diff --git a/includes/rate-limit-check.yml b/includes/rate-limit-check.yml
new file mode 100644
index 0000000000000000000000000000000000000000..4464fdb8ae750ad7e4e05a68f114d63fc08739ae
--- /dev/null
+++ b/includes/rate-limit-check.yml
@@ -0,0 +1,8 @@
+# see https://docs.gitlab.com/13.9/ee/user/packages/dependency_proxy/#check-your-docker-hub-rate-limit
+.check-docker-hub-rate-limit:
+  stage: setup
+  image: alpine:latest
+  before_script: apk add curl jq
+  script:
+    - |
+      TOKEN=$(curl "https://auth.docker.io/token?service=registry.docker.io&scope=repository:ratelimitpreview/test:pull" | jq --raw-output .token) && curl --head --header "Authorization: Bearer $TOKEN" "https://registry-1.docker.io/v2/ratelimitpreview/test/manifests/latest" 2>&1
diff --git a/panter-kubernetes-base.yml b/panter-kubernetes-base.yml
index 02a4b49f38c93713accfb23f530b7963ef90bf6b..c0e90e4566b003471a8e5ca25cf3e5501e2b359e 100644
--- a/panter-kubernetes-base.yml
+++ b/panter-kubernetes-base.yml
@@ -8,6 +8,7 @@ include:
   - /includes/semantic-release.yml
   - /includes/kubernetes.yml
   - /includes/open-mr.yml
+  - /includes/rate-limit-check.yml # temporary
 
 variables:
   CUSTOMER_NAME: panter
@@ -253,3 +254,6 @@ stage-deploy:
 
 prod-deploy:
   extends: .prod-deploy
+
+check-docker-hub-rate-limit:
+  extends: .check-docker-hub-rate-limit # temporary