Docker Hardened Image Kafka / Strimzi Helm Chart installation

[nsultana-naitive]

Hi All, I am trying to work on installing the Strimzi / Kafka docker hardened image via the docker hardened image helm chart (see here ). After installation my Kafka controllers / brokers are not starting due to the JMX Prometheus exporter not starting. Have the developers faced this? I would appreciate any guidance or help :)

It seems the entrypoint script contains this block

if [ "$KAFKA_JMX_EXPORTER_ENABLED" = "true" ]; then
    KAFKA_OPTS="${KAFKA_OPTS} -javaagent:$(ls "$JMX_EXPORTER_HOME"/jmx_prometheus_javaagent*.jar)=9404:$KAFKA_HOME/custom-config/metrics-config.json"
    export KAFKA_OPTS
  fi

But the ls "$JMX_EXPORTER_HOME"/jmx_prometheus_javaagent*.jar) returns two paths separated by a new line in the hardened image which I believe collapses to -javaagent:/opt/.../jmx_prometheus_javaagent-1.5.0.jar /opt/.../jmx_prometheus_javaagent.jar=9404:/opt/kafka/custom-config/metrics-config.json.

As a result, I am seeing the following when trying to start up in the pods:

2026-02-09 13:02:49.620 | main | INFO | io.prometheus.jmx.JavaAgent | Starting ...
Failed to start Prometheus JMX Exporter ...

e1723a08afd7bca35570fd31a7656f59.io.prometheus.jmx.common.ConfigurationException: Malformed arguments [null]
        at e1723a08afd7bca35570fd31a7656f59.io.prometheus.jmx.Arguments.parse(Arguments.java:101)
        at io.prometheus.jmx.JavaAgent.premain(JavaAgent.java:77)
        at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
        at java.base/java.lang.reflect.Method.invoke(Unknown Source)
        at java.instrument/sun.instrument.InstrumentationImpl.loadClassAndStartAgent(Unknown Source)
        at java.instrument/sun.instrument.InstrumentationImpl.loadClassAndCallPremain(Unknown Source)

[LaurentGoderre]

This should be fixed now