[bitnami/airflow] Detect non-standard images (#30860)

* [bitnami/airflow] Detect non-standard images Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> * Update values file and README Signed-off-by: Jota Martos <jotamartos@vmware.com> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> * Update values file and README Signed-off-by: Jota Martos <jotamartos@vmware.com> --------- Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com> Signed-off-by: Jota Martos <jotamartos@vmware.com> Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> Co-authored-by: Jota Martos <jotamartos@vmware.com> Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
2026-08-10 14:15:55 +08:00 · 2024-12-10 17:51:42 +01:00
parent 3f553da2a6
commit eb6ce4a326
5 changed files with 19 additions and 3 deletions
@@ -1,8 +1,13 @@
 # Changelog

-## 22.3.3 (2024-12-10)
+## 22.4.0 (2024-12-10)

-* [bitnami/airflow] Release 22.3.3 ([#30856](https://github.com/bitnami/charts/pull/30856))
+* [bitnami/airflow] Detect non-standard images ([#30860](https://github.com/bitnami/charts/pull/30860))
+
+## <small>22.3.3 (2024-12-10)</small>
+
+* [bitnami/*] Add Bitnami Premium to NOTES.txt (#30854) ([3dfc003](https://github.com/bitnami/charts/commit/3dfc00376df6631f0ce54b8d440d477f6caa6186)), closes [#30854](https://github.com/bitnami/charts/issues/30854)
+* [bitnami/airflow] Release 22.3.3 (#30856) ([651f475](https://github.com/bitnami/charts/commit/651f4751d1ac434c11b6706c894fa4cb535b8bbd)), closes [#30856](https://github.com/bitnami/charts/issues/30856)

 ## <small>22.3.2 (2024-12-10)</small>

@@ -39,4 +39,4 @@ maintainers:
 name: airflow
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/airflow
-version: 22.3.3
+version: 22.4.0
@@ -374,6 +374,7 @@ The Bitnami Airflow chart relies on the PostgreSQL chart persistence. This means
 | `global.imageRegistry`                                | Global Docker image registry                                                                                                                                                                                                                                                                                                                                        | `""`    |
 | `global.imagePullSecrets`                             | Global Docker registry secret names as an array                                                                                                                                                                                                                                                                                                                     | `[]`    |
 | `global.defaultStorageClass`                          | Global default StorageClass for Persistent Volume(s)                                                                                                                                                                                                                                                                                                                | `""`    |
+| `global.security.allowInsecureImages`                 | Allows skipping image verification                                                                                                                                                                                                                                                                                                                                  | `false` |
 | `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto`  |
 | `global.compatibility.omitEmptySeLinuxOptions`        | If set to true, removes the seLinuxOptions from the securityContexts when it is set to an empty object                                                                                                                                                                                                                                                              | `false` |

@@ -1283,6 +1284,10 @@ Find more information about how to deal with common errors related to Bitnami's

 ## Upgrading

+### To 22.4.0
+
+This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
+
 ### To 22.2.0

 This minor version no longer expects custom Airflow configuration (set via the `configuration` parameter) to be provided as a string. Instead, it expects a dictionary with the configuration sections/keys/values. Find more info in the [section](#airflow-configuration-file) above.
@@ -129,3 +129,4 @@ To connect to Airflow from outside the cluster, perform the following steps:
 {{- include "common.warnings.rollingTag" .Values.metrics.image }}
 {{- include "common.warnings.resources" (dict "sections" (list "scheduler" "web" "worker" "defaultSidecars.syncDAGsPlugins" "defaultInitContainers.loadDAGsPlugins" "metrics") "context" $) }}
 {{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.metrics.image) "context" $) }}
@@ -18,6 +18,11 @@ global:
  ##
  imagePullSecrets: []
  defaultStorageClass: ""
+  ## Security parameters
+  ##
+  security:
+    ## @param global.security.allowInsecureImages Allows skipping image verification
+    allowInsecureImages: false
  ## Compatibility adaptations for Kubernetes platforms
  ##
  compatibility: