnami/kiam/4/debian-12/prebuildfs/opt/bitnami/licenses/licenses.txt delete mode 100755 bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/install_packages delete mode 100755 bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/run-script delete mode 100755 bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/uninstall_packages delete mode 100644 bitnami/kiam/README.md diff --git a/bitnami/kiam/4/debian-12/Dockerfile b/bitnami/kiam/4/debian-12/Dockerfile deleted file mode 100644 index a446309783d9..000000000000 --- a/bitnami/kiam/4/debian-12/Dockerfile +++ /dev/null @@ -1,57 +0,0 @@ -# Copyright Broadcom, Inc. All Rights Reserved. -# SPDX-License-Identifier: APACHE-2.0 - -FROM docker.io/bitnami/minideb:bookworm - -ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" -ARG TARGETARCH - -LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-03-06T07:44:07Z" \ - org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ - org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/kiam/README.md" \ - org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/kiam" \ - org.opencontainers.image.title="kiam" \ - org.opencontainers.image.vendor="Broadcom, Inc." \ - org.opencontainers.image.version="4.2.0" - -ENV HOME="/" \ - OS_ARCH="${TARGETARCH:-amd64}" \ - OS_FLAVOUR="debian-12" \ - OS_NAME="linux" - -COPY prebuildfs / -SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"] -# Install required system packages and dependencies -RUN install_packages ca-certificates curl iptables procps -RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \ - DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \ - mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \ - COMPONENTS=( \ - "kiam-4.2.0-46-linux-${OS_ARCH}-debian-12" \ - ) ; \ - for COMPONENT in "${COMPONENTS[@]}"; do \ - if [ ! -f "${COMPONENT}.tar.gz" ]; then \ - curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz" -O ; \ - curl -SsLf "https://${DOWNLOADS_URL}/${COMPONENT}.tar.gz.sha256" -O ; \ - fi ; \ - sha256sum -c "${COMPONENT}.tar.gz.sha256" ; \ - tar -zxf "${COMPONENT}.tar.gz" -C /opt/bitnami --strip-components=2 --no-same-owner ; \ - rm -rf "${COMPONENT}".tar.gz{,.sha256} ; \ - done -RUN apt-get update && apt-get upgrade -y && \ - apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives -RUN chmod g+rwX /opt/bitnami -RUN find / -perm /6000 -type f -exec chmod a-s {} \; || true -RUN update-alternatives --set iptables /usr/sbin/iptables-legacy && \ - update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy -RUN uninstall_packages curl - -ENV APP_VERSION="4.2.0" \ - BITNAMI_APP_NAME="kiam" \ - IMAGE_REVISION="86" \ - PATH="/opt/bitnami/kiam/bin:$PATH" - -USER 1001 -ENTRYPOINT [ "kiam" ] -CMD [ "--help" ] diff --git a/bitnami/kiam/4/debian-12/prebuildfs/opt/bitnami/licenses/licenses.txt b/bitnami/kiam/4/debian-12/prebuildfs/opt/bitnami/licenses/licenses.txt deleted file mode 100644 index 76956b38e82c..000000000000 --- a/bitnami/kiam/4/debian-12/prebuildfs/opt/bitnami/licenses/licenses.txt +++ /dev/null @@ -1,2 +0,0 @@ -Bitnami containers ship with software bundles. You can find the licenses under: -/opt/bitnami/[name-of-bundle]/licenses/[bundle-version].txt diff --git a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/install_packages b/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/install_packages deleted file mode 100755 index ccce248b2d14..000000000000 --- a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/install_packages +++ /dev/null @@ -1,27 +0,0 @@ -#!/bin/sh -# Copyright Broadcom, Inc. All Rights Reserved. -# SPDX-License-Identifier: APACHE-2.0 -set -eu - -n=0 -max=2 -export DEBIAN_FRONTEND=noninteractive - -until [ $n -gt $max ]; do - set +e - ( - apt-get update -qq && - apt-get install -y --no-install-recommends "$@" - ) - CODE=$? - set -e - if [ $CODE -eq 0 ]; then - break - fi - if [ $n -eq $max ]; then - exit $CODE - fi - echo "apt failed, retrying" - n=$(($n + 1)) -done -apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives diff --git a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/run-script b/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/run-script deleted file mode 100755 index 0e07c9038dfd..000000000000 --- a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/run-script +++ /dev/null @@ -1,24 +0,0 @@ -#!/bin/sh -# Copyright Broadcom, Inc. All Rights Reserved. -# SPDX-License-Identifier: APACHE-2.0 -set -u - -if [ $# -eq 0 ]; then - >&2 echo "No arguments provided" - exit 1 -fi - -script=$1 -exit_code="${2:-96}" -fail_if_not_present="${3:-n}" - -if test -f "$script"; then - sh $script - - if [ $? -ne 0 ]; then - exit $((exit_code)) - fi -elif [ "$fail_if_not_present" = "y" ]; then - >&2 echo "script not found: $script" - exit 127 -fi diff --git a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/uninstall_packages b/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/uninstall_packages deleted file mode 100755 index 615c430e4e68..000000000000 --- a/bitnami/kiam/4/debian-12/prebuildfs/usr/sbin/uninstall_packages +++ /dev/null @@ -1,26 +0,0 @@ -#!/bin/sh -# Copyright Broadcom, Inc. All Rights Reserved. -# SPDX-License-Identifier: APACHE-2.0 -set -eu - -n=0 -max=2 -export DEBIAN_FRONTEND=noninteractive - -until [ $n -gt $max ]; do - set +e - ( - apt-get autoremove --purge -y "$@" - ) - CODE=$? - set -e - if [ $CODE -eq 0 ]; then - break - fi - if [ $n -eq $max ]; then - exit $CODE - fi - echo "apt failed, retrying" - n=$(($n + 1)) -done -apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives diff --git a/bitnami/kiam/README.md b/bitnami/kiam/README.md deleted file mode 100644 index 5c23fc4079f4..000000000000 --- a/bitnami/kiam/README.md +++ /dev/null @@ -1,100 +0,0 @@ -# Bitnami Secure Image for Kiam - -> kiam is a proxy that captures AWS Metadata API requests. It allows AWS IAM roles to be set for Kubernetes workloads. - -[Overview of Kiam](https://github.com/uswitch/kiam) -Trademarks: This software listing is packaged by Bitnami. The respective trademarks mentioned in the offering are owned by the respective companies, and use of them does not imply any affiliation or endorsement. - -⚠️ Please note that according to [this note](https://github.com/uswitch/kiam#-%EF%B8%8Fthis-project-is-in-maintenance-mode-%EF%B8%8F-) in the upstream project, Kiam maintainers are only accepting patches/bug fixes but no new features. -From Bitnami, we will update the container image and Helm chart, as usual, bundling the upstream software on top of an updated base image and dependencies. - -## TL;DR - -```console -docker run --name kiam bitnami/kiam:latest -``` - -## Why use Bitnami Secure Images? - -Those are hardened, minimal CVE images built and maintained by Bitnami. Bitnami Secure Images are based on the cloud-optimized, security-hardened enterprise [OS Photon Linux](https://vmware.github.io/photon/). Why choose BSI images? - -- Hardened secure images of popular open source software with Near-Zero Vulnerabilities -- Vulnerability Triage & Prioritization with VEX Statements, KEV and EPSS Scores -- Compliance focus with FIPS, STIG, and air-gap options, including secure bill of materials (SBOM) -- Software supply chain provenance attestation through in-toto -- First class support for the internet’s favorite Helm charts - -Each image comes with valuable security metadata. You can view the metadata in [our public catalog here](https://app-catalog.vmware.com/bitnami/apps). Note: Some data is only available with [commercial subscriptions to BSI](https://bitnami.com/). - -![Alt text](https://github.com/bitnami/containers/blob/main/BSI%20UI%201.png?raw=true "Application details") -![Alt text](https://github.com/bitnami/containers/blob/main/BSI%20UI%202.png?raw=true "Packaging report") - -If you are looking for our previous generation of images based on Debian Linux, please see the [Bitnami Legacy registry](https://hub.docker.com/u/bitnamilegacy). - -## Supported tags and respective `Dockerfile` links - -Learn more about the Bitnami tagging policy and the difference between rolling tags and immutable tags [in our documentation page](https://techdocs.broadcom.com/us/en/vmware-tanzu/application-catalog/tanzu-application-catalog/services/tac-doc/apps-tutorials-understand-rolling-tags-containers-index.html). - -## Get this image - -The recommended way to get the Bitnami Kiam Docker Image is to pull the prebuilt image from the [Docker Hub Registry](https://hub.docker.com/r/bitnami/kiam). - -```console -docker pull bitnami/kiam:latest -``` - -To use a specific version, you can pull a versioned tag. You can view the [list of available versions](https://hub.docker.com/r/bitnami/kiam/tags/) in the Docker Hub Registry. - -```console -docker pull bitnami/kiam:[TAG] -``` - -If you wish, you can also build the image yourself by cloning the repository, changing to the directory containing the Dockerfile and executing the `docker build` command. Remember to replace the `APP`, `VERSION` and `OPERATING-SYSTEM` path placeholders in the example command below with the correct values. - -```console -git clone https://github.com/bitnami/containers.git -cd bitnami/APP/VERSION/OPERATING-SYSTEM -docker build -t bitnami/APP:latest . -``` - -## Configuration - -The following section describes how to run commands - -### Running commands - -To run commands inside this container you can use `docker run`, for example to execute `kiam --version` you can follow the example below: - -```console -docker run --rm --name kiam bitnami/kiam:latest -- --version -``` - -Check the [official Kiam documentation](https://github.com/uswitch/kiam/tree/master/docs) for a list of the available parameters. - -### FIPS configuration in Bitnami Secure Images - -The Bitnami Kiam Docker image from the [Bitnami Secure Images](https://go-vmware.broadcom.com/contact-us) catalog includes extra features and settings to configure the container with FIPS capabilities. You can configure the next environment variables: - -- `OPENSSL_FIPS`: whether OpenSSL runs in FIPS mode or not. `yes` (default), `no`. - -## Notable Changes - -### Starting January 16, 2024 - -- The `docker-compose.yaml` file has been removed, as it was solely intended for internal testing purposes. - -## License - -Copyright © 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries. - -Licensed under the Apache License, Version 2.0 (the "License"); -you may not use this file except in compliance with the License. -You may obtain a copy of the License at - - - -Unless required by applicable law or agreed to in writing, software -distributed under the License is distributed on an "AS IS" BASIS, -WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -See the License for the specific language governing permissions and -limitations under the License.