fix(ci): switch Kafka from native to JVM image to prevent SIGILL crashes (#7708)

bm1549 · claude · web-flow · commit 6dac2bd5ecf1 · 2026-03-17T14:41:42.000+01:00
apache/kafka-native:3.9.1 is a GraalVM native binary compiled for specific
CPU instruction set extensions (AVX2/AVX-512). On GitHub-hosted runners with
heterogeneous CPUs that lack those extensions, the container crashes with
SIGILL before any tests run. The JVM-based apache/kafka:3.9.1 detects CPU
capabilities at runtime and avoids the crash.

Co-authored-by: Claude Sonnet 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/.github/workflows/apm-integrations.yml b/.github/workflows/apm-integrations.yml
@@ -250,7 +250,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       kafka:
-        image: apache/kafka-native:3.9.1
+        image: apache/kafka:3.9.1
         env:
           KAFKA_PROCESS_ROLES: broker,controller
           KAFKA_NODE_ID: "1"
@@ -607,7 +607,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       kafka:
-        image: apache/kafka-native:3.9.1
+        image: apache/kafka:3.9.1
         env:
           KAFKA_PROCESS_ROLES: broker,controller
           KAFKA_NODE_ID: "1"
diff --git a/.github/workflows/appsec.yml b/.github/workflows/appsec.yml
@@ -462,7 +462,7 @@ jobs:
     runs-on: ubuntu-latest
     services:
       kafka:
-        image: apache/kafka-native:3.9.1
+        image: apache/kafka:3.9.1
         env:
           KAFKA_PROCESS_ROLES: broker,controller
           KAFKA_NODE_ID: "1"
diff --git a/docker-compose.yml b/docker-compose.yml
@@ -160,7 +160,7 @@ services:
       - LAMBDA_EXECUTOR=local
   kafka:
     platform: linux/arm64
-    image: apache/kafka-native:3.9.1
+    image: apache/kafka:3.9.1
     ports:
       - "127.0.0.1:9092:9092"
       - "127.0.0.1:9093:9093"
