[bitnami/kafka] Release 4.0.0-debian-12-r8 (#82566)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>

bitnami/kafka/4.0/debian-12/Dockerfile

@@ -9,10 +9,10 @@ ARG TARGETARCH
 
 LABEL com.vmware.cp.artifact.flavor="sha256:c50c90cfd9d12b445b011e6ad529f1ad3daea45c26d20b00732fae3cd71f6a83" \
       org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2025-05-30T10:45:54Z" \
+      org.opencontainers.image.created="2025-06-25T10:24:53Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/kafka/README.md" \
-      org.opencontainers.image.ref.name="4.0.0-debian-12-r7" \
+      org.opencontainers.image.ref.name="4.0.0-debian-12-r8" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/kafka" \
       org.opencontainers.image.title="kafka" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
@@ -27,7 +27,9 @@ COPY prebuildfs /
 SHELL ["/bin/bash", "-o", "errexit", "-o", "nounset", "-o", "pipefail", "-c"]
 # Install required system packages and dependencies
 RUN install_packages ca-certificates curl procps zlib1g
-RUN mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
+RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
+    DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
+    mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
       "jre-17.0.15-10-0-linux-${OS_ARCH}-debian-12" \
       "kafka-4.0.0-0-linux-${OS_ARCH}-debian-12" \

bitnami/kafka/4.0/debian-12/prebuildfs/usr/sbin/uninstall_packages

@@ -0,0 +1,26 @@
+#!/bin/sh
+# Copyright Broadcom, Inc. All Rights Reserved.
+# SPDX-License-Identifier: APACHE-2.0
+set -eu
+
+n=0
+max=2
+export DEBIAN_FRONTEND=noninteractive
+
+until [ $n -gt $max ]; do
+    set +e
+    (
+        apt-get autoremove --purge -y "$@"
+    )
+    CODE=$?
+    set -e
+    if [ $CODE -eq 0 ]; then
+        break
+    fi
+    if [ $n -eq $max ]; then
+        exit $CODE
+    fi
+    echo "apt failed, retrying"
+    n=$(($n + 1))
+done
+apt-get clean && rm -rf /var/lib/apt/lists /var/cache/apt/archives

bitnami/kafka/4.0/debian-12/tags-info.yaml

@@ -1,5 +1,5 @@
 rolling-tags:
-- "4.0"
-- 4.0-debian-12
-- 4.0.0
-- latest
+  - "4.0"
+  - 4.0-debian-12
+  - 4.0.0
+  - latest

bitnami/kafka/README.md

@@ -147,7 +147,7 @@ networks:
 
 services:
   kafka:
-    image: 'bitnami/kafka:latest'
+    image: bitnami/kafka:latest
     networks:
       - app-tier
     environment:
@@ -158,7 +158,7 @@ services:
       - KAFKA_CFG_CONTROLLER_QUORUM_VOTERS=0@kafka:9093
       - KAFKA_CFG_CONTROLLER_LISTENER_NAMES=CONTROLLER
   myapp:
-    image: 'YOUR_APPLICATION_IMAGE'
+    image: YOUR_APPLICATION_IMAGE
     networks:
       - app-tier
 ```
@@ -250,9 +250,9 @@ To use Apache Kafka in a development setup, create the following `docker-compose
 version: "3"
 services:
   kafka:
-    image: 'bitnami/kafka:latest'
+    image: bitnami/kafka:latest
     ports:
-      - '9092:9092'
+      - 9092:9092
     environment:
       - KAFKA_CFG_NODE_ID=0
       - KAFKA_CFG_PROCESS_ROLES=controller,broker
@@ -291,8 +291,8 @@ And expose the external port:
 
 ```diff
     ports:
--     - '9092:9092'
-+     - '9094:9094'
+-     - 9092:9092
++     - 9094:9094
 ```
 
 **Note**: To connect from an external machine, change `localhost` above to your host's external IP/hostname and include `EXTERNAL://0.0.0.0:9094` in `KAFKA_CFG_LISTENERS` to allow for remote connections.
@@ -363,10 +363,10 @@ version: '2'
 
 services:
   kafka:
-    image: 'bitnami/kafka:latest'
+    image: bitnami/kafka:latest
     hostname: kafka.example.com
     ports:
-      - '9092'
+      - 9092
     environment:
       # KRaft
       - KAFKA_CFG_NODE_ID=0
@@ -393,11 +393,11 @@ services:
       - KAFKA_CERTIFICATE_PASSWORD=certificatePassword123
     volumes:
       # Both .jks and .pem files are supported
-      # - './kafka.keystore.pem:/opt/bitnami/kafka/config/certs/kafka.keystore.pem:ro'
-      # - './kafka.keystore.key:/opt/bitnami/kafka/config/certs/kafka.keystore.key:ro'
-      # - './kafka.truststore.pem:/opt/bitnami/kafka/config/certs/kafka.truststore.pem:ro'
-      - './kafka.keystore.jks:/opt/bitnami/kafka/config/certs/kafka.keystore.jks:ro'
-      - './kafka.truststore.jks:/opt/bitnami/kafka/config/certs/kafka.truststore.jks:ro'
+      # - ./kafka.keystore.pem:/opt/bitnami/kafka/config/certs/kafka.keystore.pem:ro
+      # - ./kafka.keystore.key:/opt/bitnami/kafka/config/certs/kafka.keystore.key:ro
+      # - ./kafka.truststore.pem:/opt/bitnami/kafka/config/certs/kafka.truststore.pem:ro
+      - ./kafka.keystore.jks:/opt/bitnami/kafka/config/certs/kafka.keystore.jks:ro
+      - ./kafka.truststore.jks:/opt/bitnami/kafka/config/certs/kafka.truststore.jks:ro
 ```
 
 In order to get the required credentials to consume and produce messages you need to provide the credentials in the client. If your Apache Kafka client allows it, use the credentials you've provided.
@@ -587,7 +587,7 @@ services:
   kafka-combined:
     image: docker.io/bitnami/kafka:latest
     ports:
-      - "9092:9092"
+      - 9092:9092
     environment:
       - KAFKA_CFG_NODE_ID=0
       - KAFKA_CFG_PROCESS_ROLES=controller,broker
@@ -650,7 +650,7 @@ services:
   kafka:
     ...
     volumes:
-      - 'kafka_data:/bitnami'
+      - kafka_data:/bitnami
 +     - /path/to/server.properties:/bitnami/kafka/config/server.properties
 ```