diff --git a/bitnami/elasticsearch/CHANGELOG.md b/bitnami/elasticsearch/CHANGELOG.md index 5472804729..e50fb46919 100644 --- a/bitnami/elasticsearch/CHANGELOG.md +++ b/bitnami/elasticsearch/CHANGELOG.md @@ -1,8 +1,12 @@ # Changelog -## 21.3.26 (2024-11-22) +## 21.4.0 (2024-12-10) -* [bitnami/elasticsearch] Release 21.3.26 ([#30594](https://github.com/bitnami/charts/pull/30594)) +* [bitnami/elasticsearch] Detect non-standard images ([#30880](https://github.com/bitnami/charts/pull/30880)) + +## 21.3.26 (2024-11-22) + +* [bitnami/elasticsearch] Release 21.3.26 (#30594) ([5aad9d6](https://github.com/bitnami/charts/commit/5aad9d642bb534555244da524ef133f2d8a8d7a0)), closes [#30594](https://github.com/bitnami/charts/issues/30594) ## 21.3.25 (2024-11-15) diff --git a/bitnami/elasticsearch/Chart.lock b/bitnami/elasticsearch/Chart.lock index e7100b0f77..5ad938820f 100644 --- a/bitnami/elasticsearch/Chart.lock +++ b/bitnami/elasticsearch/Chart.lock @@ -1,9 +1,9 @@ dependencies: - name: kibana repository: oci://registry-1.docker.io/bitnamicharts - version: 11.3.1 + version: 11.3.2 - name: common repository: oci://registry-1.docker.io/bitnamicharts - version: 2.27.0 -digest: sha256:75ac295de25d0c5247a731a6f1fa95dc00f681bf1ba606cb4c412065dff68ea2 -generated: "2024-11-22T13:57:20.259181076Z" + version: 2.28.0 +digest: sha256:eb74956b2185245ba1a79b7c447ad3ca64016425403fdf98bc16d4b510b43bd3 +generated: "2024-12-10T16:57:11.429603+01:00" diff --git a/bitnami/elasticsearch/Chart.yaml b/bitnami/elasticsearch/Chart.yaml index 6937143755..94ac41ef77 100644 --- a/bitnami/elasticsearch/Chart.yaml +++ b/bitnami/elasticsearch/Chart.yaml @@ -34,4 +34,4 @@ maintainers: name: elasticsearch sources: - https://github.com/bitnami/charts/tree/main/bitnami/elasticsearch -version: 21.3.26 +version: 21.4.0 diff --git a/bitnami/elasticsearch/README.md b/bitnami/elasticsearch/README.md index 217e9c83de..1a181af592 100644 --- a/bitnami/elasticsearch/README.md +++ b/bitnami/elasticsearch/README.md @@ -282,6 +282,7 @@ You can enable this initContainer by setting `volumePermissions.enabled` to `tru | `global.elasticsearch.service.name` | Elasticsearch service name to be used in the Kibana subchart (ignored if kibanaEnabled=false) | `elasticsearch` | | `global.elasticsearch.service.ports.restAPI` | Elasticsearch service restAPI port to be used in the Kibana subchart (ignored if kibanaEnabled=false) | `9200` | | `global.kibanaEnabled` | Whether or not to enable Kibana | `false` | +| `global.security.allowInsecureImages` | Allows skipping image verification | `false` | | `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` | ### Common parameters @@ -993,6 +994,10 @@ Find more information about how to deal with common errors related to Bitnami's ## Upgrading +### To 21.4.0 + +This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850). + ### To 21.0.0 This version bumps in a major the version of the Kibana Helm Chart bundled as dependecy, [here](https://github.com/bitnami/charts/tree/main/bitnami/kibana#to-1100) you can see the changes implemented in this Kibana major version. diff --git a/bitnami/elasticsearch/templates/NOTES.txt b/bitnami/elasticsearch/templates/NOTES.txt index 2a1499b8ca..a8490fff77 100644 --- a/bitnami/elasticsearch/templates/NOTES.txt +++ b/bitnami/elasticsearch/templates/NOTES.txt @@ -141,4 +141,5 @@ In order to replicate the container startup scripts execute this command: {{- end }} {{ include "elasticsearch.validateValues" . }} {{- include "common.warnings.resources" (dict "sections" (list "coordinating" "copyTlsCerts" "data" "ingest" "master" "metrics" "sysctlImage" "volumePermissions") "context" $) }} -{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }} \ No newline at end of file +{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }} +{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }} diff --git a/bitnami/elasticsearch/values.yaml b/bitnami/elasticsearch/values.yaml index 9a99be1ed1..72291daa2c 100644 --- a/bitnami/elasticsearch/values.yaml +++ b/bitnami/elasticsearch/values.yaml @@ -23,6 +23,11 @@ global: imagePullSecrets: [] defaultStorageClass: "" storageClass: "" + ## Security parameters + ## + security: + ## @param global.security.allowInsecureImages Allows skipping image verification + allowInsecureImages: false elasticsearch: service: name: elasticsearch