diff --git a/bitnami/airflow/CHANGELOG.md b/bitnami/airflow/CHANGELOG.md index 1ed31776b7..c3e89f2f1e 100644 --- a/bitnami/airflow/CHANGELOG.md +++ b/bitnami/airflow/CHANGELOG.md @@ -1,8 +1,13 @@ # Changelog -## 22.3.3 (2024-12-10) +## 22.4.0 (2024-12-10) -* [bitnami/airflow] Release 22.3.3 ([#30856](https://github.com/bitnami/charts/pull/30856)) +* [bitnami/airflow] Detect non-standard images ([#30860](https://github.com/bitnami/charts/pull/30860)) + +## 22.3.3 (2024-12-10) + +* [bitnami/*] Add Bitnami Premium to NOTES.txt (#30854) ([3dfc003](https://github.com/bitnami/charts/commit/3dfc00376df6631f0ce54b8d440d477f6caa6186)), closes [#30854](https://github.com/bitnami/charts/issues/30854) +* [bitnami/airflow] Release 22.3.3 (#30856) ([651f475](https://github.com/bitnami/charts/commit/651f4751d1ac434c11b6706c894fa4cb535b8bbd)), closes [#30856](https://github.com/bitnami/charts/issues/30856) ## 22.3.2 (2024-12-10) diff --git a/bitnami/airflow/Chart.yaml b/bitnami/airflow/Chart.yaml index 8bb3cfad5e..69f910868a 100644 --- a/bitnami/airflow/Chart.yaml +++ b/bitnami/airflow/Chart.yaml @@ -39,4 +39,4 @@ maintainers: name: airflow sources: - https://github.com/bitnami/charts/tree/main/bitnami/airflow -version: 22.3.3 +version: 22.4.0 diff --git a/bitnami/airflow/README.md b/bitnami/airflow/README.md index f15179e486..6497180fae 100644 --- a/bitnami/airflow/README.md +++ b/bitnami/airflow/README.md @@ -374,6 +374,7 @@ The Bitnami Airflow chart relies on the PostgreSQL chart persistence. This means | `global.imageRegistry` | Global Docker image registry | `""` | | `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` | | `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` | +| `global.security.allowInsecureImages` | Allows skipping image verification | `false` | | `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` | | `global.compatibility.omitEmptySeLinuxOptions` | If set to true, removes the seLinuxOptions from the securityContexts when it is set to an empty object | `false` | @@ -1283,6 +1284,10 @@ Find more information about how to deal with common errors related to Bitnami's ## Upgrading +### To 22.4.0 + +This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850). + ### To 22.2.0 This minor version no longer expects custom Airflow configuration (set via the `configuration` parameter) to be provided as a string. Instead, it expects a dictionary with the configuration sections/keys/values. Find more info in the [section](#airflow-configuration-file) above. diff --git a/bitnami/airflow/templates/NOTES.txt b/bitnami/airflow/templates/NOTES.txt index c3975513c1..7c41b02969 100644 --- a/bitnami/airflow/templates/NOTES.txt +++ b/bitnami/airflow/templates/NOTES.txt @@ -129,3 +129,4 @@ To connect to Airflow from outside the cluster, perform the following steps: {{- include "common.warnings.rollingTag" .Values.metrics.image }} {{- include "common.warnings.resources" (dict "sections" (list "scheduler" "web" "worker" "defaultSidecars.syncDAGsPlugins" "defaultInitContainers.loadDAGsPlugins" "metrics") "context" $) }} {{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }} +{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }} diff --git a/bitnami/airflow/values.yaml b/bitnami/airflow/values.yaml index 77f39ffad9..67f00f3338 100644 --- a/bitnami/airflow/values.yaml +++ b/bitnami/airflow/values.yaml @@ -18,6 +18,11 @@ global: ## imagePullSecrets: [] defaultStorageClass: "" + ## Security parameters + ## + security: + ## @param global.security.allowInsecureImages Allows skipping image verification + allowInsecureImages: false ## Compatibility adaptations for Kubernetes platforms ## compatibility: