Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-08-10 14:15:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/chainloop] Detect non-standard images (#30869)

Browse Source 
* [bitnami/chainloop] Detect non-standard images

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>

* Modify values.yaml

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>

* Update CHANGELOG.md

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

* Update README.md with readme-generator-for-helm

Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>

---------

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>
Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com>
Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Carlos Rodríguez Hernández
2024-12-10 18:26:47 +01:00
committed by GitHub
co-authored by Bitnami Containers
parent eb6ce4a326
commit 739c820747
6 changed files with 27 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/chainloop/CHANGELOG.md
+6 -2
View File
@@ -1,8 +1,12 @@
# Changelog
## 2.0.51 (2024-12-10)
## 2.1.0 (2024-12-10)
* [bitnami/chainloop] Release 2.0.51 ([#30849](https://github.com/bitnami/charts/pull/30849))
* [bitnami/chainloop] Detect non-standard images ([#30869](https://github.com/bitnami/charts/pull/30869))
## <small>2.0.51 (2024-12-10)</small>
* [bitnami/chainloop] Release 2.0.51 (#30849) ([e07a5ac](https://github.com/bitnami/charts/commit/e07a5aca0dc34bdbd4e1c074f529b6446563c860)), closes [#30849](https://github.com/bitnami/charts/issues/30849)
## <small>2.0.50 (2024-12-09)</small>
bitnami/chainloop/Chart.lock
+3 -3
View File
@@ -1,12 +1,12 @@
dependencies:
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
version: 2.27.2
version: 2.28.0
- name: postgresql
repository: oci://registry-1.docker.io/bitnamicharts
version: 16.2.5
- name: vault
repository: oci://registry-1.docker.io/bitnamicharts
version: 1.4.31
digest: sha256:85ca4a4804bfe7f53095efd47d7f2c513f496ade7c955957a275a45ba3d8dd3b
generated: "2024-12-05T18:17:51.717870758Z"
digest: sha256:2742944508b3e3da9d74a596bcaa1be50651aa4fc963d46d789ec0b279938670
generated: "2024-12-10T16:51:26.38934+01:00"
bitnami/chainloop/Chart.yaml
+1 -1
View File
@@ -63,4 +63,4 @@ sources:
- https://github.com/bitnami/containers/tree/main/bitnami/chainloop-control-plane-migrations
- https://github.com/bitnami/containers/tree/main/bitnami/chainloop-artifact-cas
- https://github.com/chainloop-dev/chainloop
version: 2.0.51
version: 2.1.0
bitnami/chainloop/README.md
+11 -6
View File
@@ -483,12 +483,13 @@ chainloop config save \
### Global parameters
| Name | Description | Value |
| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| `global.imageRegistry` | Global Docker image registry | `""` |
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
| `development` | Deploys Chainloop pre-configured FOR DEVELOPMENT ONLY. It includes a Vault instance in development mode and pre-configured authentication certificates and passphrases | `true` |
| Name | Description | Value |
| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
| `global.imageRegistry` | Global Docker image registry | `""` |
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
| `global.security.allowInsecureImages` | Allows skipping image verification | `false` |
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
| `development` | Deploys Chainloop pre-configured FOR DEVELOPMENT ONLY. It includes a Vault instance in development mode and pre-configured authentication certificates and passphrases | `true` |
### Common parameters
@@ -1023,6 +1024,10 @@ service_registration "kubernetes" {}` |
## Upgrading
### To 2.1.0
This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
### To 2.0.0
This major updates the PostgreSQL subchart to its newest major, 16.0.0, which uses PostgreSQL 17.x. Follow the [official instructions](https://www.postgresql.org/docs/17/upgrading.html) to upgrade to 17.x.
bitnami/chainloop/templates/NOTES.txt
+1
View File
@@ -70,3 +70,4 @@ https://docs.chainloop.dev/getting-started/installation#configure-cli-optional
{{- include "common.warnings.rollingTag" .Values.cas.image }}
{{- include "common.warnings.rollingTag" .Values.controlplane.migration.image }}
{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.controlplane.image .Values.cas.image .Values.controlplane.migration.image .Values.dex.image) "context" $) }}
{{- include "common.errors.insecureImages" (dict "images" (list .Values.controlplane.image .Values.cas.image .Values.controlplane.migration.image .Values.dex.image) "context" $) }}
bitnami/chainloop/values.yaml
+5
View File
@@ -18,6 +18,11 @@ global:
## - myRegistryKeySecretName
##
imagePullSecrets: []
## Security parameters
##
security:
## @param global.security.allowInsecureImages Allows skipping image verification
allowInsecureImages: false
## Compatibility adaptations for Kubernetes platforms
##