diff --git a/bitnami/elasticsearch/CHANGELOG.md b/bitnami/elasticsearch/CHANGELOG.md
index 5472804729..e50fb46919 100644
--- a/bitnami/elasticsearch/CHANGELOG.md
+++ b/bitnami/elasticsearch/CHANGELOG.md
@@ -1,8 +1,12 @@
# Changelog
-## 21.3.26 (2024-11-22)
+## 21.4.0 (2024-12-10)
-* [bitnami/elasticsearch] Release 21.3.26 ([#30594](https://github.com/bitnami/charts/pull/30594))
+* [bitnami/elasticsearch] Detect non-standard images ([#30880](https://github.com/bitnami/charts/pull/30880))
+
+## 21.3.26 (2024-11-22)
+
+* [bitnami/elasticsearch] Release 21.3.26 (#30594) ([5aad9d6](https://github.com/bitnami/charts/commit/5aad9d642bb534555244da524ef133f2d8a8d7a0)), closes [#30594](https://github.com/bitnami/charts/issues/30594)
## 21.3.25 (2024-11-15)
diff --git a/bitnami/elasticsearch/Chart.lock b/bitnami/elasticsearch/Chart.lock
index e7100b0f77..5ad938820f 100644
--- a/bitnami/elasticsearch/Chart.lock
+++ b/bitnami/elasticsearch/Chart.lock
@@ -1,9 +1,9 @@
dependencies:
- name: kibana
repository: oci://registry-1.docker.io/bitnamicharts
- version: 11.3.1
+ version: 11.3.2
- name: common
repository: oci://registry-1.docker.io/bitnamicharts
- version: 2.27.0
-digest: sha256:75ac295de25d0c5247a731a6f1fa95dc00f681bf1ba606cb4c412065dff68ea2
-generated: "2024-11-22T13:57:20.259181076Z"
+ version: 2.28.0
+digest: sha256:eb74956b2185245ba1a79b7c447ad3ca64016425403fdf98bc16d4b510b43bd3
+generated: "2024-12-10T16:57:11.429603+01:00"
diff --git a/bitnami/elasticsearch/Chart.yaml b/bitnami/elasticsearch/Chart.yaml
index 6937143755..94ac41ef77 100644
--- a/bitnami/elasticsearch/Chart.yaml
+++ b/bitnami/elasticsearch/Chart.yaml
@@ -34,4 +34,4 @@ maintainers:
name: elasticsearch
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/elasticsearch
-version: 21.3.26
+version: 21.4.0
diff --git a/bitnami/elasticsearch/README.md b/bitnami/elasticsearch/README.md
index 217e9c83de..1a181af592 100644
--- a/bitnami/elasticsearch/README.md
+++ b/bitnami/elasticsearch/README.md
@@ -282,6 +282,7 @@ You can enable this initContainer by setting `volumePermissions.enabled` to `tru
| `global.elasticsearch.service.name` | Elasticsearch service name to be used in the Kibana subchart (ignored if kibanaEnabled=false) | `elasticsearch` |
| `global.elasticsearch.service.ports.restAPI` | Elasticsearch service restAPI port to be used in the Kibana subchart (ignored if kibanaEnabled=false) | `9200` |
| `global.kibanaEnabled` | Whether or not to enable Kibana | `false` |
+| `global.security.allowInsecureImages` | Allows skipping image verification | `false` |
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
### Common parameters
@@ -993,6 +994,10 @@ Find more information about how to deal with common errors related to Bitnami's
## Upgrading
+### To 21.4.0
+
+This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
+
### To 21.0.0
This version bumps in a major the version of the Kibana Helm Chart bundled as dependecy, [here](https://github.com/bitnami/charts/tree/main/bitnami/kibana#to-1100) you can see the changes implemented in this Kibana major version.
diff --git a/bitnami/elasticsearch/templates/NOTES.txt b/bitnami/elasticsearch/templates/NOTES.txt
index 2a1499b8ca..a8490fff77 100644
--- a/bitnami/elasticsearch/templates/NOTES.txt
+++ b/bitnami/elasticsearch/templates/NOTES.txt
@@ -141,4 +141,5 @@ In order to replicate the container startup scripts execute this command:
{{- end }}
{{ include "elasticsearch.validateValues" . }}
{{- include "common.warnings.resources" (dict "sections" (list "coordinating" "copyTlsCerts" "data" "ingest" "master" "metrics" "sysctlImage" "volumePermissions") "context" $) }}
-{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }}
\ No newline at end of file
+{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.copyTlsCerts.image .Values.metrics.image .Values.volumePermissions.image .Values.sysctlImage ) "context" $) }}
diff --git a/bitnami/elasticsearch/values.yaml b/bitnami/elasticsearch/values.yaml
index 9a99be1ed1..72291daa2c 100644
--- a/bitnami/elasticsearch/values.yaml
+++ b/bitnami/elasticsearch/values.yaml
@@ -23,6 +23,11 @@ global:
imagePullSecrets: []
defaultStorageClass: ""
storageClass: ""
+ ## Security parameters
+ ##
+ security:
+ ## @param global.security.allowInsecureImages Allows skipping image verification
+ allowInsecureImages: false
elasticsearch:
service:
name: elasticsearch