diff --git a/bitnami/aspnet-core/CHANGELOG.md b/bitnami/aspnet-core/CHANGELOG.md
index 1bbf9645c8..33d936c600 100644
--- a/bitnami/aspnet-core/CHANGELOG.md
+++ b/bitnami/aspnet-core/CHANGELOG.md
@@ -1,8 +1,12 @@
# Changelog
-## 6.2.21 (2024-11-18)
+## 6.3.0 (2024-12-10)
-* [bitnami/aspnet-core] Release 6.2.21 ([#30502](https://github.com/bitnami/charts/pull/30502))
+* [bitnami/aspnet-core] Detect non-standard images ([#30865](https://github.com/bitnami/charts/pull/30865))
+
+## 6.2.21 (2024-11-18)
+
+* [bitnami/aspnet-core] Release 6.2.21 (#30502) ([29c2afd](https://github.com/bitnami/charts/commit/29c2afd7d4b4f664dc2e6e215ee3d784cb49eae7)), closes [#30502](https://github.com/bitnami/charts/issues/30502)
## 6.2.20 (2024-11-18)
diff --git a/bitnami/aspnet-core/Chart.lock b/bitnami/aspnet-core/Chart.lock
index 8453acde21..27f6424b2d 100644
--- a/bitnami/aspnet-core/Chart.lock
+++ b/bitnami/aspnet-core/Chart.lock
@@ -1,6 +1,6 @@
dependencies:
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
- version: 2.27.0
-digest: sha256:b711ab5874abf868a0c64353a790f17771758cee6f802acb9819be004c8460af
-generated: "2024-11-09T21:10:04.261637356Z"
+ version: 2.28.0
+digest: sha256:5b30f0fa07bb89b01c55fd6258c8ce22a611b13623d4ad83e8fdd1d4490adc74
+generated: "2024-12-10T16:49:58.785042+01:00"
diff --git a/bitnami/aspnet-core/Chart.yaml b/bitnami/aspnet-core/Chart.yaml
index fa7b2b5c80..3e290f45f0 100644
--- a/bitnami/aspnet-core/Chart.yaml
+++ b/bitnami/aspnet-core/Chart.yaml
@@ -31,4 +31,4 @@ maintainers:
name: aspnet-core
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/aspnet-core
-version: 6.2.21
+version: 6.3.0
diff --git a/bitnami/aspnet-core/README.md b/bitnami/aspnet-core/README.md
index 8a3fb6a2df..6523d8a011 100644
--- a/bitnami/aspnet-core/README.md
+++ b/bitnami/aspnet-core/README.md
@@ -205,13 +205,14 @@ For annotations, please see [this document](https://github.com/kubernetes/ingres
### Global parameters
-| Name | Description | Value |
-| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
-| `global.imageRegistry` | Global Docker image registry | `""` |
-| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
-| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
-| `global.storageClass` | DEPRECATED: use global.defaultStorageClass instead | `""` |
-| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
+| Name | Description | Value |
+| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
+| `global.imageRegistry` | Global Docker image registry | `""` |
+| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
+| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
+| `global.storageClass` | DEPRECATED: use global.defaultStorageClass instead | `""` |
+| `global.security.allowInsecureImages` | Allows skipping image verification | `false` |
+| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
### Common parameters
@@ -424,6 +425,10 @@ Find more information about how to deal with common errors related to Bitnami's
## Upgrading
+### To 6.3.0
+
+This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
+
### To 6.0.0
This major bump changes the following security defaults:
diff --git a/bitnami/aspnet-core/templates/NOTES.txt b/bitnami/aspnet-core/templates/NOTES.txt
index cf0f044990..b3abd46b22 100644
--- a/bitnami/aspnet-core/templates/NOTES.txt
+++ b/bitnami/aspnet-core/templates/NOTES.txt
@@ -56,3 +56,4 @@ To access ASP.NET Core from outside the cluster execute the following commands:
{{- include "aspnet-core.validateValues" . }}
{{- include "common.warnings.resources" (dict "sections" (list "") "context" $) }}
{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.appFromExternalRepo.clone.image .Values.appFromExternalRepo.publish.image) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.appFromExternalRepo.clone.image .Values.appFromExternalRepo.publish.image) "context" $) }}
diff --git a/bitnami/aspnet-core/values.yaml b/bitnami/aspnet-core/values.yaml
index 81332d382e..8232fbc5fb 100644
--- a/bitnami/aspnet-core/values.yaml
+++ b/bitnami/aspnet-core/values.yaml
@@ -21,6 +21,11 @@ global:
imagePullSecrets: []
defaultStorageClass: ""
storageClass: ""
+ ## Security parameters
+ ##
+ security:
+ ## @param global.security.allowInsecureImages Allows skipping image verification
+ allowInsecureImages: false
## Compatibility adaptations for Kubernetes platforms
##
compatibility: