Skip to content

Replace bitnamilegacy/keycloak images — unmaintained and contains CVEs #325

@leiicamundi

Description

@leiicamundi

Problem

All docker-compose configurations in this repository currently use the bitnamilegacy/keycloak image (bitnamilegacy/keycloak:${KEYCLOAK_SERVER_VERSION}).

This image is no longer maintained by Bitnami and contains known CVEs, making it a security risk for anyone running these distributions.

This change is aligned with the official Camunda documentation, which has already been updated to remove references to Bitnami images and recommend the Camunda-maintained Keycloak images instead. See: https://docs.camunda.io/docs/self-managed/deployment/helm/configure/vendor-supported-infrastructure/ and https://docs.camunda.io/docs/self-managed/deployment/helm/configure/registry-and-images/install-bitnami-enterprise-images/#why-camunda-uses-bitnami-premium-images

Proposed solution

Replace the bitnamilegacy/keycloak image with the officially maintained Camunda Keycloak images:

Additional notes

  • The POSTGRES_DB=bitnami_keycloak and IDENTITY_DATABASE_NAME: bitnami_keycloak references should also be updated to reflect the new image naming.
  • Volume mount paths (/opt/bitnami/keycloak/themes/identity) will need to be adjusted to match the directory structure of the new Keycloak images (likely /opt/keycloak/themes/identity). But with the images of camunda/keyclaok, this is not required anymore, it's embedded
  • Environment variables and entrypoint configuration may differ between the Bitnami image and the official Keycloak/Camunda images and should be verified.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions